$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft File: jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json) Hash identifier: kwojVqnqYjPO1QcBXfVOg+T2XdEPXnf39qf8L7Km+YU= Subject key identifier: 45:4E:CB:EA:0D:3D:C9:D1:39:22:99:A0:7F:D1:41:B8:75:CA:39:63 Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC Certificate issuer: /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft Manifest number: 1E Signing time: Tue 21 Apr 2026 08:42:20 +0000 Manifest this update: Tue 21 Apr 2026 08:42:20 +0000 Manifest next update: Tue 28 Apr 2026 08:42:20 +0000 Files and hashes: 1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: PLavdaB8lTRGoHxJiPsytmjNy66/VKA7zmELKSffCyE=) 2: 2804E38A1C9C11F1AD8EA332233D8C67.roa (hash: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC Validity Not Before: Apr 21 08:42:20 2026 GMT Not After : Apr 28 08:42:20 2026 GMT Subject: CN=69e7386c-bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:8e:d2:f8:a9:df:f4:0d:9c:f0:0f:02:19: 36:2f:0e:84:8b:f6:d2:12:79:e9:b9:ec:8a:f5:2a: 1a:af:c0:a0:fd:26:59:ba:4c:0e:31:29:d9:92:2a: 0f:d5:6e:cf:92:f8:ae:9a:97:5a:84:74:ba:10:cd: 89:3c:42:8f:d3:92:03:72:bb:50:20:5b:70:4b:d1: 80:c8:a1:84:1a:97:60:e7:fa:98:fe:76:21:78:c2: cf:ff:4e:e2:46:70:41:ad:70:1b:73:02:3f:99:c6: 9a:8c:8a:b4:62:e7:f9:48:c0:ec:d3:44:f9:a7:50: 8d:4f:46:65:8d:4f:4c:be:cc:b1:1c:61:ab:d1:8a: 8c:e3:00:8a:79:03:b3:51:17:9b:dc:6c:24:94:a1: 1e:b1:73:7a:f3:ec:e5:d8:c1:ac:b0:2c:73:67:be: 11:bc:bb:3f:fb:56:d4:e4:3e:bd:92:e8:eb:65:5d: 49:62:73:0d:6d:50:b8:36:28:c4:ce:63:11:51:28: fb:8e:79:e2:ea:98:5c:78:ed:cd:ad:4b:0e:a7:96: 09:4a:c9:d4:48:fa:6a:d9:72:6a:db:ec:7e:f7:f6: 26:60:b8:0e:b1:ff:b3:0b:b7:82:97:69:0b:ee:87: d5:8a:56:bb:b2:75:07:2b:62:a3:63:fc:a2:0e:17: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4E:CB:EA:0D:3D:C9:D1:39:22:99:A0:7F:D1:41:B8:75:CA:39:63 X509v3 Authority Key Identifier: keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c9:3a:70:9b:d0:95:43:ec:93:f2:88:15:8b:ba:10:a9:89: 5d:8e:66:45:d6:12:4a:8a:54:80:60:cf:b0:60:70:fd:aa:4a: 07:38:49:1a:e9:28:c5:5c:e5:33:8e:1f:70:1e:ca:5e:2c:4e: 33:6c:f8:1d:9c:5c:cb:65:2d:00:fa:c8:1c:e8:16:88:6e:39: 61:b4:db:0f:62:d2:59:61:a9:7e:63:c3:88:37:fa:54:77:70: 38:ef:4d:31:37:7e:11:33:11:e9:1f:f0:84:02:ea:9a:50:14: cc:2d:74:98:08:5d:b4:b7:be:43:f2:a9:53:75:46:91:12:44: 07:0a:67:5d:2b:ae:ac:4a:42:21:77:52:a7:85:6c:99:c2:6d: 10:10:fa:ba:3a:1e:85:97:81:b2:93:75:44:ca:81:95:7c:6d: 8b:17:03:b7:36:92:c9:9b:b6:a4:92:14:50:ff:4c:5e:e7:dc: 3f:97:39:97:44:44:d9:08:c7:89:c3:77:49:b3:f8:8f:47:ab: cc:ad:aa:49:43:54:57:39:2f:82:21:b1:66:45:52:82:8a:68: c9:cb:63:14:33:9a:aa:f3:8a:0e:29:07:8b:15:5a:35:33:4d: f6:9f:19:9e:46:08:c5:5b:b1:64:02:19:ab:17:3b:a8:ab:ae: 11:97:91:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzJENjExMC8GA1UEBRMoOEU5QzFDNjREMDJCRjQwM0Y0MUFENDlDNTM0MDAzRTc2 ODc3MzRGQzAeFw0yNjA0MjEwODQyMjBaFw0yNjA0MjgwODQyMjBaMBgxFjAUBgNV BAMTDTY5ZTczODZjLWJjNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpAo7S+Knf9A2c8A8CGTYvDoSL9tISeem57Ir1KhqvwKD9Jlm6TA4xKdmSKg/V bs+S+K6al1qEdLoQzYk8Qo/TkgNyu1AgW3BL0YDIoYQal2Dn+pj+diF4ws//TuJG cEGtcBtzAj+ZxpqMirRi5/lIwOzTRPmnUI1PRmWNT0y+zLEcYavRiozjAIp5A7NR F5vcbCSUoR6xc3rz7OXYwaywLHNnvhG8uz/7VtTkPr2S6OtlXUlicw1tULg2KMTO YxFRKPuOeeLqmFx47c2tSw6nlglKydRI+mrZcmrb7H739iZguA6x/7MLt4KXaQvu h9WKVruydQcrYqNj/KIOFzOTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURU7L6g09 ydE5Ipmgf9FBuHXKOWMwHwYDVR0jBBgwFoAUjpwcZNAr9AP0GtScU0AD52h3NPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MkQ2L0IyNEJGMTZFMTcx RjExRjFBM0E4RjJGQjA5M0Q4QzY3L2pwd2NaTkFyOUFQMEd0U2NVMEFENTJoM05Q dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvanB3Y1pOQXI5QVAwR3RTY1UwQUQ1MmgzTlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MkQ2L0IyNEJGMTZFMTcxRjExRjFBM0E4RjJGQjA5M0Q4QzY3L2pwd2NaTkFyOUFQ MEd0U2NVMEFENTJoM05Qdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxyTpwm9CVQ+yT8ogVi7oQqYldjmZF1hJKilSAYM+wYHD9qkoHOEka6SjFXOUz jh9wHspeLE4zbPgdnFzLZS0A+sgc6BaIbjlhtNsPYtJZYal+Y8OIN/pUd3A4700x N34RMxHpH/CEAuqaUBTMLXSYCF20t75D8qlTdUaREkQHCmddK66sSkIhd1KnhWyZ wm0QEPq6Oh6Fl4Gyk3VEyoGVfG2LFwO3NpLJm7akkhRQ/0xe59w/lzmXRETZCMeJ w3dJs/iPR6vMrapJQ1RXOS+CIbFmRVKCimjJy2MUM5qq84oOKQeLFVo1M032nxme RgjFW7FkAhmrFzuoq64Rl5F4 -----END CERTIFICATE-----Generated at Tue Apr 21 21:34:22 2026 by rpki-client