$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json) Hash identifier: cSmlo1sx0Grvc6fI+1fC/ejF0XDZtiHIKmzyrG9PIcM= Subject key identifier: 63:3B:10:5B:8A:16:4E:A9:69:1E:0F:B9:E6:BD:B6:76:B7:96:94:CA Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Certificate serial: 1A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft Manifest number: 19E4 Signing time: Tue 24 Mar 2026 16:17:32 +0000 Manifest this update: Tue 24 Mar 2026 16:17:31 +0000 Manifest next update: Tue 31 Mar 2026 16:17:31 +0000 Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: f5joBUoxeyLNkCLgsrB/fMfq5i+isB+LzpceH0bfEV4=) 2: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 49/FK2no0+eXe8VXT3R+zqFMOagQDVzOLbP2aHJeuSw=) 3: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: 0wOhsRH1t2lYaZC2VY4/RdxjFMV42UhjtMVgT8IP8Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6682 (0x1a1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Validity Not Before: Mar 24 16:17:31 2026 GMT Not After : Mar 31 16:17:31 2026 GMT Subject: CN=69c2b91b-941f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:4f:e7:a9:b3:7e:55:8d:dd:ea:57:c7:e7: 0a:8d:ee:36:9a:92:22:a3:5e:2b:7b:b1:0d:ad:fc: aa:cf:c7:87:89:32:99:a0:66:87:ea:af:81:6f:d0: f3:a7:9c:96:ad:ac:ed:b5:ce:86:e6:ff:be:0a:c7: 71:c8:98:01:93:74:16:5e:68:38:6a:e0:cd:48:53: 9a:b5:af:ec:54:62:eb:4d:f1:94:48:79:98:d5:6d: 28:28:c7:34:30:f6:4c:8e:f3:43:86:72:f9:49:32: 64:49:ef:26:71:9a:13:bf:6c:04:85:5a:67:44:fc: 05:b3:dc:17:01:b1:4e:31:a1:ad:66:62:d0:bb:d0: 9f:bd:67:3e:6d:12:7d:49:b4:eb:8e:84:3a:c5:bd: ad:67:6f:0d:f0:b7:00:6e:ca:98:37:a8:ff:b1:87: f2:b9:36:5e:d3:d2:62:d2:72:4f:8d:3d:8d:48:9f: 38:33:39:7a:89:66:57:23:29:ce:6e:d6:76:49:5f: 0c:ff:7e:32:8b:15:7a:ab:93:8c:11:bf:f3:60:9a: b0:b0:5b:56:6c:a0:c6:7a:ad:67:cf:4c:05:72:2a: 7f:13:89:e1:e6:d5:15:1b:ad:1d:9e:05:e1:d5:fd: b3:86:2d:a2:80:af:6b:e3:f6:1f:92:5e:75:de:d0: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3B:10:5B:8A:16:4E:A9:69:1E:0F:B9:E6:BD:B6:76:B7:96:94:CA X509v3 Authority Key Identifier: keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:8f:a9:02:6f:bb:e6:0a:38:ca:83:f1:f5:e8:29:1c:a5:c5: 5c:96:7d:14:a0:09:b1:63:23:20:7d:96:cc:0f:8d:1f:fe:24: 67:b2:d7:70:0f:1f:cb:3b:17:4d:73:9a:8e:8c:17:ba:cd:f4: b7:d8:9c:0b:c8:18:3e:09:c2:e0:9f:bf:64:7d:e6:02:04:d1: c5:67:b9:07:ef:d2:70:06:42:42:4d:e7:0e:1b:fa:ed:72:aa: 17:10:82:fb:c2:e3:d2:b6:83:fc:a4:1a:5e:b8:cf:07:9c:b0: b5:df:23:90:0a:00:33:f6:60:26:19:77:6b:e3:e6:c7:68:78: 57:04:39:02:02:81:9e:83:2f:9c:8e:24:e4:d9:ec:c6:9c:39: be:94:a7:ed:76:a1:6c:93:fa:16:c5:b9:6a:97:e5:4c:03:68: 82:5e:6e:87:a2:ee:20:f7:96:d9:82:46:b6:a1:97:6b:d5:5d: fb:a7:52:06:9f:5a:92:ff:ec:43:b1:80:94:2d:02:67:c7:ec: e3:98:8b:8d:c8:19:07:96:aa:ce:2c:c6:a1:76:4a:8a:c6:17: c7:8a:ad:a4:bd:a1:9e:7c:41:09:ef:98:81:d5:90:4f:c2:a0: 19:78:82:d7:6d:53:20:ea:f4:cf:96:f3:11:8e:61:0a:14:fc: 24:d1:4b:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw MDAxRkJEMDkwHhcNMjYwMzI0MTYxNzMxWhcNMjYwMzMxMTYxNzMxWjAYMRYwFAYD VQQDEw02OWMyYjkxYi05NDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFJP56mzflWN3epXx+cKje42mpIio14re7ENrfyqz8eHiTKZoGaH6q+Bb9Dz p5yWrazttc6G5v++CsdxyJgBk3QWXmg4auDNSFOata/sVGLrTfGUSHmY1W0oKMc0 MPZMjvNDhnL5STJkSe8mcZoTv2wEhVpnRPwFs9wXAbFOMaGtZmLQu9CfvWc+bRJ9 SbTrjoQ6xb2tZ28N8LcAbsqYN6j/sYfyuTZe09Ji0nJPjT2NSJ84Mzl6iWZXIynO btZ2SV8M/34yixV6q5OMEb/zYJqwsFtWbKDGeq1nz0wFcip/E4nh5tUVG60dngXh 1f2zhi2igK9r4/Yfkl513tCTKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGM7EFuK Fk6paR4Puea9tna3lpTKMB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTg5QS9BQ0Q2RkI4QTdEOTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZv N0JIaVdHbTRtTjRBQWZ2UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxY+pAm+75go4yoPx9egpHKXFXJZ9FKAJsWMjIH2WzA+NH/4kZ7LXcA8fyzsX TXOajowXus30t9icC8gYPgnC4J+/ZH3mAgTRxWe5B+/ScAZCQk3nDhv67XKqFxCC +8Lj0raD/KQaXrjPB5ywtd8jkAoAM/ZgJhl3a+Pmx2h4VwQ5AgKBnoMvnI4k5Nns xpw5vpSn7XahbJP6FsW5apflTANogl5uh6LuIPeW2YJGtqGXa9Vd+6dSBp9akv/s Q7GAlC0CZ8fs45iLjcgZB5aqzizGoXZKisYXx4qtpL2hnnxBCe+YgdWQT8KgGXiC 121TIOr0z5bzEY5hChT8JNFLdA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:00 2026 by rpki-client