$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: s4Gxa0/fopRQThEKlgWF5rzaEF0GHgEhvpeQmfKua4A= Subject key identifier: 9A:BE:51:92:97:22:D7:BD:0B:61:A0:92:6D:ED:FC:AC:C6:94:2C:67 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 0248 Signing time: Wed 25 Mar 2026 01:50:47 +0000 Manifest this update: Wed 25 Mar 2026 01:50:47 +0000 Manifest next update: Wed 01 Apr 2026 01:50:47 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: TVs0bJ7M4oKU14l5WkdospEXDQ9afigoY9qgvKUu510=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: iSo5vuWbG03RQHVz/yWnx8Hzh3kOIF3ZXYUxF1Dp2jI=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: u9cehntkmN+Per/glhjpUt2xiu+ij4ZxhwGHfN+ijAE=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: 5QEuxCPhlNT5MkVim+JlJUzX9cGTTGSeehOabrAMH3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Mar 25 01:50:47 2026 GMT Not After : Apr 1 01:50:47 2026 GMT Subject: CN=69c33f77-3edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:a0:f4:c6:33:ac:e6:5f:8b:00:68:6f:23: 93:30:b9:c4:a2:1f:21:21:ec:5e:79:e9:3f:09:e3: b0:77:67:79:9f:3f:59:5d:c9:a3:70:80:9b:d4:cf: f3:ed:2d:ce:4b:6e:5d:c7:d3:6c:5a:6f:c8:f5:5b: b8:be:81:7e:64:d4:03:b2:31:53:34:49:cf:43:63: 8a:51:b7:94:e5:41:52:ba:e2:43:b6:46:8f:16:4f: 0c:ac:86:89:64:65:e4:12:b5:49:56:0e:76:70:e8: 51:29:ee:29:09:45:fb:ab:38:7c:56:cb:24:16:dd: b7:7a:dc:2d:60:34:e3:81:21:27:b7:0c:d9:9f:a4: 91:19:1c:0f:ed:f4:50:4c:84:46:d3:d6:9b:c4:ce: d9:78:94:39:14:be:66:1a:ec:8d:30:86:bb:09:09: 61:9e:d9:99:de:ef:2f:08:92:63:a7:f0:a1:e4:16: 59:08:aa:31:a1:6b:8d:7d:56:9f:91:70:a7:9c:a9: b0:a8:77:f6:cd:f5:a2:f6:59:88:76:cb:c0:f6:56: dc:ec:31:47:0a:12:73:1b:57:ec:d7:85:be:c8:5d: 9b:49:a8:e6:9c:2c:d2:38:ec:d4:60:42:24:52:35: ca:07:13:61:31:56:87:a5:da:e8:03:be:2a:2c:6a: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BE:51:92:97:22:D7:BD:0B:61:A0:92:6D:ED:FC:AC:C6:94:2C:67 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:90:c6:c1:be:46:38:07:a9:00:92:15:5a:4c:62:33:26: 14:e6:48:62:db:49:ed:70:2e:3d:1a:e9:60:a0:32:24:e3:d5: 72:fd:d1:63:21:b5:f0:ab:89:dd:b6:9c:6f:5e:8c:0f:49:2d: 78:0d:ca:67:b9:7a:d9:d0:8a:b3:ad:92:5c:06:e6:34:12:12: ad:a5:8b:5c:ac:f8:6e:a3:21:a7:b5:d9:54:e2:3a:e1:17:db: da:97:98:fd:45:8f:9e:63:f1:a9:14:7d:6f:b3:ab:ab:45:58: 96:d5:8f:a7:2a:d3:da:51:ce:46:7d:cb:b0:ae:c1:4a:97:48: 46:4e:3c:f3:3b:77:52:42:fc:0e:41:a1:0b:b8:a3:b9:9c:c3: 65:25:ac:00:57:c1:f3:84:d7:c9:5b:af:38:cd:06:48:00:a5: f4:24:00:8b:e5:4b:13:91:84:1c:cc:db:7e:c3:95:01:40:5a: 77:c2:6e:f7:82:e0:83:cf:51:57:58:31:ad:5b:41:96:2a:68: 8a:2d:3d:4b:f4:08:8c:66:58:ae:c8:22:7f:62:b9:16:0e:c4: 13:7f:6c:8b:f4:38:9e:cf:8d:ef:18:f6:e3:6f:97:b7:2f:b5: 28:b1:66:36:8d:dc:7b:e2:68:af:b3:33:a3:6d:52:f0:8e:58: 99:aa:7c:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwMzI1MDE1MDQ3WhcNMjYwNDAxMDE1MDQ3WjAYMRYwFAYD VQQDEw02OWMzM2Y3Ny0zZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Kg9MYzrOZfiwBobyOTMLnEoh8hIexeeek/CeOwd2d5nz9ZXcmjcICb1M/z 7S3OS25dx9NsWm/I9Vu4voF+ZNQDsjFTNEnPQ2OKUbeU5UFSuuJDtkaPFk8MrIaJ ZGXkErVJVg52cOhRKe4pCUX7qzh8VsskFt23etwtYDTjgSEntwzZn6SRGRwP7fRQ TIRG09abxM7ZeJQ5FL5mGuyNMIa7CQlhntmZ3u8vCJJjp/Ch5BZZCKoxoWuNfVaf kXCnnKmwqHf2zfWi9lmIdsvA9lbc7DFHChJzG1fs14W+yF2bSajmnCzSOOzUYEIk UjXKBxNhMVaHpdroA74qLGpWcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJq+UZKX Ite9C2Ggkm3t/KzGlCxnMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO4+QxsG+RjgHqQCSFVpMYjMmFOZIYttJ7XAuPRrpYKAyJOPVcv3RYyG18KuJ 3bacb16MD0kteA3KZ7l62dCKs62SXAbmNBISraWLXKz4bqMhp7XZVOI64Rfb2peY /UWPnmPxqRR9b7Orq0VYltWPpyrT2lHORn3LsK7BSpdIRk488zt3UkL8DkGhC7ij uZzDZSWsAFfB84TXyVuvOM0GSACl9CQAi+VLE5GEHMzbfsOVAUBad8Ju94Lgg89R V1gxrVtBlipoii09S/QIjGZYrsgif2K5Fg7EE39si/Q4ns+N7xj242+Xty+1KLFm No3ce+Jor7Mzo21S8I5Ymap8YA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:30 2026 by rpki-client