$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft File: jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json) Hash identifier: TGbwyuXgN5Gb8X9kVRdKj/qmeOMElbd/1nW1Sq/KEZs= Subject key identifier: 52:39:EE:31:B5:7E:60:27:69:B1:EE:7F:AA:B5:B3:E3:F7:FD:BA:E0 Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF Certificate issuer: /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft Manifest number: 66 Signing time: Sun 05 Apr 2026 07:17:57 +0000 Manifest this update: Sun 05 Apr 2026 07:17:57 +0000 Manifest next update: Sun 12 Apr 2026 07:17:57 +0000 Files and hashes: 1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: qoRX7tJ/4llVIaVWgyzG8wdXFWhrvmd4zxzUJVoZexo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Validity Not Before: Apr 5 07:17:57 2026 GMT Not After : Apr 12 07:17:57 2026 GMT Subject: CN=69d20ca5-f86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:8e:56:29:c9:4d:b8:5e:df:b1:7a:14:d0: eb:28:dc:9b:fc:97:a8:49:ea:ce:85:c7:f8:ce:e6: 3d:b0:b7:c0:89:ed:d1:6b:59:28:76:45:ad:74:d1: 33:9f:e5:64:46:ff:1d:c9:62:b5:d2:8b:1a:2a:4e: c1:09:1a:85:97:5a:4b:d4:97:09:09:c8:d7:0b:23: 3d:f6:67:ab:1d:f2:8d:9a:86:b8:e2:c1:9e:a9:0a: 06:1c:cf:f4:2c:7c:0b:b8:90:c3:95:76:3c:27:ba: 50:9a:96:9c:c7:d1:0d:27:1b:74:2d:9b:a2:6d:ea: cb:3e:b6:47:10:17:e4:cd:d1:63:9a:92:89:e3:dd: 34:3e:0c:03:05:c8:8f:26:83:d0:f9:b9:34:1d:5f: ae:39:cc:62:a9:10:ef:dc:a0:cb:2d:2d:34:5f:90: ea:92:21:d0:81:68:29:d3:a3:a7:61:e6:d0:71:8c: a5:c0:56:24:be:0c:38:3b:12:5d:84:1b:07:28:5d: 6e:71:fe:0d:51:07:43:1a:72:92:f9:13:00:1b:6e: d5:66:22:4f:4b:2f:de:a4:70:af:2f:77:1b:38:8a: 21:6e:8d:4e:f3:94:e1:6d:c9:14:fe:5f:f6:ac:a5: 31:b9:99:e5:b9:45:cd:61:00:a3:5f:1e:3c:2d:6e: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:39:EE:31:B5:7E:60:27:69:B1:EE:7F:AA:B5:B3:E3:F7:FD:BA:E0 X509v3 Authority Key Identifier: keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:99:78:2c:d8:97:eb:75:16:c3:f2:06:cb:66:77:8e:dd:de: 1f:7f:60:f7:f8:76:19:71:49:0b:60:65:26:69:bd:2f:4c:85: 77:c5:ca:e4:0c:01:ff:fd:3f:a1:6a:55:e2:d8:87:6c:bc:ac: c0:c9:05:85:44:7e:40:df:58:41:29:a6:a1:55:3d:d5:59:50: 18:3b:4a:7e:6a:9e:6e:a7:0d:fb:0f:9e:da:d7:f7:09:ca:69: 71:80:f8:20:74:3d:51:fa:06:db:a7:f1:9b:cb:b1:b4:6b:0f: 1c:89:f0:51:91:9a:00:f5:fa:5c:2e:c1:de:db:48:5e:c8:43: 35:eb:4a:3a:8e:4b:34:5d:0f:a5:87:8b:c5:3b:31:be:83:63: 44:78:f7:43:b5:c4:e9:07:8e:b5:91:13:d4:e9:8c:3d:81:23: 04:a5:cd:26:cd:9c:e9:65:ef:f6:cd:6f:b3:24:85:f7:37:4b: 5d:e5:2c:88:10:a7:0b:78:49:1e:54:ea:2b:f9:d8:33:6a:37: b6:b4:e7:b2:89:94:78:70:37:27:f8:57:8b:f7:e9:41:e3:60: 70:4e:f3:a9:69:89:93:3c:e0:d6:86:88:bc:ab:94:9f:08:f1: 9e:b1:28:ca:67:08:b3:4f:11:6a:02:29:86:90:7c:da:fb:40: bf:74:83:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoOENEM0UxQkNGQzc3ODg4ODczRjZGNTg2RjY0QTY0MzFB M0I1NkNGRjAeFw0yNjA0MDUwNzE3NTdaFw0yNjA0MTIwNzE3NTdaMBgxFjAUBgNV BAMTDTY5ZDIwY2E1LWY4NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMEI5WKclNuF7fsXoU0Oso3Jv8l6hJ6s6Fx/jO5j2wt8CJ7dFrWSh2Ra100TOf 5WRG/x3JYrXSixoqTsEJGoWXWkvUlwkJyNcLIz32Z6sd8o2ahrjiwZ6pCgYcz/Qs fAu4kMOVdjwnulCalpzH0Q0nG3Qtm6Jt6ss+tkcQF+TN0WOakonj3TQ+DAMFyI8m g9D5uTQdX645zGKpEO/coMstLTRfkOqSIdCBaCnTo6dh5tBxjKXAViS+DDg7El2E GwcoXW5x/g1RB0MacpL5EwAbbtVmIk9LL96kcK8vdxs4iiFujU7zlOFtyRT+X/as pTG5meW5Rc1hAKNfHjwtbqI5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUjnuMbV+ YCdpse5/qrWz4/f9uuAwHwYDVR0jBBgwFoAUjNPhvPx3iIhz9vWG9kpkMaO1bP8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzVBMjlBQjFFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUloejl2V0c5a3BrTWFPMWJQ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5QaHZQeDNpSWh6OXZXRzlrcGtNYU8xYlA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzVBMjlBQjFFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUlo ejl2V0c5a3BrTWFPMWJQOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUmXgs2JfrdRbD8gbLZneO3d4ff2D3+HYZcUkLYGUmab0vTIV3xcrkDAH//T+h alXi2IdsvKzAyQWFRH5A31hBKaahVT3VWVAYO0p+ap5upw37D57a1/cJymlxgPgg dD1R+gbbp/Gby7G0aw8cifBRkZoA9fpcLsHe20heyEM160o6jks0XQ+lh4vFOzG+ g2NEePdDtcTpB461kRPU6Yw9gSMEpc0mzZzpZe/2zW+zJIX3N0td5SyIEKcLeEke VOor+dgzaje2tOeyiZR4cDcn+FeL9+lB42BwTvOpaYmTPODWhoi8q5SfCPGesSjK ZwizTxFqAimGkHza+0C/dIPB -----END CERTIFICATE-----Generated at Mon Apr 6 08:40:51 2026 by rpki-client