$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: JJKrA4hFTNA5UYIUcvrC2suqaWJTu1kGH9lmkxyWVio= Subject key identifier: 23:70:28:21:46:D5:4A:E2:07:BB:D6:29:4E:0A:31:4A:5B:79:D4:DF Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 0343 Signing time: Sun 05 Apr 2026 00:44:42 +0000 Manifest this update: Sun 05 Apr 2026 00:44:42 +0000 Manifest next update: Sun 12 Apr 2026 00:44:42 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: YUp6czwCN6ahQwHUrfWLbwQahBO1QkfkjI1TZYrKUMY=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: Apr 5 00:44:42 2026 GMT Not After : Apr 12 00:44:42 2026 GMT Subject: CN=69d1b07a-beb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:04:36:c9:25:be:e3:dd:ef:3f:4c:93:d9: b5:c8:9d:c1:8b:1c:32:7f:07:8f:66:56:fa:1f:3d: 72:c3:a3:25:8c:8e:d6:1c:05:dd:3e:97:3b:0d:a5: 91:5b:e2:bb:02:a2:47:2d:df:1d:9e:bf:15:d0:cd: 2c:9d:22:ca:9f:1a:f6:34:7e:56:8a:e9:9a:5b:42: 62:09:71:dd:64:ac:67:0c:da:5d:b5:92:48:77:58: 37:51:db:85:49:8c:4c:de:75:e7:30:97:23:aa:2c: 39:13:51:34:e5:e9:58:96:bb:e2:92:d7:a3:01:93: 29:15:1d:e9:1c:3c:1e:e2:26:19:ed:45:71:ef:a6: d4:c7:04:d9:80:19:ad:9f:76:71:cb:3e:69:14:bc: 69:7f:5c:f7:03:96:19:3c:24:06:b0:0a:6a:41:d5: c0:e2:78:1f:af:f1:b3:6d:e3:53:a6:c2:37:1b:21: 52:ad:26:3e:06:73:71:ca:df:ac:e3:56:cc:a1:65: cd:f3:6a:4c:fd:fa:d9:d4:81:23:e7:95:e4:b8:db: 69:05:2e:17:d5:31:0f:df:41:56:f5:08:4e:4f:44: a7:cc:5b:cb:82:26:b9:43:2f:35:32:9d:b4:ca:3e: 31:a4:1d:46:a0:01:d9:40:31:b5:37:47:54:24:ea: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:70:28:21:46:D5:4A:E2:07:BB:D6:29:4E:0A:31:4A:5B:79:D4:DF X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:40:37:8c:81:bb:94:41:fe:d7:c3:50:fd:1f:b8:ff:b0: c8:c4:ae:75:2b:48:63:a1:90:64:b9:32:e4:f4:82:2e:24:f0: 33:99:91:97:2e:a0:ab:ee:2a:3d:90:e3:0b:26:7f:ad:f1:06: f1:8e:49:35:0d:b7:eb:76:e4:45:55:b6:ab:d5:1c:32:e2:fc: 91:9d:83:88:b1:fb:36:0c:29:7b:8e:c8:ed:3d:57:9a:81:2d: f6:87:bf:57:d4:94:eb:f7:f5:b4:a0:54:89:c4:97:ef:a6:bc: 80:2b:38:37:50:90:da:5c:0b:f5:f0:58:ed:a3:a9:bd:11:32: 0b:c2:44:8a:92:7f:f5:43:83:fc:3f:d6:87:ef:b7:b3:7e:47: e4:62:54:f0:f4:23:87:10:d0:6b:99:db:62:b8:db:69:b0:3a: 81:67:1f:ef:f8:aa:95:42:9d:fd:f5:a8:df:91:8b:8f:64:b0: 7e:01:91:79:b0:4f:83:a2:15:35:f0:7e:db:f3:bc:1e:63:8c: 1e:3a:43:e5:f8:14:e3:b3:0d:53:23:95:47:32:21:62:8f:f7: 16:45:b2:57:b1:d0:95:d4:8f:f5:86:99:0f:f1:d9:2c:91:1c: c4:72:00:c4:cc:93:49:15:8e:99:d5:52:50:42:09:97:24:b6: 05:3b:77:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjYwNDA1MDA0NDQyWhcNMjYwNDEyMDA0NDQyWjAYMRYwFAYD VQQDEw02OWQxYjA3YS1iZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAEENsklvuPd7z9Mk9m1yJ3BixwyfwePZlb6Hz1yw6MljI7WHAXdPpc7DaWR W+K7AqJHLd8dnr8V0M0snSLKnxr2NH5WiumaW0JiCXHdZKxnDNpdtZJId1g3UduF SYxM3nXnMJcjqiw5E1E05elYlrviktejAZMpFR3pHDwe4iYZ7UVx76bUxwTZgBmt n3Zxyz5pFLxpf1z3A5YZPCQGsApqQdXA4ngfr/GzbeNTpsI3GyFSrSY+BnNxyt+s 41bMoWXN82pM/frZ1IEj55XkuNtpBS4X1TEP30FW9QhOT0SnzFvLgia5Qy81Mp20 yj4xpB1GoAHZQDG1N0dUJOrdtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNwKCFG 1UriB7vWKU4KMUpbedTfMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2pAN4yBu5RB/tfDUP0fuP+wyMSudStIY6GQZLky5PSCLiTwM5mRly6gq+4q PZDjCyZ/rfEG8Y5JNQ2363bkRVW2q9UcMuL8kZ2DiLH7Ngwpe47I7T1XmoEt9oe/ V9SU6/f1tKBUicSX76a8gCs4N1CQ2lwL9fBY7aOpvREyC8JEipJ/9UOD/D/Wh++3 s35H5GJU8PQjhxDQa5nbYrjbabA6gWcf7/iqlUKd/fWo35GLj2SwfgGRebBPg6IV NfB+2/O8HmOMHjpD5fgU47MNUyOVRzIhYo/3FkWyV7HQldSP9YaZD/HZLJEcxHIA xMyTSRWOmdVSUEIJlyS2BTt3gg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:25:41 2026 by rpki-client