$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: N83wPgjVHGCSMRD/PwMi74CqlsmjcTR6UufAcJ5DAJ0= Subject key identifier: 54:9E:B6:7A:9A:2F:4B:EF:C6:67:C9:AC:7A:0A:1B:E8:2F:79:19:57 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0AB8 Signing time: Tue 24 Mar 2026 19:18:00 +0000 Manifest this update: Tue 24 Mar 2026 19:18:00 +0000 Manifest next update: Tue 31 Mar 2026 19:18:00 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: ovOkv8Ot6/n0rGecBmnbbWz0S50qvKF4saob2AlCQ9c=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: j7HoHCdz64sq86gO6WNIo+MZn9FyOmtrk8UeOchCdv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Mar 24 19:18:00 2026 GMT Not After : Mar 31 19:18:00 2026 GMT Subject: CN=69c2e368-1cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f9:22:fb:a9:68:5f:a7:d2:0a:bb:7f:56:31: 42:3e:da:e5:ca:b4:09:18:ec:57:56:08:bf:05:50: c9:63:99:72:85:e8:32:22:f3:0f:d8:d6:8b:8d:fa: f8:90:6c:d5:d3:ef:0d:df:ec:1f:68:29:ec:e5:45: 91:b7:a1:15:27:20:76:42:af:b1:fc:3a:24:c8:2d: 43:c7:e1:26:37:0c:33:51:09:61:8a:95:a7:0d:b5: 1d:24:aa:a3:0c:72:90:7d:e1:9e:e0:85:8b:da:4b: e3:ea:0a:01:c1:ff:b5:a8:e6:38:88:46:16:1a:13: 4c:f3:1a:c7:4d:02:e4:9d:17:a5:e7:4d:b2:5d:b6: 90:ed:a4:7c:05:a2:b9:1d:98:43:41:61:7a:d0:a9: a2:fc:7e:3c:f8:70:f6:25:db:ac:02:1b:cd:b0:83: 22:31:14:9c:cb:16:8e:9b:38:ed:52:e4:e6:99:e8: 16:3c:c8:51:93:71:61:72:ae:6f:06:18:e5:83:1e: 60:46:8b:c3:36:cb:e4:05:25:da:29:77:07:99:3c: 91:aa:61:c8:bb:6e:10:1e:97:a9:22:97:71:08:3c: 5c:05:0c:7d:1d:cd:e2:8c:11:c4:ef:25:1c:0b:59: fe:d1:f2:15:2c:60:bc:a2:b1:96:1d:83:e6:e8:b9: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9E:B6:7A:9A:2F:4B:EF:C6:67:C9:AC:7A:0A:1B:E8:2F:79:19:57 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:1c:76:4f:50:91:ac:7a:23:1b:6f:20:eb:d0:ce:f5:c5: 07:1b:99:3a:eb:e5:f3:71:9a:7d:2b:24:fc:70:3d:3f:95:7a: f5:1d:bd:20:b2:24:59:1d:48:d6:41:0f:d6:ab:96:5a:36:73: 87:33:9b:54:19:d7:d6:1d:b0:58:5c:6b:85:33:a9:12:44:25: 38:b6:19:00:d4:00:5d:71:9c:0e:76:ed:47:fe:4a:5c:a6:3a: 79:d2:f0:90:19:06:7e:94:6c:b0:97:27:d0:22:74:b7:3c:13: 1e:4d:17:df:e9:f0:c2:cd:97:47:12:68:e9:1c:22:65:9c:f7: 5d:05:3d:5d:f8:60:a4:b6:5b:c6:a0:80:70:6a:75:a7:86:9c: 75:1e:f3:db:3c:e9:ae:e2:a2:ea:09:dc:0f:92:a8:69:f5:91: 4a:34:66:d0:35:ce:6c:6c:20:89:3e:66:bb:93:98:03:28:01: dd:95:6b:f3:26:02:79:16:d1:65:cd:9a:1e:fa:2f:1e:aa:5c: 86:25:67:9b:a7:7c:19:06:48:d2:17:50:94:c0:03:2e:be:c6: 87:cd:1a:09:13:8c:62:d6:4d:cc:dc:55:e9:5f:0e:c1:63:3c: 78:e1:53:c8:c9:99:1c:0c:91:94:b2:02:a9:82:f8:f8:85:c9: ce:24:30:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjYwMzI0MTkxODAwWhcNMjYwMzMxMTkxODAwWjAYMRYwFAYD VQQDEw02OWMyZTM2OC0xY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAifki+6loX6fSCrt/VjFCPtrlyrQJGOxXVgi/BVDJY5lyhegyIvMP2NaLjfr4 kGzV0+8N3+wfaCns5UWRt6EVJyB2Qq+x/DokyC1Dx+EmNwwzUQlhipWnDbUdJKqj DHKQfeGe4IWL2kvj6goBwf+1qOY4iEYWGhNM8xrHTQLknRel502yXbaQ7aR8BaK5 HZhDQWF60Kmi/H48+HD2JdusAhvNsIMiMRScyxaOmzjtUuTmmegWPMhRk3Fhcq5v Bhjlgx5gRovDNsvkBSXaKXcHmTyRqmHIu24QHpepIpdxCDxcBQx9Hc3ijBHE7yUc C1n+0fIVLGC8orGWHYPm6LmObQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSetnqa L0vvxmfJrHoKG+gveRlXMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAat4cdk9Qkax6IxtvIOvQzvXFBxuZOuvl83GafSsk/HA9P5V69R29ILIkWR1I 1kEP1quWWjZzhzObVBnX1h2wWFxrhTOpEkQlOLYZANQAXXGcDnbtR/5KXKY6edLw kBkGfpRssJcn0CJ0tzwTHk0X3+nwws2XRxJo6RwiZZz3XQU9XfhgpLZbxqCAcGp1 p4acdR7z2zzpruKi6gncD5KoafWRSjRm0DXObGwgiT5mu5OYAygB3ZVr8yYCeRbR Zc2aHvovHqpchiVnm6d8GQZI0hdQlMADLr7Gh80aCROMYtZNzNxV6V8OwWM8eOFT yMmZHAyRlLICqYL4+IXJziQw3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:45 2026 by rpki-client