$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: XNOZJ8Gp8TA2A0rJtgbvO8Wtfmr51QFaz817hBAVhxI= Subject key identifier: 32:74:67:F3:E4:DF:04:0F:A5:5A:0D:B8:67:0C:12:FB:07:70:6F:40 Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 3544 Signing time: Thu 30 Apr 2026 15:17:41 +0000 Manifest this update: Thu 30 Apr 2026 15:17:40 +0000 Manifest next update: Thu 07 May 2026 15:17:40 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: wTo18ICgdhDRQi++qEJjkIasII9umM7BSvFexRvDrv8=) 2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ofcFpR0dG4lGMFPSarAEqgGjniCtEUFFNDbSn2FRdQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 15:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Apr 30 15:17:40 2026 GMT Not After : May 7 15:17:40 2026 GMT Subject: CN=69f37295-5eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:76:61:37:d5:fd:1a:14:2a:62:58:84:06: d4:f3:e6:a6:f1:14:d8:29:27:d6:1f:36:4d:c5:ed: cc:c8:ce:ff:2c:20:f7:d9:68:5d:ba:40:d9:e5:0a: 46:b2:17:31:ee:78:04:da:78:6e:c3:a1:8d:43:b9: 5e:e9:3a:d2:76:8a:7a:b1:41:01:d1:fe:fe:43:70: e3:23:e2:26:b5:3d:a6:cc:8b:73:cb:3d:9f:38:64: 85:c6:9d:30:fe:fd:67:c0:11:c0:c3:90:9f:ca:6f: 00:45:43:e1:c0:af:f2:f2:37:a9:cc:1c:04:8e:5d: 0a:bb:64:85:b3:08:03:3d:fd:33:5c:3a:ac:77:68: 97:74:cc:34:61:49:1f:0a:c9:d7:56:ef:79:57:ca: f0:6d:4c:c1:4c:a2:03:ee:2e:04:e2:f2:e8:dd:8f: 0d:c2:fd:66:a7:ad:ea:fd:18:c7:db:81:bb:bf:a3: 7a:07:eb:7d:ec:98:77:c2:9b:a8:b2:df:98:7c:30: c1:e9:35:34:3e:48:11:7d:40:a5:31:79:2e:97:f3: b4:85:ed:1f:58:bc:43:cc:84:c7:8e:f8:c8:8b:de: 4e:e6:bc:03:35:c7:1b:81:d4:fd:5a:c2:62:d0:72: cb:76:b9:18:15:ff:ac:fc:71:ac:63:fa:3a:9b:2c: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:74:67:F3:E4:DF:04:0F:A5:5A:0D:B8:67:0C:12:FB:07:70:6F:40 X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:32:93:82:5a:1b:81:ec:f4:9a:98:81:fc:16:99:73:6c: 4e:65:89:f6:22:2c:52:96:2b:a4:01:4c:6e:10:34:70:0f:f4: 67:ae:07:f3:b1:b2:85:bf:36:0a:55:4e:ae:91:58:04:20:55: 55:9f:af:61:0e:f6:e8:48:cd:f4:f8:d5:09:0b:60:41:8b:83: 74:64:85:1c:56:c6:32:61:5e:25:58:6c:8e:51:fb:bb:0a:59: 2a:2d:2e:4f:05:54:8d:4f:1d:36:90:42:b2:1b:b2:d6:c8:b1: f0:2a:fd:d1:d1:df:ba:1f:08:f6:f4:5f:58:6e:e7:4a:59:0b: aa:67:c4:a8:a7:79:ab:1a:66:39:60:9f:3d:65:67:e6:45:5f: d3:45:f7:4e:ba:9e:93:35:56:cf:0e:f1:e1:9d:4a:e2:64:9f: 23:c9:4a:e5:56:2e:af:49:91:89:d9:5c:9e:33:a8:dd:d2:3c: 11:b3:ba:3a:50:76:b0:3d:6d:c4:71:fa:60:29:c7:f9:38:1d: 27:87:65:80:3e:df:c6:9a:c3:57:1f:46:98:6f:7f:e6:02:38: 5f:ca:13:71:5d:1b:03:89:83:67:72:2d:e0:6f:a3:d3:47:e5: ce:2a:03:c7:11:01:2b:4e:0e:9e:cf:b4:fc:6d:67:2f:d8:9c: cc:6a:56:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjYwNDMwMTUxNzQwWhcNMjYwNTA3MTUxNzQwWjAYMRYwFAYD VQQDEw02OWYzNzI5NS01ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ed2YTfV/RoUKmJYhAbU8+am8RTYKSfWHzZNxe3MyM7/LCD32WhdukDZ5QpG shcx7ngE2nhuw6GNQ7le6TrSdop6sUEB0f7+Q3DjI+ImtT2mzItzyz2fOGSFxp0w /v1nwBHAw5Cfym8ARUPhwK/y8jepzBwEjl0Ku2SFswgDPf0zXDqsd2iXdMw0YUkf CsnXVu95V8rwbUzBTKID7i4E4vLo3Y8Nwv1mp63q/RjH24G7v6N6B+t97Jh3wpuo st+YfDDB6TU0PkgRfUClMXkul/O0he0fWLxDzITHjvjIi95O5rwDNccbgdT9WsJi 0HLLdrkYFf+s/HGsY/o6myxFkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJ0Z/Pk 3wQPpVoNuGcMEvsHcG9AMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3Iyk4JaG4Hs9JqYgfwWmXNsTmWJ9iIsUpYrpAFMbhA0cA/0Z64H87Gyhb82 ClVOrpFYBCBVVZ+vYQ726EjN9PjVCQtgQYuDdGSFHFbGMmFeJVhsjlH7uwpZKi0u TwVUjU8dNpBCshuy1six8Cr90dHfuh8I9vRfWG7nSlkLqmfEqKd5qxpmOWCfPWVn 5kVf00X3TrqekzVWzw7x4Z1K4mSfI8lK5VYur0mRidlcnjOo3dI8EbO6OlB2sD1t xHH6YCnH+TgdJ4dlgD7fxprDVx9GmG9/5gI4X8oTcV0bA4mDZ3It4G+j00flzioD xxEBK04Ons+0/G1nL9iczGpWTQ== -----END CERTIFICATE-----Generated at Fri May 1 13:55:20 2026 by rpki-client