$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json) Hash identifier: j/xq/+u52S5VhCIz5NjEbLXQXiwQM8X0xEi2rkCGkmQ= Subject key identifier: 4C:EE:8A:F7:0C:F0:F5:08:BA:17:57:5C:67:2C:79:53:E2:57:00:E0 Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft Manifest number: 012C Signing time: Sun 05 Apr 2026 05:01:35 +0000 Manifest this update: Sun 05 Apr 2026 05:01:34 +0000 Manifest next update: Sun 12 Apr 2026 05:01:34 +0000 Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: L0TLDUTh/SGrPOBbVrExT8MaiSGz2iD81UUyWgeCVwU=) 2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Validity Not Before: Apr 5 05:01:34 2026 GMT Not After : Apr 12 05:01:34 2026 GMT Subject: CN=69d1ecaf-ef78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:ba:06:dc:b4:90:31:56:8c:e5:f2:07:26: 07:dd:69:ae:86:54:78:65:b1:56:6d:b9:bb:b6:98: 9f:be:a5:93:8c:f0:2e:0c:92:9f:54:55:9b:81:e8: 74:35:81:6a:48:50:14:41:d1:5e:e9:86:ac:43:42: d5:ee:c3:54:f8:41:fd:bd:12:e2:00:07:04:b3:bf: a4:d0:8b:2d:a7:1a:01:0d:2b:27:25:de:56:a1:a7: 54:2c:49:cf:eb:2e:36:ea:d4:12:79:d4:ef:c8:94: 2b:b3:b0:98:97:cb:2d:84:ef:eb:07:20:15:6d:b9: 7c:44:6a:17:c3:ae:6d:d9:f0:19:5d:63:bd:fb:06: 1a:4c:ec:84:67:4d:ba:7d:2d:5d:35:96:2a:9a:0f: fa:b9:be:03:45:93:5d:33:28:2a:8c:c5:64:96:9c: 3a:f1:6a:0e:19:67:7b:0c:7b:e1:af:08:28:82:f3: d2:ac:99:f1:ba:fe:0c:a6:52:3f:04:4b:2f:29:de: 35:b4:26:db:65:43:62:18:18:51:31:ba:b4:e6:bc: d1:4a:d8:68:18:0f:9a:a1:43:97:10:c1:1d:61:fa: cd:04:df:fd:8c:83:cb:30:2d:36:1d:10:10:15:58: 54:06:08:60:b0:d3:3c:cd:20:ea:2b:3c:fd:1f:7f: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EE:8A:F7:0C:F0:F5:08:BA:17:57:5C:67:2C:79:53:E2:57:00:E0 X509v3 Authority Key Identifier: keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cc:2b:13:4e:d9:00:e7:2f:17:8c:a3:6a:4a:50:5f:20:48: a7:af:29:99:3e:42:9b:be:ad:38:a0:87:0c:de:ff:1e:c7:e0: 03:7d:f7:88:be:63:1d:06:c6:f1:34:32:0e:aa:67:61:20:2a: e6:2b:00:61:a6:e6:21:f3:a1:34:a2:3c:7f:81:f2:ed:54:9d: 4d:52:19:65:63:2e:f2:53:bf:02:fd:d5:a5:65:1f:e5:e1:3d: d8:ee:84:af:aa:28:95:21:bc:8f:30:88:6e:e9:fc:45:db:aa: 81:aa:16:14:57:96:b1:7f:f3:e3:72:83:b0:df:fd:28:b1:a0: e2:e8:ad:03:b1:9f:a0:ac:1a:0b:da:eb:de:5b:d5:d8:a1:c1: 0f:e9:98:85:4d:36:e1:a6:a3:9f:e3:77:8c:61:20:dc:2c:53: 98:17:58:6e:7c:0c:54:fc:f1:dd:ca:45:b7:0b:23:02:32:ee: d5:18:1e:03:71:6d:1f:a9:0d:c4:70:80:3f:ad:7b:b6:0f:22: 7c:6a:c6:04:54:53:43:d1:a8:ef:fa:3a:a5:3f:28:50:7b:44: 53:6a:96:5e:05:63:4b:26:52:40:91:fb:73:27:2b:08:62:bb: 0e:29:90:0d:18:4e:cf:f4:2c:8d:b0:e8:ce:49:98:dd:24:ab: 92:64:8f:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDQkExMTAvBgNVBAUTKDhEOEE4MEVDNzIwQUU3RUQ1M0ZEMjEwM0U4RTY5Qzg1 NTVBRDBGODYwHhcNMjYwNDA1MDUwMTM0WhcNMjYwNDEyMDUwMTM0WjAYMRYwFAYD VQQDEw02OWQxZWNhZi1lZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LC6Bty0kDFWjOXyByYH3WmuhlR4ZbFWbbm7tpifvqWTjPAuDJKfVFWbgeh0 NYFqSFAUQdFe6YasQ0LV7sNU+EH9vRLiAAcEs7+k0IstpxoBDSsnJd5WoadULEnP 6y426tQSedTvyJQrs7CYl8sthO/rByAVbbl8RGoXw65t2fAZXWO9+wYaTOyEZ026 fS1dNZYqmg/6ub4DRZNdMygqjMVklpw68WoOGWd7DHvhrwgogvPSrJnxuv4MplI/ BEsvKd41tCbbZUNiGBhRMbq05rzRSthoGA+aoUOXEMEdYfrNBN/9jIPLMC02HRAQ FVhUBghgsNM8zSDqKzz9H3+sdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzuivcM 8PUIuhdXXGcseVPiVwDgMB8GA1UdIwQYMBaAFI2KgOxyCuftU/0hA+jmnIVVrQ+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUNCQS81ODNFMkI5QTZC NjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUtMVRfU0VENk9hY2hWV3RE NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUNCQS81ODNFMkI5QTZCNjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUt MVRfU0VENk9hY2hWV3RENFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABswrE07ZAOcvF4yjakpQXyBIp68pmT5Cm76tOKCHDN7/HsfgA333iL5jHQbG 8TQyDqpnYSAq5isAYabmIfOhNKI8f4Hy7VSdTVIZZWMu8lO/Av3VpWUf5eE92O6E r6oolSG8jzCIbun8RduqgaoWFFeWsX/z43KDsN/9KLGg4uitA7GfoKwaC9rr3lvV 2KHBD+mYhU024aajn+N3jGEg3CxTmBdYbnwMVPzx3cpFtwsjAjLu1RgeA3FtH6kN xHCAP617tg8ifGrGBFRTQ9Go7/o6pT8oUHtEU2qWXgVjSyZSQJH7cycrCGK7DimQ DRhOz/QsjbDozkmY3SSrkmSPMg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:31 2026 by rpki-client