$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json) Hash identifier: lJROtDPamqk9MoZTfcWIi9xe1MLfYOaw6H5+8gno1Ww= Subject key identifier: 12:5F:DB:0A:23:47:18:A5:DB:9C:19:C8:FB:2F:C2:C7:14:00:ED:47 Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1E2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft Manifest number: 1E1D Signing time: Tue 24 Mar 2026 16:00:44 +0000 Manifest this update: Tue 24 Mar 2026 16:00:44 +0000 Manifest next update: Tue 31 Mar 2026 16:00:44 +0000 Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: VWJzBMEN6N3l5+Fwed/uM4JWcFiPfMi9P69e9Gye1d4=) 2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: iBnvey2w1CD1G33AJZCTqUkiJ/9udD23Qpc3pr39tfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7722 (0x1e2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Mar 24 16:00:44 2026 GMT Not After : Mar 31 16:00:44 2026 GMT Subject: CN=69c2b52c-5316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:a8:8f:fd:4e:d3:06:34:e4:33:05:58:78: 7f:bc:c6:02:86:cd:9a:75:f5:15:44:8e:7e:b0:98: 29:68:35:ff:ac:a9:88:62:03:74:55:b8:4e:39:9c: da:dd:c9:79:76:1b:6a:40:cd:6c:47:d6:0d:85:53: cf:a1:ed:5d:26:ea:d2:ad:70:03:59:20:da:87:29: 52:f7:43:b1:87:fa:49:19:58:ce:62:0e:a1:01:e8: 1e:e8:bb:f5:a5:4c:51:22:72:f6:e7:66:f5:da:d9: f4:85:c9:3c:86:e6:ae:cf:27:40:ec:d7:6e:0c:f2: e1:a4:65:97:95:7d:83:03:d2:a1:6c:b7:4c:d1:02: 8a:59:0c:bf:fe:5a:50:19:0b:a8:30:0d:34:ef:eb: 0b:eb:85:75:89:1e:b1:0f:43:6a:44:58:5f:9f:c1: 7d:4e:73:15:ee:e4:d8:e5:75:8c:3c:43:10:52:48: b3:10:21:c9:2f:d7:b6:e8:6a:5b:d7:6c:83:e9:3a: 12:29:d8:bd:bc:f8:eb:f5:6d:b7:76:db:dd:5e:08: d2:19:1b:df:d3:ba:5e:84:56:12:10:81:88:d6:ae: 71:2f:3b:6e:e8:df:a0:08:7c:ac:56:ab:99:07:3d: 1b:71:0a:ec:dd:88:31:18:92:bc:b4:30:01:9a:0a: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:DB:0A:23:47:18:A5:DB:9C:19:C8:FB:2F:C2:C7:14:00:ED:47 X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:33:a9:4e:03:cd:e7:d5:6f:0d:d7:19:64:30:e0:f3:5d:ae: eb:08:c7:60:96:9c:21:85:fb:07:1b:7a:c5:d0:da:93:e0:54: eb:7b:d9:5e:7c:27:a7:70:2a:d6:a3:30:6b:42:9a:5a:72:c9: d2:30:27:4a:ba:03:d2:08:b8:d8:92:c8:44:a7:13:1c:ce:82: 36:13:95:92:79:4c:db:6b:60:db:0e:33:55:4b:99:3d:63:1e: b6:ac:c9:05:f2:56:5e:67:75:cf:6d:51:0e:ad:d0:8c:e6:84: 04:05:57:e1:39:d7:03:66:fa:1c:9d:7a:4e:02:67:16:36:fd: 3f:b7:f2:d4:20:ff:24:db:0a:a7:c6:c6:de:94:db:0b:3e:1b: 44:e8:c0:00:52:c7:2e:c5:9f:21:ca:b8:f3:55:84:30:0c:89: 3d:b0:80:0e:36:b6:5c:96:76:59:41:9f:67:de:6c:64:30:88: 81:61:5b:5f:a0:83:e9:70:e7:5d:9d:4b:ee:ff:ef:66:ed:ae: fe:ac:ee:b4:a5:b4:54:60:d7:87:cf:6d:db:75:9b:ff:a8:da: ff:a5:e5:f0:f7:42:6c:1d:0d:e9:59:3d:5c:57:fa:5a:84:2d: cf:88:c3:d7:38:21:5c:4f:7c:4c:9f:f2:5b:0b:ed:15:75:f4: f1:16:99:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjYwMzI0MTYwMDQ0WhcNMjYwMzMxMTYwMDQ0WjAYMRYwFAYD VQQDEw02OWMyYjUyYy01MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbaoj/1O0wY05DMFWHh/vMYChs2adfUVRI5+sJgpaDX/rKmIYgN0VbhOOZza 3cl5dhtqQM1sR9YNhVPPoe1dJurSrXADWSDahylS90Oxh/pJGVjOYg6hAege6Lv1 pUxRInL252b12tn0hck8huauzydA7NduDPLhpGWXlX2DA9KhbLdM0QKKWQy//lpQ GQuoMA007+sL64V1iR6xD0NqRFhfn8F9TnMV7uTY5XWMPEMQUkizECHJL9e26Gpb 12yD6ToSKdi9vPjr9W23dtvdXgjSGRvf07pehFYSEIGI1q5xLztu6N+gCHysVquZ Bz0bcQrs3YgxGJK8tDABmgqcQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJf2woj Rxil25wZyPsvwscUAO1HMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV OTZMNVVmc1NoSDRILXFrSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZzOpTgPN59VvDdcZZDDg812u6wjHYJacIYX7Bxt6xdDak+BU63vZXnwnp3Aq 1qMwa0KaWnLJ0jAnSroD0gi42JLIRKcTHM6CNhOVknlM22tg2w4zVUuZPWMetqzJ BfJWXmd1z21RDq3QjOaEBAVX4TnXA2b6HJ16TgJnFjb9P7fy1CD/JNsKp8bG3pTb Cz4bROjAAFLHLsWfIcq481WEMAyJPbCADja2XJZ2WUGfZ95sZDCIgWFbX6CD6XDn XZ1L7v/vZu2u/qzutKW0VGDXh89t23Wb/6ja/6Xl8PdCbB0N6Vk9XFf6WoQtz4jD 1zghXE98TJ/yWwvtFXX08RaZWA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:37 2026 by rpki-client