$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft File: JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json) Hash identifier: YGLtN1afqJSNmhYxFnIVK+rOxu9wFXx6/DPpyMS8SzA= Subject key identifier: D2:13:D7:91:66:45:F6:94:46:09:9D:61:BF:74:49:F1:26:08:99:D9 Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft Manifest number: 0100 Signing time: Sun 05 Apr 2026 05:35:21 +0000 Manifest this update: Sun 05 Apr 2026 05:35:20 +0000 Manifest next update: Sun 12 Apr 2026 05:35:20 +0000 Files and hashes: 1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: j8/QCq6eplyrQZ6MDCLQhrU9agJldxJrr4UREHaE4rE=) 2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: aDcnlxap4XDDt9ANdIB0EdEbEwHi3xK45nvSfh/8fvE=) 3: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: VQA6pjuu/o8U/g10GJhyRj7RgcZTt+KPBg7nxgVDWd0=) 4: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: G5O36SvC9VS8QmGgtVxcSVr/0IErmRE6s7oSkFzNs38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Validity Not Before: Apr 5 05:35:20 2026 GMT Not After : Apr 12 05:35:20 2026 GMT Subject: CN=69d1f498-c6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:ad:6e:82:16:10:8a:61:c6:24:73:35:18: 64:54:09:c1:4a:fc:26:a1:f2:0c:2f:fa:25:09:a9: 71:b9:40:06:ea:9b:e5:62:da:5d:a8:45:6a:b1:bc: cc:49:5e:6e:d5:14:ba:cd:5c:d8:99:27:02:4d:2e: 50:3a:c3:2b:99:62:e5:48:4a:b5:bc:d3:f5:0c:f0: a2:a2:61:e0:2e:a0:a8:5e:fd:b6:41:f0:96:49:eb: 31:3a:e3:e8:0c:d6:f4:a6:ec:0c:8f:8e:6c:46:a4: 80:c9:56:a6:01:fa:ca:93:15:32:07:0a:33:f9:b7: 68:54:a9:24:db:e9:5e:a6:e0:fb:26:24:11:93:89: 52:84:75:21:8a:75:b4:49:68:37:69:7e:99:1d:df: c9:04:24:47:0f:10:89:2f:8c:64:31:c7:04:7e:de: 04:e2:77:fa:82:f8:3b:7e:87:5b:c7:00:43:7e:ef: 95:29:c2:7f:c5:48:6b:69:45:05:09:d0:5f:cd:57: 27:a9:6e:41:a1:b7:72:b7:d6:90:30:72:a6:42:99: a7:33:40:0d:96:0a:e2:0e:53:bf:ee:06:23:69:65: 3d:9d:fd:09:d3:b7:4e:2f:c2:bd:95:7f:e1:74:ef: 33:14:c2:49:c5:3d:76:8a:aa:96:b0:27:33:10:38: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:13:D7:91:66:45:F6:94:46:09:9D:61:BF:74:49:F1:26:08:99:D9 X509v3 Authority Key Identifier: keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e3:26:08:34:b6:e6:82:d9:d8:f9:09:72:b7:7a:01:84:9c: e0:ea:8f:16:d4:fb:bd:2c:57:10:d5:aa:83:f9:c6:91:6c:72: 4b:c4:60:1f:e0:da:5e:b2:e3:51:a4:1c:d4:48:56:3b:5f:e9: 1e:74:80:a5:43:99:b3:20:51:03:c3:9d:50:12:c2:eb:b3:6e: 31:56:83:bf:3e:67:b6:02:12:32:71:90:f4:3f:7f:29:01:8f: a2:7e:74:dd:e2:32:21:72:32:27:d7:7c:74:ea:1c:76:4e:34: 51:65:61:a9:b5:c8:5b:a5:b3:d9:f2:9b:3d:cf:ed:7f:33:44: 24:dd:a8:11:ed:be:63:38:85:0f:f8:56:a1:5c:75:30:01:f9: dd:6e:49:a1:d8:13:b6:b1:e3:d0:59:c7:ca:91:8f:46:55:cd: 4b:d0:c0:e5:05:7e:5b:e0:a7:47:79:f5:27:b9:cb:71:fa:07: f5:3f:cd:6a:03:ba:50:4c:6f:82:9b:01:ff:b4:d2:e3:a5:fe: ba:7f:35:25:7a:b4:6b:7a:67:4c:ac:a6:6e:da:e0:56:3c:79: 83:f2:24:65:d8:a4:4c:10:b5:f3:58:0f:22:4b:30:c9:57:42: b8:ee:43:74:1b:74:bf:89:a4:d5:fb:11:38:c9:08:d5:79:40: 4e:9f:2f:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMkExMTAvBgNVBAUTKDI3MjJDNUFCQkVFNjNCNzZCOURBOTY2Qzc4RDczQTY2 NTdEMjQ0RUIwHhcNMjYwNDA1MDUzNTIwWhcNMjYwNDEyMDUzNTIwWjAYMRYwFAYD VQQDEw02OWQxZjQ5OC1jNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj6tboIWEIphxiRzNRhkVAnBSvwmofIML/olCalxuUAG6pvlYtpdqEVqsbzM SV5u1RS6zVzYmScCTS5QOsMrmWLlSEq1vNP1DPCiomHgLqCoXv22QfCWSesxOuPo DNb0puwMj45sRqSAyVamAfrKkxUyBwoz+bdoVKkk2+lepuD7JiQRk4lShHUhinW0 SWg3aX6ZHd/JBCRHDxCJL4xkMccEft4E4nf6gvg7fodbxwBDfu+VKcJ/xUhraUUF CdBfzVcnqW5Bobdyt9aQMHKmQpmnM0ANlgriDlO/7gYjaWU9nf0J07dOL8K9lX/h dO8zFMJJxT12iqqWsCczEDieRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIT15Fm RfaURgmdYb90SfEmCJnZMB8GA1UdIwQYMBaAFCcixau+5jt2udqWbHjXOmZX0kTr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9CMUQ0QTU5Q0FF M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8zYTUycFpzZU5jNlpsZlNS T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyQS9CMUQ0QTU5Q0FFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8z YTUycFpzZU5jNlpsZlNST3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfeMmCDS25oLZ2PkJcrd6AYSc4OqPFtT7vSxXENWqg/nGkWxyS8RgH+DaXrLj UaQc1EhWO1/pHnSApUOZsyBRA8OdUBLC67NuMVaDvz5ntgISMnGQ9D9/KQGPon50 3eIyIXIyJ9d8dOocdk40UWVhqbXIW6Wz2fKbPc/tfzNEJN2oEe2+YziFD/hWoVx1 MAH53W5JodgTtrHj0FnHypGPRlXNS9DA5QV+W+CnR3n1J7nLcfoH9T/NagO6UExv gpsB/7TS46X+un81JXq0a3pnTKymbtrgVjx5g/IkZdikTBC181gPIkswyVdCuO5D dBt0v4mk1fsROMkI1XlATp8voA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:46 2026 by rpki-client