$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: zZ0nsfWn7PMWX5InD+RDoULQ8u0g8reF9WtmtZSoYX4= Subject key identifier: 45:8E:91:E2:17:FC:54:C8:BF:7E:29:F9:EA:B7:DC:2E:B8:6B:5A:6F Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0791 Signing time: Sun 26 Apr 2026 21:32:38 +0000 Manifest this update: Sun 26 Apr 2026 21:32:37 +0000 Manifest next update: Sun 03 May 2026 21:32:37 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: cpul7Sn9cP4TMIjMTVU/js4dQDp59zitYbAaa8tUzlE=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 21:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Apr 26 21:32:37 2026 GMT Not After : May 3 21:32:37 2026 GMT Subject: CN=69ee8476-e5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7b:5e:90:cd:3e:ca:e9:51:54:a1:ee:bc:b1: e4:fd:34:06:93:d3:6e:71:56:99:44:62:3a:4a:22: 8c:69:b2:af:f6:38:d0:ba:6d:5d:82:5a:4b:25:75: 68:58:2a:35:c5:61:81:26:6d:df:db:73:b1:1b:3c: 04:82:e8:9f:c6:29:43:e1:53:4f:9d:d1:55:8b:82: 44:32:85:c5:c4:6a:2b:ad:12:b0:e7:88:79:a0:e3: 60:78:a1:fe:ba:3b:74:52:29:21:70:6b:21:e5:8a: 9a:a1:95:70:0f:ac:db:67:93:89:dc:72:4b:dd:64: 90:2d:fb:29:b6:08:a3:65:bf:53:82:cc:9e:e8:61: d0:45:84:04:90:ba:2d:8b:b8:79:4a:2d:fc:87:96: e0:64:04:42:6b:20:d9:7d:de:89:75:8e:f5:52:b7: 62:16:e8:f3:b5:e9:1e:1c:77:dc:77:98:f7:93:a8: de:99:fd:42:e2:33:a8:7d:1e:06:e8:94:32:43:6b: 74:92:fd:81:7d:43:66:22:95:a9:c6:f3:2a:fb:10: e0:ca:ad:6c:d4:c1:f6:3f:63:55:90:5c:cb:2a:91: ea:71:b3:ff:27:78:6c:c4:5e:91:2a:74:26:e1:5b: d1:b1:ca:f9:ab:59:16:18:50:f1:a5:5f:f3:19:ec: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:91:E2:17:FC:54:C8:BF:7E:29:F9:EA:B7:DC:2E:B8:6B:5A:6F X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f2:b6:c6:38:52:a9:07:49:90:5a:02:3f:b2:49:47:d0:5e: 7c:d0:7c:af:5b:ed:cf:40:fd:e0:03:20:6c:ee:2e:7d:ad:a5: 52:6d:ff:e2:33:af:3d:e5:96:07:65:0f:1d:34:25:a3:85:71: 02:dd:e8:c4:91:bc:06:eb:af:77:3f:6d:c5:90:42:c5:4f:7d: 8e:07:a6:f4:28:4a:f9:a8:6e:75:b6:65:49:ba:84:bd:a0:98: a9:3d:fe:e1:1d:1d:24:10:8e:17:f3:8d:e9:a6:74:17:6b:1b: ee:f4:61:04:57:8b:8c:ef:52:fd:bd:49:7a:5c:a2:af:c2:8c: 5f:4b:26:fb:79:cf:80:40:e3:19:cb:00:79:59:52:c4:10:01: 18:c2:2f:17:8a:37:cb:ef:dc:1f:6b:cc:24:d9:4f:7a:a3:76: 31:29:cb:10:49:60:5e:b5:a9:57:5f:38:2d:ad:b7:64:1f:98: 19:87:14:d4:97:ba:ad:67:58:65:74:9c:5f:1a:33:62:07:55: 1a:e6:e3:92:08:f5:cc:99:b6:aa:09:2a:d1:12:08:ad:13:b0: 3d:0c:25:65:f3:4c:36:c1:b7:f3:37:3f:fa:01:dd:8c:f6:f6: 01:f1:b3:53:f7:00:d8:ea:34:b5:5c:08:c0:2a:bb:ff:20:fb: 55:b7:41:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjYwNDI2MjEzMjM3WhcNMjYwNTAzMjEzMjM3WjAYMRYwFAYD VQQDEw02OWVlODQ3Ni1lNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ntekM0+yulRVKHuvLHk/TQGk9NucVaZRGI6SiKMabKv9jjQum1dglpLJXVo WCo1xWGBJm3f23OxGzwEguifxilD4VNPndFVi4JEMoXFxGorrRKw54h5oONgeKH+ ujt0UikhcGsh5YqaoZVwD6zbZ5OJ3HJL3WSQLfsptgijZb9Tgsye6GHQRYQEkLot i7h5Si38h5bgZARCayDZfd6JdY71UrdiFujztekeHHfcd5j3k6jemf1C4jOofR4G 6JQyQ2t0kv2BfUNmIpWpxvMq+xDgyq1s1MH2P2NVkFzLKpHqcbP/J3hsxF6RKnQm 4VvRscr5q1kWGFDxpV/zGeybfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWOkeIX /FTIv34p+eq33C64a1pvMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM/K2xjhSqQdJkFoCP7JJR9BefNB8r1vtz0D94AMgbO4ufa2lUm3/4jOvPeWW B2UPHTQlo4VxAt3oxJG8Buuvdz9txZBCxU99jgem9ChK+ahudbZlSbqEvaCYqT3+ 4R0dJBCOF/ON6aZ0F2sb7vRhBFeLjO9S/b1Jelyir8KMX0sm+3nPgEDjGcsAeVlS xBABGMIvF4o3y+/cH2vMJNlPeqN2MSnLEElgXrWpV184La23ZB+YGYcU1Je6rWdY ZXScXxozYgdVGubjkgj1zJm2qgkq0RIIrROwPQwlZfNMNsG38zc/+gHdjPb2AfGz U/cA2Oo0tVwIwCq7/yD7VbdBZA== -----END CERTIFICATE-----Generated at Tue Apr 28 13:08:49 2026 by rpki-client