$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: cjxLPSrazhi90x+NSg2upu5TO1+0uvsejcOQCOPOwvE= Subject key identifier: 41:45:A9:29:4E:C7:0D:EB:8B:A8:97:02:EF:C2:4F:CE:8F:AD:B9:E1 Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0CFF Signing time: Sat 04 Apr 2026 17:59:03 +0000 Manifest this update: Sat 04 Apr 2026 17:59:02 +0000 Manifest next update: Sat 11 Apr 2026 17:59:02 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: 7Ndn40MK+wITLI2ypevt8NaV55rVLvcv3WjMSeU+kUY=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: CRSEbG93yP/OLxFWNQlVZkdk1+UwwnU68vGA6YSFBzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Apr 4 17:59:02 2026 GMT Not After : Apr 11 17:59:02 2026 GMT Subject: CN=69d15167-01ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:71:0b:bf:3d:e7:97:9b:2e:2e:a8:2d:c5: 92:e1:7d:e6:a3:90:53:fe:e5:c9:29:52:e6:cb:b2: ee:e3:7f:9f:2d:cb:f1:e2:ef:9e:c3:ac:53:ea:0b: ae:74:d0:44:1e:d6:f6:b5:58:c0:a4:86:06:3e:5f: a5:69:12:9b:95:b1:c6:54:08:a0:d1:6a:4c:41:a7: 12:28:cb:d5:ee:b3:fe:96:8b:8b:28:1e:74:f7:95: a0:32:13:b6:1f:a6:1f:c6:75:79:98:b0:42:c2:20: 41:7a:ed:6e:04:8e:cc:0b:af:7a:4c:e7:e3:90:bc: c2:eb:ae:ad:92:da:b0:2d:05:71:e5:e5:25:27:f8: 79:e4:45:ba:3f:9d:be:be:5b:a1:60:70:89:01:91: 43:4f:e8:56:bb:23:b2:19:ec:5a:1e:7c:4f:2a:c6: 4b:b8:b5:16:40:fc:12:5c:8f:d7:f1:8b:46:28:c4: 78:8e:20:76:e6:0f:c4:0a:67:cd:38:2c:ed:4a:56: 5e:7b:a2:8d:4b:d3:51:d4:52:61:e8:49:90:ce:5e: ff:ac:f3:f3:b8:4b:44:f0:05:90:0c:94:4d:e0:2d: 2b:0a:11:fc:bd:5a:51:e2:65:b1:ba:01:9a:17:fb: 21:18:e5:e2:e2:ff:9e:5b:47:d5:df:09:2b:b7:a3: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:A9:29:4E:C7:0D:EB:8B:A8:97:02:EF:C2:4F:CE:8F:AD:B9:E1 X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:5c:77:50:73:7c:9a:44:19:01:40:e8:dd:5a:48:f3:b8: ee:67:43:ee:71:2c:18:7c:6f:13:25:6b:5e:9b:71:a5:55:cc: fb:11:37:85:0e:d9:18:38:6c:f9:93:60:29:d1:cc:0f:1e:54: 75:f8:53:b3:4b:67:76:58:df:85:d5:03:3b:0b:2f:39:6b:13: 84:f3:d3:59:93:8d:d6:e7:b9:e3:ce:85:51:05:7a:fd:11:67: 50:1c:26:ee:df:86:79:63:be:75:ad:72:e2:01:10:af:2e:84: 28:39:01:0b:a8:ea:d4:e6:4b:76:10:f5:62:06:74:81:e5:08: df:5c:43:04:16:d5:72:d0:ff:1f:06:12:eb:8d:b9:08:50:ca: cf:3d:6b:a8:74:f7:db:56:52:e4:d0:fe:e2:ee:99:a1:ee:ec: 99:8b:55:89:7e:00:85:7c:b3:d0:91:7e:67:35:0d:85:00:58: c4:26:36:ee:52:1a:ce:38:06:98:7a:b0:cf:98:0f:f7:a4:93: 6b:0f:d7:91:78:6a:ae:b6:eb:07:54:90:ba:39:9d:81:39:38: f7:f2:06:b5:94:c2:e2:05:19:30:25:db:28:e5:1e:31:ff:62: dc:cc:ed:62:90:9d:00:67:99:02:6e:5c:7a:33:c3:48:fc:6e: ab:06:2a:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjYwNDA0MTc1OTAyWhcNMjYwNDExMTc1OTAyWjAYMRYwFAYD VQQDEw02OWQxNTE2Ny0wMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJdxC78955ebLi6oLcWS4X3mo5BT/uXJKVLmy7Lu43+fLcvx4u+ew6xT6guu dNBEHtb2tVjApIYGPl+laRKblbHGVAig0WpMQacSKMvV7rP+louLKB5095WgMhO2 H6YfxnV5mLBCwiBBeu1uBI7MC696TOfjkLzC666tktqwLQVx5eUlJ/h55EW6P52+ vluhYHCJAZFDT+hWuyOyGexaHnxPKsZLuLUWQPwSXI/X8YtGKMR4jiB25g/ECmfN OCztSlZee6KNS9NR1FJh6EmQzl7/rPPzuEtE8AWQDJRN4C0rChH8vVpR4mWxugGa F/shGOXi4v+eW0fV3wkrt6MoEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFFqSlO xw3ri6iXAu/CT86PrbnhMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtRcd1BzfJpEGQFA6N1aSPO47mdD7nEsGHxvEyVrXptxpVXM+xE3hQ7ZGDhs +ZNgKdHMDx5UdfhTs0tndljfhdUDOwsvOWsThPPTWZON1ue5486FUQV6/RFnUBwm 7t+GeWO+da1y4gEQry6EKDkBC6jq1OZLdhD1YgZ0geUI31xDBBbVctD/HwYS6425 CFDKzz1rqHT321ZS5ND+4u6Zoe7smYtViX4AhXyz0JF+ZzUNhQBYxCY27lIazjgG mHqwz5gP96STaw/XkXhqrrbrB1SQujmdgTk49/IGtZTC4gUZMCXbKOUeMf9i3Mzt YpCdAGeZAm5cejPDSPxuqwYqkw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:05 2026 by rpki-client