$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json) Hash identifier: QQaFOMVdvBqimZsxiBmmZPAvzUI6Z8P66aRiGV0wKTw= Subject key identifier: 6F:E7:A9:6C:10:37:63:AE:CB:B9:0A:3B:D3:BC:13:52:CD:8B:D3:AC Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Certificate serial: 0A36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft Manifest number: 0A25 Signing time: Tue 24 Mar 2026 19:33:32 +0000 Manifest this update: Tue 24 Mar 2026 19:33:32 +0000 Manifest next update: Tue 31 Mar 2026 19:33:32 +0000 Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: +bSCRSxedCiGmRi4o5qK0cpMX7lq1FJu9mJtX46STrQ=) 2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: qvkCUWNVDf0eYzay+dMyQK+QMdrK0NOed+DI+LY6hA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2614 (0xa36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Validity Not Before: Mar 24 19:33:32 2026 GMT Not After : Mar 31 19:33:32 2026 GMT Subject: CN=69c2e70c-3f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:7b:d9:df:33:3a:c9:7f:69:33:92:fd:32: 7c:18:1e:d9:20:d2:30:30:bb:e3:48:44:19:38:bd: 72:6f:c6:64:b7:94:87:b3:3d:3c:71:e7:2f:8d:11: 01:e8:b4:a5:9d:31:a1:ac:fd:82:9a:95:1d:f8:b6: 96:ee:e2:13:43:69:59:ad:ef:4c:97:01:ca:96:93: 37:88:4f:ca:2d:03:ce:39:78:b9:c9:71:2e:26:52: f7:b2:1a:ea:c4:64:1d:e0:c8:64:43:99:99:ee:82: 68:d2:ad:93:ed:8f:22:11:85:7b:42:9c:da:60:f2: eb:02:81:52:bb:77:7b:79:25:51:07:55:54:9c:bb: a6:d8:8e:53:29:58:9a:8e:f7:f4:e1:84:37:e1:d2: 93:71:45:85:f1:c5:b3:57:6d:ce:bc:5b:88:b6:d4: 19:3b:3a:5b:73:b5:19:75:ab:36:1a:79:b4:3f:13: cd:00:f2:2a:ef:32:2e:8b:19:f2:dc:49:47:f4:bb: c8:95:1d:da:45:6f:15:29:e4:b6:ca:6d:ee:c9:dd: fa:b2:3b:24:31:77:f2:9c:95:56:4c:2b:32:74:97: ae:46:71:16:1c:99:a0:51:0c:8d:5f:5f:63:ec:3b: cc:a1:c9:99:f9:f5:68:5b:b5:fe:60:24:d1:74:64: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:A9:6C:10:37:63:AE:CB:B9:0A:3B:D3:BC:13:52:CD:8B:D3:AC X509v3 Authority Key Identifier: keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:f6:42:46:f8:25:9d:df:03:6d:25:7c:a3:65:24:58:6f:d2: 3e:5f:84:bc:14:04:b6:a3:18:c8:72:47:66:0f:60:c7:14:31: 4c:33:72:aa:a6:91:35:34:11:98:b4:72:ca:b0:1c:a0:61:c0: 9f:c7:8d:47:b3:9d:ab:e5:0a:a1:13:07:b4:8a:96:95:2c:77: f3:63:81:27:70:7b:b5:ad:84:f4:73:98:5e:d5:de:d3:f3:86: a5:1a:47:0f:ff:b5:94:ae:f7:6a:10:7a:7c:99:44:d5:bc:fa: 70:9a:fa:6c:70:5a:8f:7b:18:71:51:12:31:0f:5a:36:af:ab: 57:a6:b1:ab:4f:24:87:41:16:4e:36:d8:bd:91:b1:dc:d4:92: 1c:06:4e:2d:f3:a9:8f:70:51:43:6d:04:3d:86:33:d2:bd:3a: 9a:e3:23:95:fa:0f:0a:b0:d0:c5:db:3e:46:ce:0d:8c:a3:5d: 5b:ed:f8:44:2c:ae:09:69:e8:a3:37:53:a2:89:28:2d:58:6d: 5e:65:3a:cc:7f:73:c4:1c:74:31:94:9c:e9:d5:ff:4c:61:b6: 7e:85:5f:34:45:44:24:b5:f0:7a:16:b2:d1:3b:70:66:43:5b: 7c:d6:d3:b3:c0:9b:f1:b9:51:5b:de:33:1e:a4:30:84:78:1c: 56:b5:17:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw Q0M2RjI5MEIwHhcNMjYwMzI0MTkzMzMyWhcNMjYwMzMxMTkzMzMyWjAYMRYwFAYD VQQDEw02OWMyZTcwYy0zZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDl72d8zOsl/aTOS/TJ8GB7ZINIwMLvjSEQZOL1yb8Zkt5SHsz08cecvjREB 6LSlnTGhrP2CmpUd+LaW7uITQ2lZre9MlwHKlpM3iE/KLQPOOXi5yXEuJlL3shrq xGQd4MhkQ5mZ7oJo0q2T7Y8iEYV7QpzaYPLrAoFSu3d7eSVRB1VUnLum2I5TKVia jvf04YQ34dKTcUWF8cWzV23OvFuIttQZOzpbc7UZdas2Gnm0PxPNAPIq7zIuixny 3ElH9LvIlR3aRW8VKeS2ym3uyd36sjskMXfynJVWTCsydJeuRnEWHJmgUQyNX19j 7DvMocmZ+fVoW7X+YCTRdGTc5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/nqWwQ N2Ouy7kKO9O8E1LNi9OsMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2 NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu/ZCRvglnd8DbSV8o2UkWG/SPl+EvBQEtqMYyHJHZg9gxxQxTDNyqqaRNTQR mLRyyrAcoGHAn8eNR7Odq+UKoRMHtIqWlSx382OBJ3B7ta2E9HOYXtXe0/OGpRpH D/+1lK73ahB6fJlE1bz6cJr6bHBaj3sYcVESMQ9aNq+rV6axq08kh0EWTjbYvZGx 3NSSHAZOLfOpj3BRQ20EPYYz0r06muMjlfoPCrDQxds+Rs4NjKNdW+34RCyuCWno ozdTookoLVhtXmU6zH9zxBx0MZSc6dX/TGG2foVfNEVEJLXwehay0TtwZkNbfNbT s8Cb8blRW94zHqQwhHgcVrUX7g== -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:44 2026 by rpki-client