$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: m4gunwcwMkccs31/ZYulmTD9YapiQ8g3hXCyJHjW9CM= Subject key identifier: 87:87:AB:D5:EE:E6:AF:82:86:A3:C5:B9:66:EB:78:23:A2:54:AB:40 Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 07F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 07EC Signing time: Sat 04 Apr 2026 21:02:29 +0000 Manifest this update: Sat 04 Apr 2026 21:02:29 +0000 Manifest next update: Sat 11 Apr 2026 21:02:29 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: IwSn6Ut8VghNQTSHzufkCu18g0l1xOcaGgdNHvD0UyE=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: MGp5NvaWmsdbvQARv7j0xLY5ZLqFaH4JtDxSWJQ+zS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2038 (0x7f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Apr 4 21:02:29 2026 GMT Not After : Apr 11 21:02:29 2026 GMT Subject: CN=69d17c65-00ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:07:f9:ba:3b:25:b3:fd:18:53:c9:c0:e2: e8:a9:14:c5:8c:a2:88:67:58:12:1f:9c:97:15:97: ca:e4:7f:38:f1:e5:d5:ed:18:71:37:0d:2a:3e:7e: 5b:54:84:7d:e6:c4:46:bc:7c:16:0f:62:ee:6f:75: 24:31:43:e7:0a:41:08:7d:8e:16:0c:b8:e4:3b:17: 2b:bf:88:85:30:00:e5:d7:8e:18:8c:49:c0:fc:03: c2:22:e2:88:81:1b:51:49:b9:fb:4c:4a:a2:47:b0: d9:00:cf:f4:9c:d1:1a:11:12:0b:f1:a7:39:8a:47: 33:d2:d3:95:21:93:d7:c0:ce:e9:50:c4:26:0d:38: 8e:a2:13:23:10:8c:1b:a1:54:2a:59:1a:86:96:62: e0:3a:d8:72:85:57:6e:8f:53:cb:b0:b9:74:9d:96: f8:9f:c6:0a:27:28:ae:b0:5a:74:7f:f5:c8:ef:61: d9:be:b4:4c:3b:0d:ce:bb:50:19:0e:3e:ad:2f:99: 11:fb:54:ce:9e:e5:b9:c2:e3:61:6f:c8:6e:68:2e: 46:32:5b:69:d3:d9:a4:23:8c:09:7c:1d:4d:73:5f: b3:d6:0a:36:97:bc:8a:b7:67:37:f5:06:e5:20:3f: 2e:3f:0c:8a:3f:16:31:5f:ea:08:ce:22:f2:71:72: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:87:AB:D5:EE:E6:AF:82:86:A3:C5:B9:66:EB:78:23:A2:54:AB:40 X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:65:64:0b:b3:6c:02:ac:05:44:96:77:cf:91:11:99:fb:9e: 34:e6:f0:6f:e5:c4:9f:b2:64:c0:48:4f:b5:4b:83:bb:91:78: 52:7f:4b:f5:f5:96:77:c2:0e:72:9c:ab:f5:b3:e3:ef:ef:f6: 91:29:8c:df:a3:c2:10:53:d0:45:70:9e:11:9c:76:9d:ab:cf: 9e:9d:e5:b7:79:20:15:a6:f6:4f:ba:60:62:8a:60:65:cd:7a: 42:44:55:91:9c:1d:b1:d9:30:b9:a7:c9:fa:23:18:87:54:ec: 70:62:17:90:b0:be:1b:95:77:18:de:ad:d0:ec:f3:2b:cd:33: db:21:bb:b7:98:04:29:96:44:f3:e5:85:c2:b3:ff:57:32:49: 4d:98:a6:8f:13:61:00:f5:3b:af:31:f3:a9:16:da:22:84:1c: c1:ee:92:61:a4:5d:5a:64:1d:c2:91:43:79:ba:62:60:44:aa: bd:f8:05:5b:77:24:4e:96:da:c5:af:4c:6c:73:48:00:82:22: 11:c9:71:b7:5b:20:1f:33:b5:f4:de:fa:ed:02:4f:96:63:39: c4:16:40:05:53:a0:c8:2c:8b:fd:e2:a2:98:4d:b3:f9:92:19: f1:1d:7d:5d:34:b5:47:f5:35:a8:80:6a:db:b4:b2:b7:6a:8f: ce:fe:4d:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjYwNDA0MjEwMjI5WhcNMjYwNDExMjEwMjI5WjAYMRYwFAYD VQQDEw02OWQxN2M2NS0wMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqksH+bo7JbP9GFPJwOLoqRTFjKKIZ1gSH5yXFZfK5H848eXV7RhxNw0qPn5b VIR95sRGvHwWD2Lub3UkMUPnCkEIfY4WDLjkOxcrv4iFMADl144YjEnA/APCIuKI gRtRSbn7TEqiR7DZAM/0nNEaERIL8ac5ikcz0tOVIZPXwM7pUMQmDTiOohMjEIwb oVQqWRqGlmLgOthyhVduj1PLsLl0nZb4n8YKJyiusFp0f/XI72HZvrRMOw3Ou1AZ Dj6tL5kR+1TOnuW5wuNhb8huaC5GMltp09mkI4wJfB1Nc1+z1go2l7yKt2c39Qbl ID8uPwyKPxYxX+oIziLycXIkVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeHq9Xu 5q+ChqPFuWbreCOiVKtAMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnWVkC7NsAqwFRJZ3z5ERmfueNObwb+XEn7JkwEhPtUuDu5F4Un9L9fWWd8IO cpyr9bPj7+/2kSmM36PCEFPQRXCeEZx2navPnp3lt3kgFab2T7pgYopgZc16QkRV kZwdsdkwuafJ+iMYh1TscGIXkLC+G5V3GN6t0OzzK80z2yG7t5gEKZZE8+WFwrP/ VzJJTZimjxNhAPU7rzHzqRbaIoQcwe6SYaRdWmQdwpFDebpiYESqvfgFW3ckTpba xa9MbHNIAIIiEclxt1sgHzO19N767QJPlmM5xBZABVOgyCyL/eKimE2z+ZIZ8R19 XTS1R/U1qIBq27Syt2qPzv5NTQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:59:19 2026 by rpki-client