$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: dQwsjbflYz6J51gDrxXkn26b+FvTiKOUL/YQdY69IDs= Subject key identifier: 76:1E:F4:1C:F6:9F:B7:6E:A3:15:69:27:A6:73:CA:62:BF:32:C7:0C Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: 0225 Signing time: Wed 25 Mar 2026 02:13:00 +0000 Manifest this update: Wed 25 Mar 2026 02:13:00 +0000 Manifest next update: Wed 01 Apr 2026 02:13:00 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: czN+foEQ0j30snh8p1hBn5/xxEAuH1BbBHyKHh1EGCM=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: aUI4dz0ep/X08ebs/cz0TIEaXmB18GWOcBQgi/DyPNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Mar 25 02:13:00 2026 GMT Not After : Apr 1 02:13:00 2026 GMT Subject: CN=69c344ac-f37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:3d:ed:e0:eb:9f:c9:b8:6a:55:e7:29:de: 60:f8:ed:5c:d1:ec:58:9b:bd:d7:31:a4:2a:fc:89: 62:70:1d:d8:b3:86:75:2a:cc:5f:e1:a5:85:1f:59: 0c:53:f4:44:b7:18:87:66:42:86:09:ed:30:ea:60: a9:45:35:55:25:cb:63:60:73:1b:c8:fe:6b:59:6f: 46:89:73:9c:a6:a8:cd:66:93:5f:bc:42:38:cf:3b: 51:15:0a:2f:8c:48:9e:a1:3e:29:17:df:84:a3:ae: 11:a6:5a:7b:af:08:b2:b3:f1:11:69:bf:d6:f1:70: 73:e1:85:95:b9:cc:ad:a6:c4:09:26:2a:ef:fa:d7: 15:fc:d6:3d:cf:c5:c3:ea:cf:72:1b:c5:a7:40:15: 9f:50:b0:8b:65:19:fc:09:42:13:93:51:15:82:5d: d6:eb:02:5b:64:9e:49:b7:f1:2f:5e:45:4d:e0:4e: 86:d4:6a:7b:03:cc:01:90:a2:94:61:56:ff:07:9b: e0:37:e0:c4:e7:bb:9d:3e:f9:9c:aa:e9:37:01:68: 4e:13:3d:0d:5d:4f:38:9f:c6:72:4e:0f:34:df:ab: 82:48:0c:3c:38:49:5f:00:9a:17:4c:71:c7:4b:e4: 50:26:12:5d:00:e4:b0:eb:24:e5:eb:b1:ba:82:64: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1E:F4:1C:F6:9F:B7:6E:A3:15:69:27:A6:73:CA:62:BF:32:C7:0C X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:70:0f:cc:16:57:35:44:58:27:36:64:98:8e:2a:02:bf:73: 7f:89:d8:ce:d6:5a:02:6f:f4:cd:d0:c6:80:73:63:21:d3:73: d6:88:9d:94:18:82:48:97:4a:26:e0:b2:bd:80:44:3b:4c:5b: 46:03:c4:fc:b6:bd:5c:85:e3:23:da:3e:12:7c:e7:e1:ad:13: 59:60:cd:0b:cd:02:ae:bc:fe:c0:cc:1b:78:be:a3:4a:44:1e: 78:b3:90:76:d8:e3:d4:33:f2:d0:05:9f:43:cc:fa:ad:40:59: 98:f5:ea:8e:76:ae:69:6e:16:31:5e:7a:47:98:c2:96:db:ca: fd:af:b7:6e:ce:54:5a:10:b0:bc:97:81:6f:5b:12:9e:21:63: e5:86:0b:49:7b:a6:0e:bd:fa:48:ab:b0:12:78:9e:59:36:d5: 07:be:60:6b:cd:d8:d6:2e:6e:98:33:50:67:35:2f:c0:f5:73: ce:3b:0e:94:46:0a:17:52:1f:ee:13:35:31:6e:44:2d:7c:ac: eb:20:4a:11:8b:87:1e:8c:8e:bd:e4:6b:de:a6:a0:fa:ff:c8: 69:94:b8:b9:50:7d:52:83:eb:02:69:76:33:15:4d:ce:4b:fa: 7c:66:aa:d8:74:02:a3:3c:53:37:1f:e4:9d:8c:28:f4:85:c7: 84:7e:8d:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjYwMzI1MDIxMzAwWhcNMjYwNDAxMDIxMzAwWjAYMRYwFAYD VQQDEw02OWMzNDRhYy1mMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZ497eDrn8m4alXnKd5g+O1c0exYm73XMaQq/IlicB3Ys4Z1Ksxf4aWFH1kM U/REtxiHZkKGCe0w6mCpRTVVJctjYHMbyP5rWW9GiXOcpqjNZpNfvEI4zztRFQov jEieoT4pF9+Eo64Rplp7rwiys/ERab/W8XBz4YWVucytpsQJJirv+tcV/NY9z8XD 6s9yG8WnQBWfULCLZRn8CUITk1EVgl3W6wJbZJ5Jt/EvXkVN4E6G1Gp7A8wBkKKU YVb/B5vgN+DE57udPvmcquk3AWhOEz0NXU84n8ZyTg8036uCSAw8OElfAJoXTHHH S+RQJhJdAOSw6yTl67G6gmSCtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYe9Bz2 n7duoxVpJ6ZzymK/MscMMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHAPzBZXNURYJzZkmI4qAr9zf4nYztZaAm/0zdDGgHNjIdNz1oidlBiCSJdK JuCyvYBEO0xbRgPE/La9XIXjI9o+Enzn4a0TWWDNC80Crrz+wMwbeL6jSkQeeLOQ dtjj1DPy0AWfQ8z6rUBZmPXqjnauaW4WMV56R5jCltvK/a+3bs5UWhCwvJeBb1sS niFj5YYLSXumDr36SKuwEnieWTbVB75ga83Y1i5umDNQZzUvwPVzzjsOlEYKF1If 7hM1MW5ELXys6yBKEYuHHoyOveRr3qag+v/IaZS4uVB9UoPrAml2MxVNzkv6fGaq 2HQCozxTNx/knYwo9IXHhH6Nog== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:01 2026 by rpki-client