$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: i0/VPHSThbzsb6sr2rT/DMlJgei5mCzbVYhAZmO46ts= Subject key identifier: CB:DA:E2:DD:AB:DC:8D:F3:A1:91:86:1C:82:E9:5C:A8:7C:A2:8F:1D Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 10FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 10F5 Signing time: Sat 04 Apr 2026 17:10:26 +0000 Manifest this update: Sat 04 Apr 2026 17:10:25 +0000 Manifest next update: Sat 11 Apr 2026 17:10:25 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: DzKzIsOVenA8Jvu3u59n7aHVHGzyLalUDc+0U4z1xcI=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: nO9q5TdEL+njfhz6y32FkIAcb7ddj0MbI0cgcnBXBes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4351 (0x10ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Apr 4 17:10:25 2026 GMT Not After : Apr 11 17:10:25 2026 GMT Subject: CN=69d14602-de89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:54:8c:77:a6:4d:87:c1:37:ad:d1:4a:40: c3:de:87:cd:14:bd:0d:5f:ad:45:43:5a:1f:c9:58: cd:98:6d:13:c1:0a:0a:46:4f:83:df:50:2a:ef:a3: d7:40:f7:84:c3:89:f0:2f:25:47:cd:89:36:14:84: 0f:41:30:40:19:ee:21:6f:8a:6b:01:d6:8d:80:37: 0d:2b:4b:5b:28:22:1f:55:dd:70:18:25:22:1c:12: 0a:d3:47:81:ca:ab:25:38:e5:5b:06:01:20:b3:e4: e5:60:f1:6f:a0:e9:60:cf:68:69:dc:80:7f:0d:d9: 3a:c1:73:15:7c:fb:ec:6c:51:4a:c7:26:19:aa:8c: cf:eb:fc:b1:6a:51:61:d2:2a:78:ed:13:af:13:35: 6d:e1:fb:f9:d1:d6:32:ef:e0:e3:4c:fb:fb:1f:a4: 09:af:5a:8a:42:fe:29:8b:ad:75:fa:c1:ff:7a:ea: 62:0c:e2:7e:66:6a:04:2e:ad:75:43:15:53:fa:3d: 98:1a:6a:13:78:93:72:ca:27:e5:55:a3:a4:9a:d6: 27:82:2f:9b:45:34:4f:b3:1a:e5:dc:6a:70:f1:18: a1:64:6f:ee:e9:f1:75:74:72:7a:82:d6:e5:57:8c: e6:2f:3f:b3:13:5f:35:85:04:b8:52:11:4e:fd:46: 48:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DA:E2:DD:AB:DC:8D:F3:A1:91:86:1C:82:E9:5C:A8:7C:A2:8F:1D X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:23:39:8c:07:70:d1:21:9b:01:2d:95:a1:d6:6b:92:9f:50: b0:a6:55:60:b6:63:b4:76:9a:2c:ec:44:c7:3f:53:11:0e:dc: 88:5f:d2:0f:ae:0e:46:24:59:3c:9c:4f:8f:98:22:52:42:2b: 2f:4b:ae:b6:2f:bb:cb:cc:98:f6:98:d9:61:35:b2:05:26:75: f9:ba:63:43:6e:d7:fc:e8:72:57:d5:ee:e2:4e:9f:4c:15:89: 55:12:87:3b:7d:fb:e8:ab:d2:db:f2:2a:be:db:a5:53:8e:c5: a3:74:7f:55:59:16:31:c6:9a:d9:a7:66:75:ae:fb:ac:72:25: f5:d6:9e:b6:d9:f5:7d:58:4f:7b:54:62:f2:dd:d4:2e:79:7b: 38:d9:d9:d0:98:8b:e8:f2:6b:2f:8f:3d:bc:48:c8:5d:1c:1e: 24:0d:36:49:93:09:76:b2:79:51:3c:a1:48:7c:a8:a3:ad:55: 1a:d8:2a:b9:c6:90:61:48:ea:54:c8:ec:07:75:f6:b8:b3:be: 64:29:3d:23:b1:9a:97:01:f4:ec:ca:50:d0:fc:8f:29:5a:ae: ad:b7:07:0f:27:37:65:92:26:51:04:0c:81:21:39:bb:32:31: 41:d8:ef:d8:8b:8b:e3:19:a9:19:97:4c:bf:92:92:39:e1:5e: c4:e6:d2:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjYwNDA0MTcxMDI1WhcNMjYwNDExMTcxMDI1WjAYMRYwFAYD VQQDEw02OWQxNDYwMi1kZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOJUjHemTYfBN63RSkDD3ofNFL0NX61FQ1ofyVjNmG0TwQoKRk+D31Aq76PX QPeEw4nwLyVHzYk2FIQPQTBAGe4hb4prAdaNgDcNK0tbKCIfVd1wGCUiHBIK00eB yqslOOVbBgEgs+TlYPFvoOlgz2hp3IB/Ddk6wXMVfPvsbFFKxyYZqozP6/yxalFh 0ip47ROvEzVt4fv50dYy7+DjTPv7H6QJr1qKQv4pi611+sH/eupiDOJ+ZmoELq11 QxVT+j2YGmoTeJNyyiflVaOkmtYngi+bRTRPsxrl3Gpw8RihZG/u6fF1dHJ6gtbl V4zmLz+zE181hQS4UhFO/UZImQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMva4t2r 3I3zoZGGHILpXKh8oo8dMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKyM5jAdw0SGbAS2VodZrkp9QsKZVYLZjtHaaLOxExz9TEQ7ciF/SD64ORiRZ PJxPj5giUkIrL0uuti+7y8yY9pjZYTWyBSZ1+bpjQ27X/OhyV9Xu4k6fTBWJVRKH O3376KvS2/IqvtulU47Fo3R/VVkWMcaa2admda77rHIl9daettn1fVhPe1Ri8t3U Lnl7ONnZ0JiL6PJrL489vEjIXRweJA02SZMJdrJ5UTyhSHyoo61VGtgqucaQYUjq VMjsB3X2uLO+ZCk9I7GalwH07MpQ0PyPKVqurbcHDyc3ZZImUQQMgSE5uzIxQdjv 2IuL4xmpGZdMv5KSOeFexObSng== -----END CERTIFICATE-----Generated at Mon Apr 6 08:41:07 2026 by rpki-client