$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: Ou2Qoyjxg3sKsWV+vo+qMX96Of47OFX20BtWrEa/+GA= Subject key identifier: 17:DC:41:08:6B:69:CF:89:76:08:1C:30:76:C2:6E:DD:7E:61:DB:CC Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 0844 Signing time: Sat 04 Apr 2026 20:39:59 +0000 Manifest this update: Sat 04 Apr 2026 20:39:58 +0000 Manifest next update: Sat 11 Apr 2026 20:39:58 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: bHX93ChGvM1zkoZKGvR/iEn01zNUWZs6UtiH4VmjOBY=) 2: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=) 3: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=) 4: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Apr 4 20:39:58 2026 GMT Not After : Apr 11 20:39:58 2026 GMT Subject: CN=69d1771f-03e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:1c:5d:6c:ee:5a:30:8e:29:dc:05:70:f0: c6:84:8a:a5:a8:a2:8c:d5:2e:8f:4c:0c:0b:3c:e6: ce:48:c9:3a:90:b4:a5:6d:ad:e2:20:12:d1:25:22: 9c:c0:0b:7c:23:79:83:cb:6d:01:11:2c:85:2c:61: 7e:7a:46:41:3f:09:87:83:dd:93:ed:02:13:3d:f8: 33:9a:d9:bb:36:bf:2b:99:eb:44:25:65:97:2f:0e: fd:54:41:f0:5e:f9:9a:cf:7e:99:8b:e2:5e:04:14: 4b:97:d7:6e:7e:26:07:d3:7c:b2:fd:61:71:b0:d9: 36:f1:df:32:97:5b:31:e2:7f:97:84:28:8b:03:62: e8:d6:b1:e4:65:86:84:fe:7d:a1:a2:7a:13:dc:9d: c5:b7:bd:df:b8:9b:3d:87:f3:fa:97:4e:a3:b4:36: 5b:c0:31:a1:9e:5c:19:48:73:ab:52:17:39:18:a0: 11:4d:9d:0e:e4:a8:9f:d6:63:8a:e5:a0:bd:c0:e7: 43:c8:08:92:29:a9:5b:82:a2:de:08:b8:16:65:44: 95:32:1c:1b:9f:58:e9:07:c7:5a:d8:e4:e1:4b:fc: 0c:fa:46:35:45:dd:f3:3c:c5:b0:14:75:d3:35:f0: 37:21:26:17:88:cc:f0:28:aa:34:db:37:db:7f:c0: dd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DC:41:08:6B:69:CF:89:76:08:1C:30:76:C2:6E:DD:7E:61:DB:CC X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:44:c8:bc:6f:2e:32:e8:af:ce:bc:fd:72:be:4e:d3:b7:90: 94:4f:89:1c:bc:81:e0:f1:67:e0:80:d2:7c:1b:e3:ba:44:42: e7:a5:94:ba:47:2a:a7:57:45:18:4a:26:f8:aa:ff:27:3d:02: b7:40:1f:e8:d0:43:24:2d:3f:45:59:1d:69:05:6d:05:87:fa: 34:1b:bf:86:8e:8f:e3:d8:15:f5:fa:3e:a1:a9:35:c9:50:62: ac:10:4c:6b:45:75:3f:29:36:e3:ae:b6:53:c8:d0:93:02:3e: 91:ca:0a:7c:21:36:08:ba:c6:e5:6a:56:9b:0d:16:d0:1c:51: a4:ac:bb:bd:3f:d6:ea:81:fc:4a:af:c3:ca:80:57:7e:e1:7c: 86:7d:cc:f2:cb:93:ec:2d:00:57:d5:bf:0e:2e:7f:08:77:8f: 2f:aa:f2:62:c7:63:21:5d:2a:76:17:e3:a1:41:f4:ae:5f:29: 7e:3a:ab:1c:24:20:16:fb:33:e5:80:e2:90:e6:97:72:85:df: f2:3b:24:c9:59:9c:06:2e:6c:35:2a:15:9a:de:cf:3a:11:c5: 7b:d0:a0:91:21:85:ee:57:ff:7d:e5:28:31:ff:f2:84:e9:14: 8c:cb:ec:db:d3:a4:dd:f1:e9:44:ea:21:56:0c:2a:15:d2:13: fa:43:94:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjYwNDA0MjAzOTU4WhcNMjYwNDExMjAzOTU4WjAYMRYwFAYD VQQDEw02OWQxNzcxZi0wM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AMcXWzuWjCOKdwFcPDGhIqlqKKM1S6PTAwLPObOSMk6kLSlba3iIBLRJSKc wAt8I3mDy20BESyFLGF+ekZBPwmHg92T7QITPfgzmtm7Nr8rmetEJWWXLw79VEHw Xvmaz36Zi+JeBBRLl9dufiYH03yy/WFxsNk28d8yl1sx4n+XhCiLA2Lo1rHkZYaE /n2honoT3J3Ft73fuJs9h/P6l06jtDZbwDGhnlwZSHOrUhc5GKARTZ0O5Kif1mOK 5aC9wOdDyAiSKalbgqLeCLgWZUSVMhwbn1jpB8da2OThS/wM+kY1Rd3zPMWwFHXT NfA3ISYXiMzwKKo02zfbf8DdQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfcQQhr ac+JdggcMHbCbt1+YdvMMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0TIvG8uMuivzrz9cr5O07eQlE+JHLyB4PFn4IDSfBvjukRC56WUukcqp1dF GEom+Kr/Jz0Ct0Af6NBDJC0/RVkdaQVtBYf6NBu/ho6P49gV9fo+oak1yVBirBBM a0V1Pyk24662U8jQkwI+kcoKfCE2CLrG5WpWmw0W0BxRpKy7vT/W6oH8Sq/DyoBX fuF8hn3M8suT7C0AV9W/Di5/CHePL6ryYsdjIV0qdhfjoUH0rl8pfjqrHCQgFvsz 5YDikOaXcoXf8jskyVmcBi5sNSoVmt7POhHFe9CgkSGF7lf/feUoMf/yhOkUjMvs 29Ok3fHpROohVgwqFdIT+kOUKg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:51 2026 by rpki-client