$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: PNkknK0GpUv1f1Iohg+OskBV/d0iMYWV8kBHnxtNI5M= Subject key identifier: 4D:3D:31:46:B0:58:5D:54:91:57:57:0F:48:56:49:82:0B:5D:8C:34 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 3556 Signing time: Sat 04 Apr 2026 14:18:16 +0000 Manifest this update: Sat 04 Apr 2026 14:18:15 +0000 Manifest next update: Sat 11 Apr 2026 14:18:15 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: ALrIX/3fK0kULHGCV6LCGruyzMXZnvG2Rt0CiMi2/Ww=) 2: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=) 3: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Apr 4 14:18:15 2026 GMT Not After : Apr 11 14:18:15 2026 GMT Subject: CN=69d11da8-0ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2f:1c:12:3c:52:90:6d:42:67:ec:da:a6:a8: 26:68:54:a0:87:27:59:79:a8:7c:84:5b:d2:f9:b7: ea:a6:df:8c:f8:22:08:f5:fe:ce:f3:22:43:62:25: b1:f0:46:0f:59:14:dc:8e:41:11:9d:d5:59:75:64: 29:24:f4:2e:7c:82:38:cd:72:e3:4a:d5:60:01:bf: eb:e6:0d:6f:1e:ce:33:1b:96:83:ef:c7:ad:e4:3d: 50:3a:4a:de:a6:a2:0f:6e:2e:86:7a:22:7e:63:d6: 49:e2:03:51:65:a8:3d:15:3a:43:b8:c2:98:43:45: 8e:de:45:7f:ce:2d:5a:f6:0e:06:de:15:25:79:e1: 4d:f1:cd:0f:8f:a8:3a:c7:02:28:c7:ae:4f:f6:2d: f0:17:34:4b:8f:ee:41:68:4e:b8:bc:2b:68:92:cc: f2:c5:f6:d0:dd:57:9b:32:d1:67:a7:59:21:f6:99: 81:aa:58:c8:d0:5f:b4:9e:9c:cd:12:80:01:a6:39: 05:04:6b:83:c7:2f:8c:ed:b0:ed:3b:a8:ba:d1:46: 42:30:1f:c1:30:45:c0:de:ad:e2:be:71:2f:64:fb: 4a:ab:fb:db:6b:e7:c9:8a:b7:c5:3f:7f:66:7e:df: aa:f7:62:b6:42:1a:9a:6d:7b:ba:b2:fa:00:bf:77: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3D:31:46:B0:58:5D:54:91:57:57:0F:48:56:49:82:0B:5D:8C:34 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:90:19:dc:9b:59:7f:f3:69:27:ca:15:0a:c3:c8:d8:89:9d: eb:19:54:67:cb:0d:44:28:f3:f3:68:ec:27:2a:37:b0:d9:af: df:d9:cc:5a:07:ae:29:a0:a3:7c:86:83:08:3e:e8:37:12:81: 6b:39:99:71:b7:a7:b9:3e:13:4b:aa:78:fd:43:0e:3a:63:7d: 04:39:5d:19:4d:6f:c8:40:62:18:b9:cb:cd:fa:36:18:b2:d5: 7d:25:41:bd:a4:a8:1c:f0:50:3e:d6:bf:f6:9f:7d:03:a9:d4: d9:ef:4e:25:e7:5f:46:b6:f3:72:6e:47:43:35:bc:9b:30:7f: e1:71:4e:50:b1:5a:f5:34:27:81:7e:62:b2:c1:2c:40:eb:ac: 63:37:52:ce:83:6a:b9:1e:4f:89:4e:ab:c8:78:fa:2a:47:d5: 08:b0:e0:a8:2d:bb:84:f8:3e:d9:be:9e:bd:36:cb:24:62:21: 97:92:72:af:39:eb:e3:ef:9f:91:bc:c5:51:cf:3b:59:07:13: ab:e3:83:da:a2:99:af:82:72:37:f1:73:5c:a8:13:e6:20:1e: 63:2b:7a:2d:d3:88:f1:61:2c:64:51:86:c7:b2:bd:8f:3e:bb: e9:4e:f4:8e:92:37:b3:54:f4:73:a4:c5:b0:c8:7c:ed:52:8a: a8:05:e7:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjYwNDA0MTQxODE1WhcNMjYwNDExMTQxODE1WjAYMRYwFAYD VQQDEw02OWQxMWRhOC0wY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApS8cEjxSkG1CZ+zapqgmaFSghydZeah8hFvS+bfqpt+M+CII9f7O8yJDYiWx 8EYPWRTcjkERndVZdWQpJPQufII4zXLjStVgAb/r5g1vHs4zG5aD78et5D1QOkre pqIPbi6GeiJ+Y9ZJ4gNRZag9FTpDuMKYQ0WO3kV/zi1a9g4G3hUleeFN8c0Pj6g6 xwIox65P9i3wFzRLj+5BaE64vCtokszyxfbQ3VebMtFnp1kh9pmBqljI0F+0npzN EoABpjkFBGuDxy+M7bDtO6i60UZCMB/BMEXA3q3ivnEvZPtKq/vba+fJirfFP39m ft+q92K2QhqabXu6svoAv3djdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE09MUaw WF1UkVdXD0hWSYILXYw0MB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhpAZ3JtZf/NpJ8oVCsPI2Imd6xlUZ8sNRCjz82jsJyo3sNmv39nMWgeuKaCj fIaDCD7oNxKBazmZcbenuT4TS6p4/UMOOmN9BDldGU1vyEBiGLnLzfo2GLLVfSVB vaSoHPBQPta/9p99A6nU2e9OJedfRrbzcm5HQzW8mzB/4XFOULFa9TQngX5issEs QOusYzdSzoNquR5PiU6ryHj6KkfVCLDgqC27hPg+2b6evTbLJGIhl5Jyrznr4++f kbzFUc87WQcTq+OD2qKZr4JyN/FzXKgT5iAeYyt6LdOI8WEsZFGGx7K9jz676U70 jpI3s1T0c6TFsMh87VKKqAXn+Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:19 2026 by rpki-client