$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft File: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json) Hash identifier: mMBFNk9roi1mwXd+NuV39kWLbWppMjad742+PLMbcVM= Subject key identifier: 47:1F:C8:6D:4B:B2:B8:39:16:75:98:82:01:12:A8:6C:8E:FB:6A:06 Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17 Certificate issuer: /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft Manifest number: 6F Signing time: Wed 25 Mar 2026 07:17:04 +0000 Manifest this update: Wed 25 Mar 2026 07:17:04 +0000 Manifest next update: Wed 01 Apr 2026 07:17:04 +0000 Files and hashes: 1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: Eqwtxz06ApQDrdIDEqBiAnv5M9PgqgNOFM1o/sFrmR0=) 2: 65009C2C081D11F19944049E323D8C67.roa (hash: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=) 3: 14546D12FF3F11F0805DCCBD8DEE528E.roa (hash: Q1csuSiprpfO+YLO7DTZ4z2P7rX3W4WGdzmbPVATNiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317 Validity Not Before: Mar 25 07:17:04 2026 GMT Not After : Apr 1 07:17:04 2026 GMT Subject: CN=69c38bf0-7abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:5b:42:34:48:34:0e:b5:06:a1:a3:3b:01: 47:2a:a5:80:09:35:77:74:04:9d:22:25:e6:bb:41: f6:5f:31:5d:19:26:0c:7e:a6:19:51:46:03:07:22: 31:3a:8c:77:bf:f9:b8:8a:12:6e:fd:9b:0c:3a:67: a4:06:80:6b:ef:6d:c9:c2:75:a4:9f:2a:06:c3:d0: 23:92:b6:86:a0:d7:46:68:c3:97:96:b3:81:83:f1: 94:2c:33:47:9f:0e:86:d0:b0:4f:bd:27:7d:43:7c: 90:ae:9c:7c:ee:1a:6f:f0:80:86:38:b9:5e:1c:c3: f2:a0:c9:1e:33:32:77:ee:54:88:d0:b6:12:0a:3e: 56:f6:e4:84:70:b0:b2:0c:50:f2:b4:bf:e7:28:21: e4:38:80:61:7f:5e:02:bf:34:2a:07:37:f3:84:f0: 93:06:16:ef:b5:a2:5e:59:25:41:1a:b6:7b:8b:5d: 70:60:4a:8b:60:d5:12:61:e8:e0:78:e2:45:4f:37: 53:c7:6f:50:87:29:6c:10:b3:0a:3c:9a:eb:b5:56: 37:25:af:a8:d7:22:0e:21:d3:0e:62:f2:3a:e8:4a: 5b:15:de:f7:98:d3:47:90:ef:a5:7d:48:24:e2:b0: bc:5c:bc:bc:ea:52:63:67:bf:e7:ba:e9:76:92:f3: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1F:C8:6D:4B:B2:B8:39:16:75:98:82:01:12:A8:6C:8E:FB:6A:06 X509v3 Authority Key Identifier: keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:4e:9a:2d:98:3c:90:1f:88:a6:2f:3b:eb:18:48:d2:fb:15: 3f:fc:2e:1e:26:8d:7a:ad:0d:51:88:66:c4:9a:a3:2d:65:10: 70:9b:4b:47:93:30:c8:52:10:06:72:0d:cb:aa:d5:c4:43:35: 4c:7d:14:50:b7:2c:65:93:64:73:28:2c:56:1a:9f:03:b4:77: 97:25:0e:ff:91:0f:e0:5e:e9:c6:3b:f1:fe:31:77:6a:85:35: dc:66:8f:7c:1e:6d:d8:14:47:12:20:5e:56:41:33:5d:d8:86: 79:e5:b8:eb:38:1a:a9:45:97:da:f3:92:e2:24:4a:9d:b7:31: e7:67:6e:45:be:d3:72:fc:15:c4:f4:ba:10:53:f4:82:7d:63: 9b:c8:7c:7b:80:aa:46:1c:9b:28:0b:ed:bc:92:22:37:48:c6: 46:a8:11:a2:93:f6:78:d7:fe:3f:07:9a:d5:8a:78:f8:66:2f: 5a:cf:c8:73:85:a1:8b:ed:e2:7e:95:be:d9:55:bb:2b:81:4b: aa:3f:b2:de:a0:71:d9:9d:ca:4e:d7:fb:f5:2c:30:51:a1:da: 1e:28:cd:8c:89:5b:82:78:3f:98:3d:a8:1d:ef:ad:3d:dd:19: 83:27:3a:62:f1:10:1a:30:33:9c:ef:9b:65:0b:6b:aa:14:f6: d4:da:17:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjZFNzExMC8GA1UEBRMoOEM1QkMzREJFRkQ3RDdFODY0MkE4Rjg5NzlFRkI2NzNG MEUxRjMxNzAeFw0yNjAzMjUwNzE3MDRaFw0yNjA0MDEwNzE3MDRaMBgxFjAUBgNV BAMTDTY5YzM4YmYwLTdhYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRwltCNEg0DrUGoaM7AUcqpYAJNXd0BJ0iJea7QfZfMV0ZJgx+phlRRgMHIjE6 jHe/+biKEm79mww6Z6QGgGvvbcnCdaSfKgbD0COStoag10Zow5eWs4GD8ZQsM0ef DobQsE+9J31DfJCunHzuGm/wgIY4uV4cw/KgyR4zMnfuVIjQthIKPlb25IRwsLIM UPK0v+coIeQ4gGF/XgK/NCoHN/OE8JMGFu+1ol5ZJUEatnuLXXBgSotg1RJh6OB4 4kVPN1PHb1CHKWwQswo8muu1Vjclr6jXIg4h0w5i8jroSlsV3veY00eQ76V9SCTi sLxcvLzqUmNnv+e66XaS84UlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURx/IbUuy uDkWdZiCARKobI77agYwHwYDVR0jBBgwFoAUjFvD2+/X1+hkKo+Jee+2c/Dh8xcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNkU3L0FDQjVGNzQ2OURE NDExRjBBNjlGQzYzRkM0RjlBRTAyL2pGdkQyLV9YMS1oa0tvLUplZS0yY19EaDh4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvakZ2RDItX1gxLWhrS28tSmVlLTJjX0RoOHhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy NkU3L0FDQjVGNzQ2OURENDExRjBBNjlGQzYzRkM0RjlBRTAyL2pGdkQyLV9YMS1o a0tvLUplZS0yY19EaDh4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC9TpotmDyQH4imLzvrGEjS+xU//C4eJo16rQ1RiGbEmqMtZRBwm0tHkzDIUhAG cg3LqtXEQzVMfRRQtyxlk2RzKCxWGp8DtHeXJQ7/kQ/gXunGO/H+MXdqhTXcZo98 Hm3YFEcSIF5WQTNd2IZ55bjrOBqpRZfa85LiJEqdtzHnZ25FvtNy/BXE9LoQU/SC fWObyHx7gKpGHJsoC+28kiI3SMZGqBGik/Z41/4/B5rVinj4Zi9az8hzhaGL7eJ+ lb7ZVbsrgUuqP7LeoHHZncpO1/v1LDBRodoeKM2MiVuCeD+YPagd76093RmDJzpi 8RAaMDOc75tlC2uqFPbU2heQ -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:45 2026 by rpki-client