$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: kxrN1cz3XW3k5vb0pUAolba072okyl05vuY/0ZXvvUk= Subject key identifier: 6C:A3:7F:5A:76:6D:9E:FF:08:55:0B:59:10:78:18:47:88:B0:B8:10 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 0117 Signing time: Fri 17 Apr 2026 05:33:33 +0000 Manifest this update: Fri 17 Apr 2026 05:33:33 +0000 Manifest next update: Fri 24 Apr 2026 05:33:33 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: SiigI/Mpbazu1OqbbWflrlCDFpvbihIc1/4EnDqdVRE=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Apr 17 05:33:33 2026 GMT Not After : Apr 24 05:33:33 2026 GMT Subject: CN=69e1c62d-f467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:db:a4:29:24:35:fe:37:93:7c:f5:54:23: 51:73:35:bb:55:b4:3f:3a:03:bd:0a:c9:d1:9d:d6: f7:25:c4:0f:22:39:17:9c:0e:3e:b4:0f:6e:cd:8e: ac:fc:43:b6:77:32:7c:a3:ec:da:6d:aa:9d:c3:38: af:53:ea:c6:10:d6:aa:92:74:20:e4:1b:33:93:fa: 08:af:e6:f2:7a:3b:ab:f1:97:e5:fc:f8:8d:3b:f6: fd:5a:e7:0d:2c:ba:e9:fa:8f:e1:ed:29:b0:af:27: 94:43:40:2a:f9:4e:67:f7:17:f0:af:13:6a:16:46: 4e:8e:92:75:81:ee:db:9f:6e:2b:3f:5a:bc:5b:93: 48:26:ad:06:49:56:f7:af:9e:91:57:10:82:90:ab: a1:e5:2c:9f:46:67:3c:e3:96:60:1c:d1:cb:c5:b4: e8:d1:60:0b:d7:62:22:07:a9:85:a1:f0:66:77:40: 42:94:6f:1d:cc:ea:d4:b5:da:9b:d0:3b:c5:13:29: 3c:15:da:5c:d9:0d:34:f6:b3:9c:39:86:8c:a6:7d: df:0d:d8:dc:be:12:60:60:21:91:e1:00:23:42:12: fa:f9:ef:85:ab:16:69:a4:e6:70:a1:d0:61:4d:d8: 4f:8a:5a:05:c5:0f:fb:d1:5a:76:21:69:fd:ac:4d: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A3:7F:5A:76:6D:9E:FF:08:55:0B:59:10:78:18:47:88:B0:B8:10 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:9e:18:3d:7c:f2:62:9f:60:34:e1:7d:49:1d:95:70:89: b6:e2:d8:c2:f3:39:5a:b0:34:11:6f:a0:db:2f:c0:af:1d:9d: 74:af:62:98:ee:e7:a3:ec:a6:c1:22:8d:c2:fb:52:5a:12:f5: 0b:66:60:c2:11:26:a7:5b:77:03:eb:bd:22:e2:f3:fe:20:48: ea:5f:f6:eb:65:f9:d7:87:e5:12:b4:3e:58:19:ef:23:db:ad: b1:08:6d:4c:3a:8d:0b:1a:ae:9b:21:d6:22:ba:b2:bc:f2:3f: 54:89:ec:db:23:39:1d:6b:fc:d7:95:d6:28:48:f2:6f:e6:c9: cb:97:9f:31:4c:09:d2:cb:03:cf:6b:25:49:7c:32:7d:61:b6: 11:ca:5b:77:ae:53:b8:68:a6:99:33:2b:a9:70:20:dd:38:0f: c9:80:e6:b0:9f:ed:ca:50:d8:ad:35:32:02:7c:78:00:c4:09: 69:7e:38:ea:a2:d4:3d:ca:7d:a7:50:1b:d5:79:d2:33:5b:f8: a3:6a:32:df:03:b6:a6:e5:0c:4f:da:07:21:c5:0a:b1:ca:2a: 1a:45:db:b3:85:36:0a:b0:74:40:d2:af:c8:a7:b2:4f:1f:06: 95:fd:53:3a:d3:02:11:3f:55:d1:1c:4d:56:e7:96:e2:d2:93: 54:30:e6:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjYwNDE3MDUzMzMzWhcNMjYwNDI0MDUzMzMzWjAYMRYwFAYD VQQDEw02OWUxYzYyZC1mNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXjbpCkkNf43k3z1VCNRczW7VbQ/OgO9CsnRndb3JcQPIjkXnA4+tA9uzY6s /EO2dzJ8o+zabaqdwzivU+rGENaqknQg5Bszk/oIr+byejur8Zfl/PiNO/b9WucN LLrp+o/h7SmwryeUQ0Aq+U5n9xfwrxNqFkZOjpJ1ge7bn24rP1q8W5NIJq0GSVb3 r56RVxCCkKuh5SyfRmc845ZgHNHLxbTo0WAL12IiB6mFofBmd0BClG8dzOrUtdqb 0DvFEyk8Fdpc2Q009rOcOYaMpn3fDdjcvhJgYCGR4QAjQhL6+e+FqxZppOZwodBh TdhPiloFxQ/70Vp2IWn9rE03EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyjf1p2 bZ7/CFULWRB4GEeIsLgQMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfSeGD188mKfYDThfUkdlXCJtuLYwvM5WrA0EW+g2y/Arx2ddK9imO7no+ym wSKNwvtSWhL1C2ZgwhEmp1t3A+u9IuLz/iBI6l/262X514flErQ+WBnvI9utsQht TDqNCxqumyHWIrqyvPI/VIns2yM5HWv815XWKEjyb+bJy5efMUwJ0ssDz2slSXwy fWG2Ecpbd65TuGimmTMrqXAg3TgPyYDmsJ/tylDYrTUyAnx4AMQJaX446qLUPcp9 p1Ab1XnSM1v4o2oy3wO2puUMT9oHIcUKscoqGkXbs4U2CrB0QNKvyKeyTx8Glf1T OtMCET9V0RxNVueW4tKTVDDmhg== -----END CERTIFICATE-----Generated at Sat Apr 18 21:03:59 2026 by rpki-client