$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft File: 9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json) Hash identifier: gRVZbCl473XCO/nsmvhIO5Sz5vk+7dDurlWdTlv9FeA= Subject key identifier: 17:BF:98:86:64:36:D2:29:3D:9C:6F:4E:96:FE:89:B5:82:D1:1C:45 Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft Manifest number: 29 Signing time: Tue 21 Apr 2026 08:39:06 +0000 Manifest this update: Tue 21 Apr 2026 08:39:05 +0000 Manifest next update: Tue 28 Apr 2026 08:39:05 +0000 Files and hashes: 1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: Cauf6KijuRZ/Vvw9uuQpso7J0qCyCb216StGCEKy1WY=) 2: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=) 3: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C Validity Not Before: Apr 21 08:39:05 2026 GMT Not After : Apr 28 08:39:05 2026 GMT Subject: CN=69e737aa-f98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:e3:62:ad:8c:a1:59:1c:8f:98:15:3f:24: 86:31:6b:e8:f4:e7:4d:dd:c7:0a:55:40:82:13:af: 45:6c:5d:21:4b:ae:7b:64:70:e4:0a:f1:1e:df:84: 10:12:7c:db:95:fc:14:2f:f4:4b:28:33:dc:8c:9f: ab:0b:c2:0f:69:ad:d6:07:df:00:77:e4:aa:c1:f3: ff:fc:31:2a:35:70:47:ae:a4:97:d7:06:52:0a:e8: 32:87:19:5c:91:ee:fc:a3:e1:14:78:01:da:b9:00: ca:a2:e7:3e:fe:ab:f5:e7:7a:2c:f6:22:5b:b2:3f: a9:38:b0:cd:55:24:e5:21:59:ce:b9:dc:2a:7b:75: 33:e5:ea:ea:4e:c5:09:4e:cf:fe:f9:f2:06:d8:e7: 60:b8:87:72:fc:41:f1:d7:0a:7e:c9:1e:54:7a:a4: f2:30:93:42:93:04:82:55:89:57:9c:c8:e5:f9:1c: 21:fc:5c:78:30:bf:7d:1e:d9:1f:62:9b:b3:3b:f4: 12:1f:af:2b:8e:65:31:04:49:98:f5:08:e6:e7:97: 5a:0e:24:13:77:37:ba:3e:1f:6a:58:2f:f1:59:7f: 6d:89:20:f1:0a:f5:9b:bc:c5:6c:da:80:2c:05:1e: d4:cb:ad:4b:3e:00:0c:79:1d:79:e5:ad:96:ef:98: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BF:98:86:64:36:D2:29:3D:9C:6F:4E:96:FE:89:B5:82:D1:1C:45 X509v3 Authority Key Identifier: keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:1f:53:fa:4b:8e:28:bf:76:a7:08:69:0b:2f:fa:4c:5a: f8:ea:31:c0:99:32:64:71:00:0d:d9:33:65:ad:9c:55:6e:52: 7f:16:90:b5:3c:47:d1:26:ad:24:b6:15:ea:df:e0:ec:43:9c: 16:50:99:89:c4:9b:c9:93:9f:da:3e:f6:00:2e:8c:23:be:c6: 96:df:cb:f5:37:59:26:9c:1e:4d:65:41:b9:c5:9a:2f:b3:ae: e8:5d:3f:9d:bc:3d:c2:9e:a9:3a:f8:49:da:e4:db:27:1e:3a: 8a:22:eb:f7:be:70:9a:a3:12:8e:55:63:28:18:05:12:93:ba: 1c:b1:6d:57:78:76:cc:34:a7:68:1c:1b:df:5b:37:97:d0:ce: 02:c6:2a:aa:79:37:98:46:ad:4c:03:46:7b:8c:4d:2c:a9:24: d3:e0:28:b8:38:78:0d:7d:91:01:b9:d4:b3:c3:aa:1c:35:c2: 90:8c:e4:66:f1:1b:2f:15:03:d0:c0:59:87:c6:6a:d8:69:ce: c0:61:ba:82:ff:49:a2:4b:bd:ae:71:01:aa:04:25:70:07:a8: b8:72:86:f1:58:69:8a:8a:44:5c:73:f6:87:44:b4:31:be:ca: 5c:d7:6d:2c:2b:6e:14:d1:87:4f:cd:b9:81:c2:4c:70:05:ff: 3f:eb:03:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjg4NjExMC8GA1UEBRMoRjY4M0YyMjI0NDhDNkE0ODVERDhGRURGRTFFOURDNzQ0 MjEzRkEzQzAeFw0yNjA0MjEwODM5MDVaFw0yNjA0MjgwODM5MDVaMBgxFjAUBgNV BAMTDTY5ZTczN2FhLWY5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr0ONirYyhWRyPmBU/JIYxa+j0503dxwpVQIITr0VsXSFLrntkcOQK8R7fhBAS fNuV/BQv9EsoM9yMn6sLwg9prdYH3wB35KrB8//8MSo1cEeupJfXBlIK6DKHGVyR 7vyj4RR4Adq5AMqi5z7+q/Xneiz2IluyP6k4sM1VJOUhWc653Cp7dTPl6upOxQlO z/758gbY52C4h3L8QfHXCn7JHlR6pPIwk0KTBIJViVecyOX5HCH8XHgwv30e2R9i m7M79BIfryuOZTEESZj1CObnl1oOJBN3N7o+H2pYL/FZf22JIPEK9Zu8xWzagCwF HtTLrUs+AAx5HXnlrZbvmLylAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF7+YhmQ2 0ik9nG9Olv6JtYLRHEUwHwYDVR0jBBgwFoAU9oPyIkSMakhd2P7f4encdEIT+jww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2Lzg2MzI4MDk4MTBB MzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWtoZDJQN2Y0ZW5jZEVJVC1q dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOW9QeUlrU01ha2hkMlA3ZjRlbmNkRUlULWp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy ODg2Lzg2MzI4MDk4MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWto ZDJQN2Y0ZW5jZEVJVC1qdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAybh9T+kuOKL92pwhpCy/6TFr46jHAmTJkcQAN2TNlrZxVblJ/FpC1PEfRJq0k thXq3+DsQ5wWUJmJxJvJk5/aPvYALowjvsaW38v1N1kmnB5NZUG5xZovs67oXT+d vD3Cnqk6+Ena5NsnHjqKIuv3vnCaoxKOVWMoGAUSk7ocsW1XeHbMNKdoHBvfWzeX 0M4CxiqqeTeYRq1MA0Z7jE0sqSTT4Ci4OHgNfZEBudSzw6ocNcKQjORm8RsvFQPQ wFmHxmrYac7AYbqC/0miS72ucQGqBCVwB6i4cobxWGmKikRcc/aHRLQxvspc120s K24U0YdPzbmBwkxwBf8/6wM5 -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:22 2026 by rpki-client