$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft File: ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json) Hash identifier: dfKiEYIYsgJu//wSZRr9SyJykF1NKMDmyf4VpqoEI64= Subject key identifier: 32:00:40:F0:B5:91:54:A2:03:31:D6:58:4B:59:BB:94:18:48:51:3E Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C Certificate issuer: /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft Manifest number: 20 Signing time: Sun 29 Mar 2026 08:33:09 +0000 Manifest this update: Sun 29 Mar 2026 08:33:09 +0000 Manifest next update: Sun 05 Apr 2026 08:33:09 +0000 Files and hashes: 1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: G/387inT9A/KoFe6gAnMxP1NO4QR6+AZ0y45jlhfC/M=) 2: 850C91D6001811F18252CD21426F56BC.roa (hash: ORNtuuH38oLt+jxXdiUvg+eXI11gGqs/RG4Rl5oBnjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C Validity Not Before: Mar 29 08:33:09 2026 GMT Not After : Apr 5 08:33:09 2026 GMT Subject: CN=69c8e3c5-c9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:62:aa:73:08:ac:19:d3:d4:78:20:a1:f7: 09:eb:44:99:cc:75:f8:a1:e3:ac:cb:03:f0:db:49: ce:82:9e:ad:24:73:cd:df:ab:c4:2c:f8:12:bd:68: ce:c5:e6:50:a4:25:2f:a3:2a:6e:e5:66:1d:8e:0b: a5:09:c7:17:79:03:c5:c2:02:c8:ce:ea:ad:cc:17: 8f:a6:47:0b:1a:b0:e5:5d:7f:77:bd:98:cf:87:34: 2a:51:fb:92:ab:2c:3b:e5:2a:5b:6f:86:dd:ee:81: 6f:de:b6:b6:b6:91:5b:ea:f5:fe:21:1c:7a:61:ef: 8b:28:7a:e1:2a:9d:35:88:9e:a9:6b:8c:f1:e4:4a: 2d:9b:f2:5f:86:93:a1:5d:f2:12:ad:a2:95:e0:a0: 7c:f4:e2:43:97:27:12:e6:fe:ea:85:05:4d:b8:78: ab:b0:70:b8:53:67:a3:e7:38:53:b1:82:97:96:e6: dd:8f:18:7b:38:87:a3:0e:46:6d:f6:c3:6c:5a:46: 31:aa:80:c6:68:2b:ba:fa:73:e3:f6:4a:f1:51:a0: a5:5c:18:7e:62:8a:31:89:cb:70:84:08:ce:a0:b7: 03:25:0c:b2:e2:83:c7:b0:ca:bf:d2:fa:ee:f5:fd: d8:61:e0:a3:f6:08:a7:4a:26:e1:58:d9:5b:7a:6a: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:40:F0:B5:91:54:A2:03:31:D6:58:4B:59:BB:94:18:48:51:3E X509v3 Authority Key Identifier: keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0f:98:6f:30:ad:5d:5a:e4:7d:97:53:5b:f0:2d:05:65:e0: 76:f8:3b:b8:9d:64:82:4b:c0:d8:c1:bc:fc:94:a1:7f:29:e4: 86:16:74:21:de:86:db:f9:97:97:b9:01:50:32:7b:cc:dd:47: 52:ef:99:4b:4a:60:b3:8b:52:e1:0d:0d:45:da:72:92:2f:ae: be:f9:b3:18:bc:81:72:d2:f3:b4:1b:cb:60:26:cd:7d:21:38: 99:18:5e:5e:d0:29:4b:24:c4:3c:4a:31:81:05:75:b3:74:f3: 9f:c2:03:ac:39:5a:2b:3b:be:6c:f7:4d:ac:f0:a8:b7:fc:36: ff:22:7e:24:62:d2:1e:20:e1:fa:39:b5:bd:8e:7a:51:3f:1c: 15:63:20:22:16:5a:73:4b:37:29:26:80:6c:79:20:8c:cd:2f: 27:e0:83:ad:32:a6:7c:bf:2d:ff:d9:5a:75:0c:f8:b6:66:36: 31:61:5a:20:02:14:05:7e:41:87:fd:33:f7:32:00:f4:93:a0: 51:dc:be:f7:14:5d:74:2f:80:dc:93:65:a2:a5:22:31:68:4f: 16:2e:6e:61:a5:6d:eb:de:c1:f3:9c:ff:eb:8e:69:7f:d4:05: a9:3e:49:6e:5d:28:38:32:26:ed:ea:7b:9d:64:6f:a3:d7:34: 49:b1:aa:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUJFNTExMC8GA1UEBRMoOEVFRDc2OTg0RjIzMUFBMkM3MEYyOTgyMzc4REM2OURE ODNENTg1QzAeFw0yNjAzMjkwODMzMDlaFw0yNjA0MDUwODMzMDlaMBgxFjAUBgNV BAMTDTY5YzhlM2M1LWM5Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQjWKqcwisGdPUeCCh9wnrRJnMdfih46zLA/DbSc6Cnq0kc83fq8Qs+BK9aM7F 5lCkJS+jKm7lZh2OC6UJxxd5A8XCAsjO6q3MF4+mRwsasOVdf3e9mM+HNCpR+5Kr LDvlKltvht3ugW/etra2kVvq9f4hHHph74soeuEqnTWInqlrjPHkSi2b8l+Gk6Fd 8hKtopXgoHz04kOXJxLm/uqFBU24eKuwcLhTZ6PnOFOxgpeW5t2PGHs4h6MORm32 w2xaRjGqgMZoK7r6c+P2SvFRoKVcGH5iijGJy3CECM6gtwMlDLLig8ewyr/S+u71 /dhh4KP2CKdKJuFY2Vt6at4bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMgBA8LWR VKIDMdZYS1m7lBhIUT4wHwYDVR0jBBgwFoAUju12mE8jGqLHDymCN43Gndg9WFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxQkU1LzNFRTc3RTZFMDAx ODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FMSER5bUNONDNHbmRnOVdG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanUxMm1FOGpHcUxIRHltQ040M0duZGc5V0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx QkU1LzNFRTc3RTZFMDAxODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FM SER5bUNONDNHbmRnOVdGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSD5hvMK1dWuR9l1Nb8C0FZeB2+Du4nWSCS8DYwbz8lKF/KeSGFnQh3obb+ZeX uQFQMnvM3UdS75lLSmCzi1LhDQ1F2nKSL66++bMYvIFy0vO0G8tgJs19ITiZGF5e 0ClLJMQ8SjGBBXWzdPOfwgOsOVorO75s902s8Ki3/Db/In4kYtIeIOH6ObW9jnpR PxwVYyAiFlpzSzcpJoBseSCMzS8n4IOtMqZ8vy3/2Vp1DPi2ZjYxYVogAhQFfkGH /TP3MgD0k6BR3L73FF10L4Dck2WipSIxaE8WLm5hpW3r3sHznP/rjml/1AWpPklu XSg4Mibt6nudZG+j1zRJsapz -----END CERTIFICATE-----Generated at Mon Mar 30 13:18:34 2026 by rpki-client