$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: Pl0vOPod0ImjYewcdlVd+e3wYVHg+x3fyvZeFiFhVwQ= Subject key identifier: 5D:30:F0:DC:89:73:B1:39:C2:F4:58:5F:8E:83:46:79:12:9E:D1:DC Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 022F Signing time: Sun 05 Apr 2026 02:16:45 +0000 Manifest this update: Sun 05 Apr 2026 02:16:45 +0000 Manifest next update: Sun 12 Apr 2026 02:16:45 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: b7V7Y+gc+3LQFlJQi4zwyH8wcsE5KIF4AJHhkCqWR70=) 2: 45399802215111F0B94CA13FC4F9AE02.roa (hash: dqhqgG1ahTq17N+e11+nZjz13+WNxO29JRyPa9rncV0=) 3: FD678F40214E11F095B05918C4F9AE02.roa (hash: nQpNjZ3lTAbfu1GiUOC4eyIWzIM6SnWGHo9FozfgyUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Apr 5 02:16:45 2026 GMT Not After : Apr 12 02:16:45 2026 GMT Subject: CN=69d1c60d-2dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:c8:04:cc:44:56:03:55:39:f3:a9:bd:79: f1:8e:cf:24:0f:36:ec:ce:5c:b7:27:68:31:c3:05: 1d:82:9f:42:ab:63:91:46:b9:02:d9:64:a5:78:b5: 42:3a:89:3f:c4:10:1f:a7:09:cc:eb:83:9c:aa:1b: 4e:dd:b8:83:7a:a6:c5:de:31:67:a9:f6:6e:c2:5e: ab:0b:cb:48:01:af:c5:e4:b1:b5:b0:fc:36:2a:31: 27:7b:80:ce:69:37:61:e9:b7:a9:d9:9b:e6:10:75: 5a:2c:c1:22:1f:21:e5:55:55:e5:f9:c7:89:7a:f5: 81:79:0d:0f:88:6d:fa:e0:70:47:b1:cb:b5:74:1d: a3:e8:1a:13:4c:30:c7:84:68:60:69:de:31:ed:9a: 81:1d:d0:0e:22:92:0a:55:69:7a:c2:27:b0:4d:05: ff:cb:5d:8a:0f:a3:74:86:e6:07:f8:27:42:3f:c0: 88:e4:0f:66:1a:fa:e1:80:47:bf:d5:11:3d:6e:9a: a2:8b:ab:21:29:95:45:34:a4:41:44:a4:7b:f0:8e: cb:9c:9e:84:20:ee:9d:e5:ed:ba:36:33:36:4e:e9: e2:da:de:0d:64:a8:e2:8f:15:76:1c:3a:e9:7f:5b: af:da:b8:4a:8b:1e:36:20:7f:a4:8a:51:9c:f1:db: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:F0:DC:89:73:B1:39:C2:F4:58:5F:8E:83:46:79:12:9E:D1:DC X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:26:22:be:d1:82:d0:8c:38:ba:02:62:f8:10:bf:97:b7: 85:be:29:9c:3a:00:8f:b6:59:e0:91:2a:3f:fd:77:72:52:04: ad:8e:84:58:06:99:10:f8:41:1d:6d:d5:c8:9b:8e:51:72:4a: 76:d7:b2:39:af:08:09:1f:0a:64:ec:98:f4:c3:15:01:47:36: f8:40:26:c0:b2:cf:f4:e5:6d:eb:ea:bd:9a:23:66:18:35:35: f9:e6:4b:3f:55:41:4d:53:33:65:eb:b8:22:f4:e2:56:be:f9: bf:be:61:8f:0c:3c:57:3b:71:87:52:b0:13:cf:87:d1:30:a9: 30:d5:2b:d7:24:ba:c4:83:48:e2:c4:c2:02:dc:53:d9:1b:54: 2c:49:91:7f:1e:b2:3b:f7:4a:64:09:c5:aa:1d:94:4b:c1:65: 27:e5:ba:53:bd:d0:5e:6b:c0:a0:f6:6f:23:2a:98:f1:6e:e6: 8b:0b:e1:62:22:62:7d:b5:1e:89:03:34:5f:a9:3b:33:8e:29: f0:c9:72:c3:c7:cd:0a:03:e9:d9:a5:3e:ff:c6:7a:cd:ba:ac: d9:94:09:94:20:38:e8:81:e4:13:11:88:ff:3a:f6:8a:a5:dc: 46:64:06:be:4a:ac:52:4c:cb:67:a7:99:44:42:18:63:0c:86: 41:47:cf:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjYwNDA1MDIxNjQ1WhcNMjYwNDEyMDIxNjQ1WjAYMRYwFAYD VQQDEw02OWQxYzYwZC0yZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqczIBMxEVgNVOfOpvXnxjs8kDzbszly3J2gxwwUdgp9Cq2ORRrkC2WSleLVC Ook/xBAfpwnM64OcqhtO3biDeqbF3jFnqfZuwl6rC8tIAa/F5LG1sPw2KjEne4DO aTdh6bep2ZvmEHVaLMEiHyHlVVXl+ceJevWBeQ0PiG364HBHscu1dB2j6BoTTDDH hGhgad4x7ZqBHdAOIpIKVWl6wiewTQX/y12KD6N0huYH+CdCP8CI5A9mGvrhgEe/ 1RE9bpqii6shKZVFNKRBRKR78I7LnJ6EIO6d5e26NjM2Tuni2t4NZKjijxV2HDrp f1uv2rhKix42IH+kilGc8dufbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0w8NyJ c7E5wvRYX46DRnkSntHcMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbVYmIr7RgtCMOLoCYvgQv5e3hb4pnDoAj7ZZ4JEqP/13clIErY6EWAaZEPhB HW3VyJuOUXJKdteyOa8ICR8KZOyY9MMVAUc2+EAmwLLP9OVt6+q9miNmGDU1+eZL P1VBTVMzZeu4IvTiVr75v75hjww8Vztxh1KwE8+H0TCpMNUr1yS6xINI4sTCAtxT 2RtULEmRfx6yO/dKZAnFqh2US8FlJ+W6U73QXmvAoPZvIyqY8W7miwvhYiJifbUe iQM0X6k7M44p8Mlyw8fNCgPp2aU+/8Z6zbqs2ZQJlCA46IHkExGI/zr2iqXcRmQG vkqsUkzLZ6eZREIYYwyGQUfPJg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:06 2026 by rpki-client