$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: YISzjuz6jvNcr9sAlYcc8l50G2s19shcBg2AqasCG0I= Subject key identifier: AE:7A:45:D2:B1:2E:8D:4A:E0:49:E6:DD:E7:61:48:AF:AE:1D:45:BA Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0AC9 Signing time: Sun 26 Apr 2026 19:38:15 +0000 Manifest this update: Sun 26 Apr 2026 19:38:14 +0000 Manifest next update: Sun 03 May 2026 19:38:14 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: jGOlagtSGHKKvh3N5gWrhKIpdrzSyqwayd0gNRnO0U4=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Apr 26 19:38:14 2026 GMT Not After : May 3 19:38:14 2026 GMT Subject: CN=69ee69a7-e24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:35:f4:1d:28:a4:5e:f9:03:9c:9c:2b:13: f0:dc:b6:a9:a4:eb:8a:75:d7:f4:9f:ba:50:3d:86: 10:af:02:20:50:3d:97:d3:d1:5f:d8:4d:84:0e:79: 0e:d8:a8:2e:c2:93:82:a8:de:24:5b:d4:b0:3e:6e: ad:ca:5d:91:9c:d4:ba:11:0d:4b:3b:33:70:04:39: 19:11:60:e4:da:53:af:ba:9c:49:a5:30:94:26:86: f5:19:86:37:00:cf:4a:db:2b:da:ff:1a:ee:63:cc: 33:34:1f:9a:4e:12:e1:04:30:a3:cf:57:15:bb:6a: a5:7b:0a:1b:b8:91:08:35:87:0b:34:0b:f7:e0:6a: 67:99:b9:66:df:03:3c:a5:9a:8e:0a:3a:46:62:90: 24:28:a7:21:b5:14:7b:be:23:1c:9f:60:e0:f7:1b: e6:48:8f:38:b2:dd:92:39:db:af:e0:99:fc:fb:db: a5:46:8c:77:51:e7:32:87:22:7b:b7:74:47:ae:c6: f5:87:af:a9:70:90:5a:5f:20:73:1b:99:d6:de:b6: 2b:3a:ea:70:a9:c0:56:1a:63:f7:c2:23:af:2e:3f: 8f:cb:e9:ce:f9:ba:26:08:57:1e:64:63:92:cd:56: ff:1e:e7:fa:2d:e8:8e:b6:3f:1d:d9:1e:ee:24:0b: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7A:45:D2:B1:2E:8D:4A:E0:49:E6:DD:E7:61:48:AF:AE:1D:45:BA X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:27:0b:2d:91:33:9a:d0:38:0f:ca:65:da:55:c0:6e:d0:56: e6:3a:fe:94:b4:e4:aa:f9:a1:d4:ec:40:1e:f2:a8:3f:1d:8e: 8b:e7:56:da:6e:f2:a5:07:cf:34:82:8c:7e:52:8f:8e:7b:f9: 95:00:8c:a1:77:9e:a0:dd:30:07:e6:fe:8a:86:fa:7f:d1:1b: f3:c7:00:98:29:b4:54:ca:80:88:e0:3c:be:64:6e:fe:b1:88: b8:a5:94:2f:6a:6b:30:87:ca:5d:eb:ac:fe:7c:ec:f1:b7:9f: 96:82:34:23:f4:06:a9:ad:51:4d:1c:ca:e1:56:4e:f0:07:08: 1d:e6:3a:ca:d1:5b:bd:48:5a:03:3e:19:4c:73:5a:f3:07:0a: 4d:68:c0:ae:60:80:2b:e0:b6:14:9d:48:94:2c:d0:2d:82:14: c0:c2:05:d9:16:b9:bb:49:2f:a4:49:aa:d2:a6:5f:bd:88:ca: eb:01:49:d0:52:89:c9:61:30:73:a6:4e:13:44:e5:6e:02:b8: 75:7e:40:b7:fa:26:c9:05:1e:bc:f4:fc:38:e1:57:19:ea:5a: 79:ba:89:a0:dd:05:30:91:ab:59:f2:65:f3:b9:81:0b:09:67: d9:8f:cf:ac:46:94:50:73:6f:65:70:cd:13:91:75:ca:6f:4e: 06:32:96:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjYwNDI2MTkzODE0WhcNMjYwNTAzMTkzODE0WjAYMRYwFAYD VQQDEw02OWVlNjlhNy1lMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurQ19B0opF75A5ycKxPw3LappOuKddf0n7pQPYYQrwIgUD2X09Ff2E2EDnkO 2KguwpOCqN4kW9SwPm6tyl2RnNS6EQ1LOzNwBDkZEWDk2lOvupxJpTCUJob1GYY3 AM9K2yva/xruY8wzNB+aThLhBDCjz1cVu2qlewobuJEINYcLNAv34Gpnmblm3wM8 pZqOCjpGYpAkKKchtRR7viMcn2Dg9xvmSI84st2SOduv4Jn8+9ulRox3UecyhyJ7 t3RHrsb1h6+pcJBaXyBzG5nW3rYrOupwqcBWGmP3wiOvLj+Py+nO+bomCFceZGOS zVb/Huf6LeiOtj8d2R7uJAv8uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK56RdKx Lo1K4Enm3edhSK+uHUW6MB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVicLLZEzmtA4D8pl2lXAbtBW5jr+lLTkqvmh1OxAHvKoPx2Oi+dW2m7ypQfP NIKMflKPjnv5lQCMoXeeoN0wB+b+iob6f9Eb88cAmCm0VMqAiOA8vmRu/rGIuKWU L2prMIfKXeus/nzs8befloI0I/QGqa1RTRzK4VZO8AcIHeY6ytFbvUhaAz4ZTHNa 8wcKTWjArmCAK+C2FJ1IlCzQLYIUwMIF2Ra5u0kvpEmq0qZfvYjK6wFJ0FKJyWEw c6ZOE0TlbgK4dX5At/omyQUevPT8OOFXGepaebqJoN0FMJGrWfJl87mBCwln2Y/P rEaUUHNvZXDNE5F1ym9OBjKW7A== -----END CERTIFICATE-----Generated at Tue Apr 28 04:32:24 2026 by rpki-client