$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: Zol6gRK/a8JIyDMlcuegYVH1jO4e88nl5l7iOU1x/nc= Subject key identifier: BF:6D:EA:85:F8:4A:3C:7C:5A:EE:16:06:03:30:A9:BB:DA:17:B4:A2 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C9E Signing time: Sat 04 Apr 2026 16:05:15 +0000 Manifest this update: Sat 04 Apr 2026 16:05:15 +0000 Manifest next update: Sat 11 Apr 2026 16:05:15 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: OaQyZ/xTXwbxdbCa1Yrg0hXDhyEs4yKHkF/qidhF5hA=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: WL85dPtJ+Rmno9CWdZLXpdoXzpJ7FKS7hpAe8UEzwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7353 (0x1cb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Apr 4 16:05:15 2026 GMT Not After : Apr 11 16:05:15 2026 GMT Subject: CN=69d136bb-ca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:66:e1:ca:3e:af:3c:e2:58:5b:3e:ea:08:23: 0c:17:6f:d6:55:5d:d7:36:ce:ad:ca:9b:3e:46:7c: e2:da:0b:85:b8:ce:ba:3d:87:9a:8f:a5:14:8b:6d: 20:aa:4e:92:ca:81:f1:91:5e:12:e3:49:84:bc:0b: 1e:db:87:11:cf:9b:64:24:3d:52:36:49:0d:4f:68: fa:b7:bd:48:cd:49:6d:6a:27:e8:66:f6:09:4a:3b: c0:40:63:3d:c6:3f:2e:d6:20:8d:94:18:7b:88:cf: 81:6e:ce:55:fd:b7:ce:43:ea:36:62:16:c9:b2:55: 87:8a:9e:42:6e:09:d3:56:92:a5:51:74:8e:ef:0c: 6c:27:bd:a5:4c:d6:76:b3:3c:c5:7c:08:25:8f:51: 73:55:dc:60:18:72:c6:c7:78:e0:1c:72:3b:77:bf: 69:a7:dd:72:78:e0:73:af:5b:ac:d1:8f:9a:cf:f8: ea:47:d4:b5:b3:2b:ac:cf:e0:18:c7:7d:b7:64:32: 4c:ff:98:4d:ee:ae:62:4f:36:69:91:9c:60:02:d6: f6:ff:57:fb:55:0f:fe:b5:be:1e:f8:b0:01:4b:22: 20:e7:a4:06:f7:6b:71:da:66:9f:23:a0:26:e5:15: 07:f8:bf:34:a5:60:77:bb:ee:8a:3b:2c:6e:75:5c: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:EA:85:F8:4A:3C:7C:5A:EE:16:06:03:30:A9:BB:DA:17:B4:A2 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:e6:ee:4c:a3:d4:cd:9b:14:4f:d6:e2:25:f3:00:52:cd: ed:84:36:2c:1b:fe:10:98:84:4a:96:ba:04:c5:6f:68:db:7b: 7a:13:87:0c:ea:6a:67:9d:13:da:e0:65:ff:ef:93:24:78:a3: ed:91:16:99:c3:8a:cd:ae:32:51:ed:8b:63:61:de:1d:07:d9: 08:50:7f:5f:23:9d:d3:e4:4c:e5:41:46:2f:24:d7:b6:01:0e: b5:25:83:71:40:9a:32:58:0c:f2:55:8a:21:a8:3a:6f:6f:1a: 29:da:20:bf:7e:2a:17:e7:37:21:69:08:db:c5:c7:94:9b:0a: f1:d0:68:dd:37:6a:fe:7e:e4:27:3b:45:f8:79:50:97:be:2f: 26:91:c9:31:50:b3:18:3f:ec:ad:bc:4c:69:2d:1b:27:71:12: 04:3c:89:e5:1b:a8:70:8f:67:9d:09:23:b7:80:7e:41:e2:7d: 1c:42:e4:ce:02:ea:be:4d:ab:e0:9e:bf:11:58:99:34:ba:98: e0:64:d4:e0:a1:50:bb:ee:65:4b:ad:5c:69:83:89:16:a6:8a: ec:f8:b5:ae:4b:5e:45:00:b4:f2:46:fe:ae:cd:5c:99:1a:e5: e0:d2:f1:70:d0:26:ff:65:03:74:58:a8:6a:c1:af:58:86:92: f5:1a:52:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjYwNDA0MTYwNTE1WhcNMjYwNDExMTYwNTE1WjAYMRYwFAYD VQQDEw02OWQxMzZiYi1jYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymbhyj6vPOJYWz7qCCMMF2/WVV3XNs6typs+Rnzi2guFuM66PYeaj6UUi20g qk6SyoHxkV4S40mEvAse24cRz5tkJD1SNkkNT2j6t71IzUltaifoZvYJSjvAQGM9 xj8u1iCNlBh7iM+Bbs5V/bfOQ+o2YhbJslWHip5CbgnTVpKlUXSO7wxsJ72lTNZ2 szzFfAglj1FzVdxgGHLGx3jgHHI7d79pp91yeOBzr1us0Y+az/jqR9S1syusz+AY x323ZDJM/5hN7q5iTzZpkZxgAtb2/1f7VQ/+tb4e+LABSyIg56QG92tx2mafI6Am 5RUH+L80pWB3u+6KOyxudVyOOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9t6oX4 Sjx8Wu4WBgMwqbvaF7SiMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJHm7kyj1M2bFE/W4iXzAFLN7YQ2LBv+EJiESpa6BMVvaNt7ehOHDOpqZ50T 2uBl/++TJHij7ZEWmcOKza4yUe2LY2HeHQfZCFB/XyOd0+RM5UFGLyTXtgEOtSWD cUCaMlgM8lWKIag6b28aKdogv34qF+c3IWkI28XHlJsK8dBo3Tdq/n7kJztF+HlQ l74vJpHJMVCzGD/srbxMaS0bJ3ESBDyJ5RuocI9nnQkjt4B+QeJ9HELkzgLqvk2r 4J6/EViZNLqY4GTU4KFQu+5lS61caYOJFqaK7Pi1rkteRQC08kb+rs1cmRrl4NLx cNAm/2UDdFioasGvWIaS9RpSwA== -----END CERTIFICATE-----Generated at Mon Apr 6 15:13:59 2026 by rpki-client