$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: 8DUfIaaidt3RX7YU377LcTJogaVQEq5PHNqMrMf8U3w= Subject key identifier: 23:B6:85:F4:69:52:65:2E:EA:3E:0C:70:3B:EC:07:79:57:D2:14:8F Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 0594 Signing time: Tue 24 Mar 2026 22:56:23 +0000 Manifest this update: Tue 24 Mar 2026 22:56:22 +0000 Manifest next update: Tue 31 Mar 2026 22:56:22 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: 9Jg1ZEIrASvDslw4DAJros2apijKlqLfVsw9/2H9Fvk=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: Cr23RBREtuT54zLAvnFw/R9xfkhI60wXk3xodOfPdEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Mar 24 22:56:22 2026 GMT Not After : Mar 31 22:56:22 2026 GMT Subject: CN=69c31697-d552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:cd:ef:47:cc:b5:ad:f7:e3:bd:fa:98:ea: f1:84:63:ce:53:b1:1a:25:a7:86:5e:4b:c7:03:d2: 1c:89:80:bb:5b:1b:7d:f7:4c:97:26:48:75:a9:b6: d8:31:7a:68:f6:bf:d0:ef:cc:c4:fd:47:b6:66:cf: 04:1c:aa:fd:9a:49:aa:5f:aa:86:72:70:a5:80:bd: fa:0a:56:3b:ab:fa:f1:92:ba:17:03:87:85:ba:fb: 4c:e2:31:43:ca:50:93:db:ec:da:6a:f6:0d:d7:15: c7:fa:29:3d:4c:26:c9:1a:a3:e0:e1:cd:33:49:ed: e6:96:bb:44:0a:f0:68:fb:53:91:96:90:1f:aa:cb: ac:b1:7d:f4:14:9d:6a:16:7d:b0:8d:8d:e5:83:a6: d3:fe:0d:a3:4f:b4:de:b7:9c:26:23:4f:17:1d:6d: 4d:dd:e0:6f:22:ec:04:e7:15:fc:89:88:86:fa:ba: aa:7e:63:dc:24:b6:75:81:e7:52:4e:5d:df:af:8f: 08:5b:5a:03:5f:3e:d7:5a:ec:87:c4:1f:52:2f:bd: 56:20:09:82:e3:cc:41:06:43:2a:5b:02:0c:d5:d1: 11:fe:ef:2b:57:a9:00:aa:d0:0e:88:61:fc:89:9e: 2e:49:b3:62:4c:b1:d3:98:3a:13:b6:ce:34:19:e5: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B6:85:F4:69:52:65:2E:EA:3E:0C:70:3B:EC:07:79:57:D2:14:8F X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:58:d2:2e:1a:74:04:6b:2b:0c:4e:be:7d:90:8b:a0:68:63: 33:d8:68:ed:52:24:f7:0c:0d:82:8e:2e:07:5c:ef:d4:9b:a8: 1a:c9:a6:5f:48:7b:89:3e:28:b2:3e:a9:ab:61:ca:ac:b9:b1: 8b:77:eb:0b:dc:29:0d:20:5f:8c:7d:61:4f:41:5c:da:3e:e1: b1:82:a0:f2:8d:c1:6e:c1:b8:af:ba:ba:0c:88:28:1a:47:6c: 9d:b8:c6:a1:74:a6:89:71:83:9d:21:08:89:46:6a:11:28:92: 96:67:c6:42:4f:4b:f1:3c:19:89:a5:62:7d:d6:a5:79:46:04: 1b:4c:83:53:2b:fe:ca:fc:2b:4d:dd:9a:6a:45:9b:57:d6:ef: 8a:9b:ad:ae:4f:9f:4a:1a:b8:c9:a4:61:af:7e:02:98:13:43: 54:17:c4:08:ed:76:bc:cd:f2:6c:0b:21:d5:bd:b4:98:0f:40: ba:aa:6b:af:1a:76:21:68:21:93:b1:57:a9:7b:08:3a:8b:ed: e5:b9:e1:e5:a8:c3:2e:ec:34:3c:21:ef:c6:85:86:da:0c:b6: 1a:f1:85:4d:4f:92:24:4c:94:32:9d:06:58:77:61:65:a8:c1: de:bb:d2:3d:50:dc:0f:d3:79:5f:10:50:2a:28:f2:12:e1:00: f4:ff:48:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjYwMzI0MjI1NjIyWhcNMjYwMzMxMjI1NjIyWjAYMRYwFAYD VQQDEw02OWMzMTY5Ny1kNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolvN70fMta334736mOrxhGPOU7EaJaeGXkvHA9IciYC7Wxt990yXJkh1qbbY MXpo9r/Q78zE/Ue2Zs8EHKr9mkmqX6qGcnClgL36ClY7q/rxkroXA4eFuvtM4jFD ylCT2+zaavYN1xXH+ik9TCbJGqPg4c0zSe3mlrtECvBo+1ORlpAfqsussX30FJ1q Fn2wjY3lg6bT/g2jT7Tet5wmI08XHW1N3eBvIuwE5xX8iYiG+rqqfmPcJLZ1gedS Tl3fr48IW1oDXz7XWuyHxB9SL71WIAmC48xBBkMqWwIM1dER/u8rV6kAqtAOiGH8 iZ4uSbNiTLHTmDoTts40GeW9twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCO2hfRp UmUu6j4McDvsB3lX0hSPMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhljSLhp0BGsrDE6+fZCLoGhjM9ho7VIk9wwNgo4uB1zv1JuoGsmmX0h7iT4o sj6pq2HKrLmxi3frC9wpDSBfjH1hT0Fc2j7hsYKg8o3BbsG4r7q6DIgoGkdsnbjG oXSmiXGDnSEIiUZqESiSlmfGQk9L8TwZiaVifdaleUYEG0yDUyv+yvwrTd2aakWb V9bviputrk+fShq4yaRhr34CmBNDVBfECO12vM3ybAsh1b20mA9Auqprrxp2IWgh k7FXqXsIOovt5bnh5ajDLuw0PCHvxoWG2gy2GvGFTU+SJEyUMp0GWHdhZajB3rvS PVDcD9N5XxBQKijyEuEA9P9IBw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:14 2026 by rpki-client