$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: NwFF/RNL04UQ0U6cfQRhr0RqsZEWMQ58A1vOGSmu1BE= Subject key identifier: 91:12:B1:5B:24:1D:DA:0F:C6:13:B2:43:E3:27:31:86:10:63:2B:C0 Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 32 Signing time: Wed 25 Mar 2026 07:51:00 +0000 Manifest this update: Wed 25 Mar 2026 07:51:00 +0000 Manifest next update: Wed 01 Apr 2026 07:51:00 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: bkw/Md9DEL0IrptfjhzYLUWujWg28OpkzISRaDjz0Lc=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Mar 25 07:51:00 2026 GMT Not After : Apr 1 07:51:00 2026 GMT Subject: CN=69c393e4-d2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:a8:eb:12:06:a7:4f:02:00:10:4f:54:e2: 30:c9:9c:4b:ce:ae:09:0a:95:d9:31:3b:02:49:f8: 00:f8:91:4a:4e:c7:be:1e:8d:9a:41:68:e2:7d:0b: 52:5e:3f:7b:23:eb:4a:40:32:d5:77:86:cc:7c:ab: 7f:b0:09:7f:7e:ca:20:3b:72:c4:f8:87:7f:40:57: fd:ed:ae:f7:9e:58:c4:f2:c3:dc:27:5a:65:04:b6: d4:53:66:4d:a0:2c:13:a7:e1:12:6c:64:09:4f:c3: bd:6d:e7:51:74:25:88:d2:3a:3b:47:c3:72:00:ee: 09:48:e1:1f:df:75:f8:45:da:7b:a8:95:26:c2:bc: 63:55:9f:52:de:82:f3:36:b1:44:90:8d:4d:9c:d4: 62:0c:3c:6b:b3:ca:b8:d6:69:9e:7d:c3:9f:bd:41: 4a:62:bc:fb:dd:22:e6:3d:52:5d:bd:5c:90:b2:3e: 47:74:5c:37:4d:81:1d:15:b9:30:60:5b:65:33:45: 65:67:10:a7:7b:15:5c:dc:67:06:b3:2a:c7:20:57: 17:2a:06:a9:d5:c5:94:ab:49:cf:91:11:29:9b:58: b5:86:f2:5f:7c:08:1d:97:6a:3e:1f:27:8a:b0:8f: 86:32:e6:94:98:19:28:57:90:a1:01:01:78:24:8a: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:12:B1:5B:24:1D:DA:0F:C6:13:B2:43:E3:27:31:86:10:63:2B:C0 X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b6:69:40:47:17:60:4b:b8:60:34:89:01:a6:01:3b:ee:73: 1a:7d:29:a0:7c:e2:50:3f:6e:44:64:8d:8b:c5:2e:f2:dd:05: 22:3f:eb:37:68:53:c6:d3:35:95:3f:08:28:63:48:00:2f:10: dc:8b:8a:eb:b0:2d:12:d6:49:fd:e4:04:6f:85:a0:14:e4:56: 2b:59:86:84:32:86:34:d7:57:42:9b:b5:93:b8:49:73:ca:c5: 87:5d:aa:d5:c9:c7:80:68:4b:0d:85:f7:cf:5a:2f:c3:db:28: b5:d1:a6:a1:ea:5b:0d:43:d5:52:8e:3b:95:b1:38:8b:a6:36: a9:a5:c4:85:10:d6:12:2c:15:ae:ff:f4:7b:1d:09:39:f7:f4: 3b:8e:46:39:1b:2f:65:e5:e2:90:c9:47:bd:5a:34:fd:0a:54: cb:44:eb:d2:57:06:40:0f:de:fc:14:80:0d:a3:0e:24:ef:19: 01:4e:1e:d4:04:50:dd:48:fb:1a:f9:50:c6:71:1c:47:bb:90: f8:23:1e:98:01:42:e2:c9:9f:a3:1d:6a:f0:a3:6a:a6:9e:ba: 9c:fa:b4:c4:7d:5d:73:4b:87:2b:35:d8:ea:f8:86:bd:2b:82: 5b:f7:6c:11:c1:97:51:c7:2d:9d:14:da:fa:e5:62:7d:67:d0: e9:3c:47:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB NjcyMDg1RTAeFw0yNjAzMjUwNzUxMDBaFw0yNjA0MDEwNzUxMDBaMBgxFjAUBgNV BAMTDTY5YzM5M2U0LWQyYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYrajrEganTwIAEE9U4jDJnEvOrgkKldkxOwJJ+AD4kUpOx74ejZpBaOJ9C1Je P3sj60pAMtV3hsx8q3+wCX9+yiA7csT4h39AV/3trveeWMTyw9wnWmUEttRTZk2g LBOn4RJsZAlPw71t51F0JYjSOjtHw3IA7glI4R/fdfhF2nuolSbCvGNVn1LegvM2 sUSQjU2c1GIMPGuzyrjWaZ59w5+9QUpivPvdIuY9Ul29XJCyPkd0XDdNgR0VuTBg W2UzRWVnEKd7FVzcZwazKscgVxcqBqnVxZSrSc+RESmbWLWG8l98CB2Xaj4fJ4qw j4Yy5pSYGShXkKEBAXgkimiPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkRKxWyQd 2g/GE7JD4ycxhhBjK8AwHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRI RkVkMGlMVkdGdjZaeUNGNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAstmlARxdgS7hgNIkBpgE77nMafSmgfOJQP25EZI2LxS7y3QUiP+s3aFPG0zWV PwgoY0gALxDci4rrsC0S1kn95ARvhaAU5FYrWYaEMoY011dCm7WTuElzysWHXarV yceAaEsNhffPWi/D2yi10aah6lsNQ9VSjjuVsTiLpjappcSFENYSLBWu//R7HQk5 9/Q7jkY5Gy9l5eKQyUe9WjT9ClTLROvSVwZAD978FIANow4k7xkBTh7UBFDdSPsa +VDGcRxHu5D4Ix6YAULiyZ+jHWrwo2qmnrqc+rTEfV1zS4crNdjq+Ia9K4Jb92wR wZdRxy2dFNr65WJ9Z9DpPEeM -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:50 2026 by rpki-client