$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: BmA/SXsAKpUPQRY5a2gpUzbwdboH6Nc43OiMCrAOEpQ= Subject key identifier: BD:C2:CC:20:DE:BE:E8:C7:99:82:41:CC:2C:57:1A:19:45:F9:B1:68 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0A65 Signing time: Tue 24 Mar 2026 19:26:15 +0000 Manifest this update: Tue 24 Mar 2026 19:26:14 +0000 Manifest next update: Tue 31 Mar 2026 19:26:14 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: /2PqrlKNaYVNiHeOObKPdmmoXs7nE60KP+vMIT80b3E=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: lMbLeQ9y+VcqNaUu40E6Ont31pNHR+PjOYoL46iU/ug=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: tTZXDpG6s0I7epPtJd00/Iy7JGi1h8+PbbN85OVIZMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Mar 24 19:26:14 2026 GMT Not After : Mar 31 19:26:14 2026 GMT Subject: CN=69c2e557-3839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:93:d0:e3:98:21:60:1a:a3:2a:26:b4:ce: 8c:b8:bf:51:25:9b:3b:78:0e:45:a2:cc:3f:7a:05: b1:01:9c:48:8e:60:38:93:04:91:fa:66:5a:32:c0: fc:8d:8d:11:0e:8e:10:4d:82:c8:64:aa:ac:23:88: 21:40:a9:7c:be:1b:bf:ae:b3:9b:8e:19:b3:be:b4: 3b:fe:54:8b:ea:2a:d0:f6:19:58:eb:38:c7:3a:e7: 45:89:52:8f:60:91:8d:41:ef:53:a0:22:c5:c4:0b: bd:da:a6:ca:26:94:a9:49:30:5d:84:93:57:56:9b: bf:13:48:5d:75:34:22:c1:48:96:af:d5:27:aa:9a: ca:00:f9:6f:d2:46:ea:9a:0d:51:f9:07:1b:4f:9f: 45:33:8c:a6:1e:13:64:4c:d1:ff:07:25:d1:ce:b4: 40:34:27:33:7b:eb:87:e0:43:fc:58:e7:dc:8c:50: 72:89:0e:42:30:76:8f:10:5f:5d:d6:30:d7:b6:e3: a9:8b:b2:16:cf:15:f3:aa:b6:91:15:cc:09:f5:b7: de:e2:14:73:82:31:dd:8c:b3:58:88:32:39:1f:5c: 3a:38:e8:ef:df:32:ed:93:cf:1d:f3:77:7e:38:37: 98:5c:fe:39:86:7a:25:3c:dc:e0:ec:18:75:75:09: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:CC:20:DE:BE:E8:C7:99:82:41:CC:2C:57:1A:19:45:F9:B1:68 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:0a:e0:05:bc:6c:80:bb:0a:96:22:8e:c9:fc:c8:80:b2:eb: d3:98:9b:fc:34:a9:15:ec:66:43:2b:a1:85:e4:94:b5:2b:df: 69:0a:ff:aa:e6:ea:7d:d8:0f:22:36:0a:ec:a9:50:88:fd:76: d5:85:91:49:23:69:20:9a:c3:40:55:99:48:c1:ce:14:e3:b0: 59:86:ff:86:e8:5a:e2:14:2b:17:53:3a:48:dd:78:f6:24:e8: cb:d0:63:78:ba:73:ee:88:d8:23:25:3e:33:f0:1e:0b:e4:f7: cf:4c:07:b1:ec:05:e7:79:f6:dd:00:ff:09:09:11:53:b6:97: 0c:e8:85:3e:43:f9:c7:d8:4c:a8:83:39:05:9d:12:48:3e:7b: 51:63:fb:85:2d:a1:0e:e6:a2:a6:e2:71:0d:1e:fe:c3:86:4e: aa:a5:58:c5:9f:1c:d0:57:f3:d8:f0:7c:88:15:55:b3:85:79: 8f:5e:a6:b9:73:aa:b5:5d:42:9d:e4:e3:29:0b:9b:70:95:27: 6c:31:30:15:35:35:60:15:00:fd:78:0d:de:99:da:51:57:25: 29:e0:77:31:a1:98:5f:f2:4a:e7:36:19:f5:3c:d8:b9:47:e2: a1:f2:b7:aa:0d:01:45:a1:4f:99:a7:7f:0a:6d:fb:f2:1e:5d: 33:cd:3d:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjYwMzI0MTkyNjE0WhcNMjYwMzMxMTkyNjE0WjAYMRYwFAYD VQQDEw02OWMyZTU1Ny0zODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIWT0OOYIWAaoyomtM6MuL9RJZs7eA5Fosw/egWxAZxIjmA4kwSR+mZaMsD8 jY0RDo4QTYLIZKqsI4ghQKl8vhu/rrObjhmzvrQ7/lSL6irQ9hlY6zjHOudFiVKP YJGNQe9ToCLFxAu92qbKJpSpSTBdhJNXVpu/E0hddTQiwUiWr9UnqprKAPlv0kbq mg1R+QcbT59FM4ymHhNkTNH/ByXRzrRANCcze+uH4EP8WOfcjFByiQ5CMHaPEF9d 1jDXtuOpi7IWzxXzqraRFcwJ9bfe4hRzgjHdjLNYiDI5H1w6OOjv3zLtk88d83d+ ODeYXP45hnolPNzg7Bh1dQnm6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3CzCDe vujHmYJBzCxXGhlF+bFoMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0QrgBbxsgLsKliKOyfzIgLLr05ib/DSpFexmQyuhheSUtSvfaQr/qubqfdgP IjYK7KlQiP121YWRSSNpIJrDQFWZSMHOFOOwWYb/huha4hQrF1M6SN149iToy9Bj eLpz7ojYIyU+M/AeC+T3z0wHsewF53n23QD/CQkRU7aXDOiFPkP5x9hMqIM5BZ0S SD57UWP7hS2hDuaipuJxDR7+w4ZOqqVYxZ8c0Ffz2PB8iBVVs4V5j16muXOqtV1C neTjKQubcJUnbDEwFTU1YBUA/XgN3pnaUVclKeB3MaGYX/JK5zYZ9TzYuUfiofK3 qg0BRaFPmad/Cm378h5dM809Ww== -----END CERTIFICATE-----Generated at Thu Mar 26 02:43:43 2026 by rpki-client