$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: 4OBVrF18eiqDqzMGbcVMUkHth0dBJmWHPZ4r8kU/+BA= Subject key identifier: A2:19:E0:C0:3A:48:8A:22:BB:2F:1C:65:8D:CF:50:5D:6D:A4:50:39 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0781 Signing time: Thu 26 Mar 2026 21:31:12 +0000 Manifest this update: Thu 26 Mar 2026 21:31:12 +0000 Manifest next update: Thu 02 Apr 2026 21:31:12 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: Qh8XiEZADOXu8VF8GUBMneXW+IqEEL5RRjP4REcPWZQ=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Mar 26 21:31:12 2026 GMT Not After : Apr 2 21:31:12 2026 GMT Subject: CN=69c5a5a0-0e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d9:0d:de:41:a0:61:60:85:dd:bb:b8:b3:74: cc:1c:27:f3:6d:53:39:bc:a1:ce:e5:9d:b2:c8:41: 5e:5a:73:01:94:7e:af:3f:f3:cf:51:fa:84:a7:68: 8e:5f:f7:be:ab:3b:be:9e:39:76:96:3d:8b:df:2f: 97:10:7a:af:55:0a:ad:c6:83:9f:83:ab:90:1f:8d: 37:14:e2:68:f8:2f:19:31:aa:ae:c9:84:d3:40:8c: b5:40:0b:0d:d3:c0:ff:46:d9:f8:8e:fc:93:25:82: b4:9a:ce:e8:6e:33:5a:80:ff:49:0a:01:80:81:88: 18:cc:ca:4b:d4:30:a3:3e:03:1f:fb:3a:91:a5:2b: 93:c3:10:04:c2:68:4d:94:7a:b5:57:e1:80:9e:8c: 4c:16:e3:14:75:b6:e1:48:fc:4f:86:d5:16:78:27: 37:1a:31:d9:23:5f:ef:75:3b:cf:a1:1a:d8:97:5c: ce:a7:88:5f:d9:04:d7:cf:db:32:06:de:00:c7:98: ea:8b:5c:f5:6f:f3:f4:9e:55:df:75:64:29:32:cd: e5:47:fb:65:43:7f:5a:1c:7f:ac:ee:7a:dd:a9:27: a6:af:cf:78:33:ef:d1:ae:27:86:53:a2:89:e0:fe: f5:ba:c4:14:14:c5:a4:c8:40:d7:2e:c8:19:60:72: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:E0:C0:3A:48:8A:22:BB:2F:1C:65:8D:CF:50:5D:6D:A4:50:39 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:7d:88:d7:8a:0b:3b:ba:c7:dc:b3:54:ed:7f:a0:ed:91:37: 14:31:49:ae:34:d2:4b:32:eb:0a:78:db:53:61:ab:a9:b7:94: be:cf:32:d5:a5:9a:1f:f1:c6:7c:77:d6:e8:20:4d:df:ee:eb: 70:79:1a:7a:e1:46:40:fc:bd:9e:c3:12:39:eb:bc:63:31:c6: de:de:3d:d3:8f:c9:24:e1:a8:f0:5e:f1:fc:83:77:bd:ac:9a: 3c:d8:fb:e2:de:7e:8c:7e:44:cc:1b:8e:17:c4:99:65:a2:82: 9c:9e:a4:40:65:6c:44:2d:62:43:2c:54:34:a4:4e:5f:bb:04: 45:bf:26:07:78:ef:ca:7a:0b:49:a5:76:44:57:6a:50:ac:cb: 57:36:14:33:5a:e1:71:fa:23:13:8e:e4:ad:d9:90:ac:67:45: 5c:87:3e:65:2d:d0:b2:b2:0f:2d:a2:f8:aa:1f:fa:a8:bf:4b: 83:6a:3f:5a:88:63:0f:b9:5f:3a:2f:17:f1:5b:4f:cc:44:a9: 47:c5:36:dd:c5:4e:8e:4b:7c:ef:b3:9c:3f:e0:d9:16:9a:2c: f2:23:1d:65:47:ea:6e:39:c7:72:85:1c:c3:ff:2e:c2:a4:8e: a8:b0:f4:b0:3a:d2:49:dc:82:af:d4:0b:c4:2d:f7:36:c0:d7: 1a:3d:5d:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjYwMzI2MjEzMTEyWhcNMjYwNDAyMjEzMTEyWjAYMRYwFAYD VQQDEw02OWM1YTVhMC0wZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tkN3kGgYWCF3bu4s3TMHCfzbVM5vKHO5Z2yyEFeWnMBlH6vP/PPUfqEp2iO X/e+qzu+njl2lj2L3y+XEHqvVQqtxoOfg6uQH403FOJo+C8ZMaquyYTTQIy1QAsN 08D/Rtn4jvyTJYK0ms7objNagP9JCgGAgYgYzMpL1DCjPgMf+zqRpSuTwxAEwmhN lHq1V+GAnoxMFuMUdbbhSPxPhtUWeCc3GjHZI1/vdTvPoRrYl1zOp4hf2QTXz9sy Bt4Ax5jqi1z1b/P0nlXfdWQpMs3lR/tlQ39aHH+s7nrdqSemr894M+/RrieGU6KJ 4P71usQUFMWkyEDXLsgZYHK+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIZ4MA6 SIoiuy8cZY3PUF1tpFA5MB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtX2I14oLO7rH3LNU7X+g7ZE3FDFJrjTSSzLrCnjbU2GrqbeUvs8y1aWaH/HG fHfW6CBN3+7rcHkaeuFGQPy9nsMSOeu8YzHG3t4904/JJOGo8F7x/IN3vayaPNj7 4t5+jH5EzBuOF8SZZaKCnJ6kQGVsRC1iQyxUNKROX7sERb8mB3jvynoLSaV2RFdq UKzLVzYUM1rhcfojE47krdmQrGdFXIc+ZS3QsrIPLaL4qh/6qL9Lg2o/WohjD7lf Oi8X8VtPzESpR8U23cVOjkt877OcP+DZFpos8iMdZUfqbjnHcoUcw/8uwqSOqLD0 sDrSSdyCr9QLxC33NsDXGj1diQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:35 2026 by rpki-client