$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: 1dqiTacUTV54TmQ1U6b31XhYBajM1f29OXSkwB4rJjQ= Subject key identifier: 39:7C:A5:56:FA:92:19:5C:43:1D:43:31:73:3D:1D:B4:CB:91:AF:5C Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 01CF Signing time: Sun 05 Apr 2026 03:10:39 +0000 Manifest this update: Sun 05 Apr 2026 03:10:38 +0000 Manifest next update: Sun 12 Apr 2026 03:10:38 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: /AIqZ/tNPb7tdiyOphY0jGBOTfxBoiyAv08xRUX95nI=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: mY3dtD5W8Iju1eIPL4linHM5QD9vvZCX/OXihI1ApCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Apr 5 03:10:38 2026 GMT Not After : Apr 12 03:10:38 2026 GMT Subject: CN=69d1d2af-3e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:4b:5b:91:2d:6b:46:45:f4:b8:86:61:b4: 69:2b:60:0f:b6:67:3e:53:a2:5b:8f:31:c5:dc:57: 2e:f3:0c:74:08:6a:b9:c8:bb:24:78:5d:5f:2d:04: fd:5a:15:2e:fc:52:73:38:9e:a4:aa:1e:44:d7:9c: 7e:ba:33:32:c5:a1:bf:ca:20:9b:50:4f:ab:c9:43: 11:e0:22:d6:4a:6d:2b:cd:77:5b:9b:c7:c1:57:e7: 11:66:2f:83:02:b4:83:9c:a6:dc:01:99:8e:30:41: 9b:0d:a1:c4:67:87:66:0a:d5:3f:6a:94:01:30:27: 06:2c:56:f4:79:3c:78:6c:f0:d5:c7:cd:90:49:38: 63:db:1d:59:59:04:a3:37:9f:8a:87:96:76:c0:24: e5:87:59:b2:90:44:bb:70:c6:59:ad:18:8f:46:13: 91:0c:79:68:81:89:0c:55:08:4d:79:e2:03:f0:62: 66:e4:bc:e7:ff:b7:fa:9d:84:e7:5c:22:7d:3f:51: 50:54:cf:8f:26:8f:0a:9b:00:5b:a8:d9:71:76:59: d3:44:32:bd:18:3e:c0:b4:2d:c2:fb:fd:94:b5:b9: 52:29:bf:21:a3:31:c5:42:39:c3:ec:fc:c4:c3:7d: 43:b7:a5:23:a3:c1:20:a2:c9:74:62:bf:ea:db:df: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:A5:56:FA:92:19:5C:43:1D:43:31:73:3D:1D:B4:CB:91:AF:5C X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:8a:22:47:c7:c3:53:7d:fa:6a:fa:be:b8:86:39:6c:25: b4:c0:b6:cf:44:15:f5:bc:5d:11:84:2d:5a:9e:eb:69:ea:8d: 3b:e4:fc:a5:82:0a:b5:56:7e:96:b3:5b:76:46:c6:86:53:50: 0d:4f:89:0b:65:9a:12:2b:6f:74:2f:3d:73:da:8a:b9:10:60: a6:b3:37:ac:05:63:74:cc:68:00:c1:72:95:6b:9b:2a:f8:88: a8:c2:38:ed:08:07:b7:4f:30:54:dc:43:22:9b:e8:33:eb:f3: 86:59:15:13:b9:a5:ff:45:17:82:fc:ad:a4:58:4a:e1:b8:0f: dd:b8:47:05:3d:3b:9c:04:cc:95:ce:6c:ab:6f:f6:3d:df:81: 9d:5b:f3:65:9a:4a:99:ec:83:27:d9:97:3f:ed:06:1d:36:b9: bc:4f:94:b6:5b:4e:9e:5b:f0:bc:a7:96:2e:ee:e5:aa:ab:66: ae:62:80:bf:20:e6:c4:2d:d0:16:c2:0e:ed:7b:64:5b:b2:88: ed:a8:3a:f9:e3:d7:76:8e:83:5f:75:00:94:75:15:bf:06:71: 6b:cc:fc:92:d3:e3:48:53:3e:2c:a6:b8:1a:b9:85:1d:a1:fd: de:05:dd:13:61:a1:f5:02:21:3d:fa:2c:a5:c9:0f:17:a4:92: d2:a3:86:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjYwNDA1MDMxMDM4WhcNMjYwNDEyMDMxMDM4WjAYMRYwFAYD VQQDEw02OWQxZDJhZi0zZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKRLW5Eta0ZF9LiGYbRpK2APtmc+U6JbjzHF3Fcu8wx0CGq5yLskeF1fLQT9 WhUu/FJzOJ6kqh5E15x+ujMyxaG/yiCbUE+ryUMR4CLWSm0rzXdbm8fBV+cRZi+D ArSDnKbcAZmOMEGbDaHEZ4dmCtU/apQBMCcGLFb0eTx4bPDVx82QSThj2x1ZWQSj N5+Kh5Z2wCTlh1mykES7cMZZrRiPRhORDHlogYkMVQhNeeID8GJm5Lzn/7f6nYTn XCJ9P1FQVM+PJo8KmwBbqNlxdlnTRDK9GD7AtC3C+/2UtblSKb8hozHFQjnD7PzE w31Dt6Ujo8Egosl0Yr/q2992pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl8pVb6 khlcQx1DMXM9HbTLka9cMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALI+KIkfHw1N9+mr6vriGOWwltMC2z0QV9bxdEYQtWp7raeqNO+T8pYIKtVZ+ lrNbdkbGhlNQDU+JC2WaEitvdC89c9qKuRBgprM3rAVjdMxoAMFylWubKviIqMI4 7QgHt08wVNxDIpvoM+vzhlkVE7ml/0UXgvytpFhK4bgP3bhHBT07nATMlc5sq2/2 Pd+BnVvzZZpKmeyDJ9mXP+0GHTa5vE+UtltOnlvwvKeWLu7lqqtmrmKAvyDmxC3Q FsIO7XtkW7KI7ag6+ePXdo6DX3UAlHUVvwZxa8z8ktPjSFM+LKa4GrmFHaH93gXd E2Gh9QIhPfospckPF6SS0qOGVg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:02 2026 by rpki-client