$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: 56S2ZG6RZ2zm7tbLCWEupNiVCFSvac45UHT9zvBBB6Y= Subject key identifier: A2:CD:7D:78:1A:33:0B:41:D5:36:A8:DB:37:EE:D0:BF:5A:4A:BC:6C Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 1370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 1360 Signing time: Sat 04 Apr 2026 16:52:40 +0000 Manifest this update: Sat 04 Apr 2026 16:52:39 +0000 Manifest next update: Sat 11 Apr 2026 16:52:39 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: UUEOBM7UYsGXdZyGjD3F06EuvJjvWCZiHYIIs3pfZXo=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 7RR7Eg0wKm27NUGXm8j0ljoSWx4fgcR/0JinjGBY2bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4976 (0x1370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Apr 4 16:52:39 2026 GMT Not After : Apr 11 16:52:39 2026 GMT Subject: CN=69d141d8-4d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:6a:ad:42:15:f2:08:04:84:29:3a:36:f1: 63:b9:03:5e:62:4e:cf:83:65:f8:fa:38:c8:46:0d: dc:1e:58:ab:63:af:b9:99:31:21:b7:84:cf:aa:67: 08:f6:3f:e1:53:86:bc:12:f1:2c:6e:a2:4d:7e:58: a7:3d:f1:4c:c0:e6:37:d3:ae:1a:8a:9b:5f:a3:83: 2a:d1:73:61:1d:e2:f5:40:52:85:7e:c6:4a:8f:14: 14:ac:23:f6:ef:96:e1:51:d7:05:90:cf:89:57:34: b2:7e:8e:cf:f4:e2:8e:83:60:6a:eb:8b:c8:9f:2a: 07:84:97:50:a4:55:fb:00:9f:f2:9d:50:a1:3c:46: 96:a4:9d:7d:74:93:a9:b6:ff:18:1f:7f:a4:dc:1f: 3d:69:7a:aa:d4:75:7e:3f:98:8d:db:f5:03:2b:9f: 75:a4:77:19:97:15:59:36:d0:d3:22:ee:a7:73:bf: 53:5e:b1:fe:b3:ea:3b:97:9e:87:79:ec:0f:21:d3: c7:af:2b:e5:a3:27:39:f5:c9:b0:50:d2:cb:0a:87: 98:2d:76:51:e7:49:d0:ca:8f:ec:74:36:06:53:8f: f9:62:2e:fb:f4:b8:87:10:d2:a8:e9:8a:8c:4e:b0: 97:a2:29:27:e9:1b:f8:db:24:0e:d0:31:71:2f:c0: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:7D:78:1A:33:0B:41:D5:36:A8:DB:37:EE:D0:BF:5A:4A:BC:6C X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2c:47:de:a7:42:22:92:e9:e7:47:f8:da:8f:a3:bd:f3:39: e3:75:e2:bb:f2:81:f4:a7:44:63:75:12:1f:e6:f9:f2:6a:04: 90:cd:d2:70:ab:c7:d0:50:0d:b6:86:a4:bd:1c:0a:61:6d:9c: f8:f6:c9:62:21:4e:86:a3:bb:e7:a8:cc:e1:72:65:df:59:b8: 72:2e:5f:5c:af:0a:52:dd:42:bf:fb:0c:81:2a:68:70:0f:cd: 0a:07:55:e2:ba:59:7e:17:06:10:38:67:be:39:b0:e2:74:74: a6:a5:8f:9a:b6:c8:72:6c:b2:fa:15:3c:a8:88:d7:d2:6d:53: 9a:47:7d:3e:cd:32:2e:28:23:09:de:63:8a:b5:00:ff:3f:57: 1c:98:18:54:d7:10:c1:a5:cd:b1:2d:03:91:92:dc:9e:63:a2: 85:93:e0:9c:07:39:fc:f8:af:60:7f:1b:85:30:a6:10:a7:b7: fa:ce:0c:f6:1d:6a:12:d1:be:1d:5e:6a:07:05:6e:65:e4:dd: 38:a6:dd:9c:20:a4:a6:d7:7a:dd:d7:70:02:3a:3a:2c:0d:84: 22:ac:2c:03:84:7d:36:78:d3:f3:83:fb:46:12:cc:40:95:eb: 06:b1:8e:79:4c:02:13:bd:e4:48:86:e4:aa:ad:bf:e7:89:2c: 58:57:3c:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjYwNDA0MTY1MjM5WhcNMjYwNDExMTY1MjM5WjAYMRYwFAYD VQQDEw02OWQxNDFkOC00ZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20FqrUIV8ggEhCk6NvFjuQNeYk7Pg2X4+jjIRg3cHlirY6+5mTEht4TPqmcI 9j/hU4a8EvEsbqJNflinPfFMwOY3064aiptfo4Mq0XNhHeL1QFKFfsZKjxQUrCP2 75bhUdcFkM+JVzSyfo7P9OKOg2Bq64vInyoHhJdQpFX7AJ/ynVChPEaWpJ19dJOp tv8YH3+k3B89aXqq1HV+P5iN2/UDK591pHcZlxVZNtDTIu6nc79TXrH+s+o7l56H eewPIdPHryvloyc59cmwUNLLCoeYLXZR50nQyo/sdDYGU4/5Yi779LiHENKo6YqM TrCXoikn6Rv42yQO0DFxL8D/wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLNfXga MwtB1Tao2zfu0L9aSrxsMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbCxH3qdCIpLp50f42o+jvfM543Xiu/KB9KdEY3USH+b58moEkM3ScKvH0FAN toakvRwKYW2c+PbJYiFOhqO756jM4XJl31m4ci5fXK8KUt1Cv/sMgSpocA/NCgdV 4rpZfhcGEDhnvjmw4nR0pqWPmrbIcmyy+hU8qIjX0m1Tmkd9Ps0yLigjCd5jirUA /z9XHJgYVNcQwaXNsS0DkZLcnmOihZPgnAc5/PivYH8bhTCmEKe3+s4M9h1qEtG+ HV5qBwVuZeTdOKbdnCCkptd63ddwAjo6LA2EIqwsA4R9NnjT84P7RhLMQJXrBrGO eUwCE73kSIbkqq2/54ksWFc8Hg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:41 2026 by rpki-client