$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json) Hash identifier: lWGlhT+kiy+AdyNt/VWqGkCMlDpGg7TaBVGaMZUZ+iQ= Subject key identifier: B1:19:37:54:C2:DD:25:7A:08:C1:43:5A:38:32:7F:80:9D:0F:BA:4A Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft Manifest number: 0304 Signing time: Sun 03 May 2026 01:35:45 +0000 Manifest this update: Sun 03 May 2026 01:35:45 +0000 Manifest next update: Sun 10 May 2026 01:35:45 +0000 Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: CahWkNq3R8GncVmuNU9KEWogszUDK0iUt4uKqKzhkZA=) 2: E1870478616C11F0A254E10BC4F9AE02.roa (hash: thzu/t+qYSRYUbFk3e1FVK1vtAgWZIhclmN6XWz4ZNk=) 3: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: OcYvm4nslT9HEXifrXrZRqsFAS3xrQM7cYF+95ESEVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: May 3 01:35:45 2026 GMT Not After : May 10 01:35:45 2026 GMT Subject: CN=69f6a671-e976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:32:35:c0:e3:1c:69:b8:7f:ab:d1:28:52: 1d:b6:ff:cf:ec:df:e9:ac:2c:d1:86:2e:6f:8c:a0: be:f8:99:10:b0:f8:bb:67:5b:b9:22:98:ae:09:85: 47:c5:58:7b:0a:e8:4a:77:f8:b0:bf:88:42:d9:37: e6:10:65:df:87:fd:2a:bf:6c:c9:07:58:11:00:35: da:c0:11:75:ee:8d:75:61:db:36:9b:7a:88:45:db: 22:57:10:20:f9:b5:23:79:dd:ff:0e:2b:7d:06:67: ee:47:fb:78:ce:e3:0f:c7:56:d9:77:32:9a:db:df: e4:1c:70:fd:3d:f6:c4:9f:86:34:da:5f:63:3a:67: af:6a:83:53:85:6d:3f:98:e3:58:30:16:b9:48:89: 98:96:e9:c9:d8:dc:05:13:b9:52:44:81:e4:95:23: 57:15:76:58:08:c3:05:ba:0c:54:2c:8a:68:17:3d: f3:1c:fc:0b:22:bd:ca:f2:54:c4:41:8a:97:4e:61: e4:32:8f:14:7d:e5:ad:ff:81:78:3b:bb:69:04:38: 2b:d8:a7:1f:ac:50:87:f5:93:c1:ac:2b:e9:c9:02: 73:d3:e6:4c:2f:26:35:3a:2d:b0:d2:a0:df:ca:6d: 58:02:45:91:ed:6f:00:f2:30:10:6f:86:4b:a3:f4: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:19:37:54:C2:DD:25:7A:08:C1:43:5A:38:32:7F:80:9D:0F:BA:4A X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:32:32:a7:e1:7e:e7:53:f4:3e:78:24:92:49:b3:01:c9:68: 45:3d:90:b4:67:4f:d6:cf:41:f1:78:aa:f0:f8:30:f0:f5:8e: 12:8f:07:2e:12:c7:40:ee:1d:c7:26:9a:ed:d5:95:d8:70:38: 7e:7d:6f:56:b5:d5:1d:2a:13:4d:79:ef:cf:12:59:5d:bf:ca: 8d:e7:98:f9:47:1d:d0:45:73:28:71:b3:af:1e:b6:4f:27:66: 75:9e:86:ff:72:d4:c1:b6:69:21:1e:f6:4b:3d:34:69:11:24: c6:d4:50:b7:b9:a8:81:ea:ab:f5:15:7c:c5:d7:45:ad:9f:e1: 75:0e:00:37:08:b7:92:a9:52:b6:82:86:fe:51:22:4f:44:5f: 4a:3b:9a:8b:ea:40:c5:93:7d:03:c6:f0:3f:f4:21:2d:95:d3: eb:a3:10:57:d5:a1:5e:59:0c:25:f7:73:91:f8:5e:5f:9b:7b: f0:ff:fb:de:8c:f0:14:d9:32:60:d1:bd:d1:16:b5:51:54:ce: b3:6d:64:f6:70:5b:6c:ea:96:17:17:a8:dc:41:7f:82:5e:8d: 47:d7:05:e2:9c:bf:06:77:21:da:26:d5:a5:7e:2c:07:ed:dd: 66:ec:d1:7d:c4:88:4e:d8:27:4d:20:f6:76:d7:4d:5b:50:10: f6:df:34:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjYwNTAzMDEzNTQ1WhcNMjYwNTEwMDEzNTQ1WjAYMRYwFAYD VQQDEw02OWY2YTY3MS1lOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YgyNcDjHGm4f6vRKFIdtv/P7N/prCzRhi5vjKC++JkQsPi7Z1u5IpiuCYVH xVh7CuhKd/iwv4hC2TfmEGXfh/0qv2zJB1gRADXawBF17o11Yds2m3qIRdsiVxAg +bUjed3/Dit9BmfuR/t4zuMPx1bZdzKa29/kHHD9PfbEn4Y02l9jOmevaoNThW0/ mONYMBa5SImYlunJ2NwFE7lSRIHklSNXFXZYCMMFugxULIpoFz3zHPwLIr3K8lTE QYqXTmHkMo8UfeWt/4F4O7tpBDgr2KcfrFCH9ZPBrCvpyQJz0+ZMLyY1Oi2w0qDf ym1YAkWR7W8A8jAQb4ZLo/RkvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEZN1TC 3SV6CMFDWjgyf4CdD7pKMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o Y1JzQUp6SlFSR19odEpPTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADDIyp+F+51P0PngkkkmzAcloRT2QtGdP1s9B8Xiq8Pgw8PWOEo8HLhLHQO4d xyaa7dWV2HA4fn1vVrXVHSoTTXnvzxJZXb/KjeeY+Ucd0EVzKHGzrx62TydmdZ6G /3LUwbZpIR72Sz00aREkxtRQt7mogeqr9RV8xddFrZ/hdQ4ANwi3kqlStoKG/lEi T0RfSjuai+pAxZN9A8bwP/QhLZXT66MQV9WhXlkMJfdzkfheX5t78P/73ozwFNky YNG90Ra1UVTOs21k9nBbbOqWFxeo3EF/gl6NR9cF4py/Bnch2ibVpX4sB+3dZuzR fcSITtgnTSD2dtdNW1AQ9t80jA== -----END CERTIFICATE-----Generated at Mon May 4 19:01:17 2026 by rpki-client