$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: jpuotwKGG/IztckBqfAS3Haghtq5ed/9jmIK8k3k4FU= Subject key identifier: 99:A3:49:A8:9D:E0:4B:AE:E7:10:58:02:50:F2:5E:E8:81:5D:B6:08 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 054D Signing time: Tue 24 Mar 2026 23:08:12 +0000 Manifest this update: Tue 24 Mar 2026 23:08:12 +0000 Manifest next update: Tue 31 Mar 2026 23:08:12 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: zqN/gDXFPm4qWinYNOlTUQyE9D1aQrqId1lw9wYKzi8=) 2: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: uWKrlH46xOMUPQf0I41m9PfK6LPIgrPit2IHhoLq4XQ=) 4: 19270196406311ECB405CB27C4F9AE02.roa (hash: HVYsfOxlb2WAh2eGE9kwR0kPlhU1KxlVthyk27GCA3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Mar 24 23:08:12 2026 GMT Not After : Mar 31 23:08:12 2026 GMT Subject: CN=69c3195c-08c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:64:d7:17:13:94:73:5e:0a:08:b2:f4:3d: 2f:1b:47:d4:c4:09:fc:e1:13:79:26:74:36:87:df: 2b:47:b2:bd:c4:80:e2:cc:28:76:77:52:21:86:d7: cd:e3:c3:69:51:82:88:a9:fe:ab:f5:46:81:b4:79: a6:42:69:01:bc:48:0e:dd:ba:bc:56:99:4f:56:4e: a5:42:da:94:a7:97:a3:07:e0:4b:e8:78:fd:5a:6f: fd:90:e5:96:1e:03:43:c1:b8:9c:18:ea:3b:8a:fa: f1:f3:35:de:75:3d:f2:e7:79:fe:aa:ef:9e:96:a7: 58:f0:bd:6c:2d:dd:c1:46:64:33:03:28:31:d0:53: bf:f2:fb:42:85:c6:28:46:9b:34:31:a2:5b:9b:ce: f4:65:eb:54:c5:1b:4f:3c:5f:a8:f3:f7:a6:94:cb: 92:cd:55:df:c2:ee:09:7f:fa:0d:f3:94:c7:c7:6b: fe:e8:72:75:44:a3:35:49:ba:a0:45:c0:d5:49:85: 89:14:4f:eb:96:4e:2d:38:b2:2b:a2:10:cc:1a:46: ee:3d:7e:ce:43:33:3d:a9:7e:e6:c7:72:94:22:fc: 9c:4b:a9:e0:bd:14:65:4d:79:64:e8:48:c9:09:da: 19:b4:bd:e8:46:41:a1:b6:92:f1:98:1d:9f:76:cc: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:49:A8:9D:E0:4B:AE:E7:10:58:02:50:F2:5E:E8:81:5D:B6:08 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:93:5c:ea:b9:d5:41:b6:21:1d:4b:05:46:4e:a0:d0:c3:1f: 12:6e:d4:f7:e3:93:35:0f:f9:87:d2:a4:5f:71:5e:15:ee:9b: 59:9a:c1:8d:8a:c8:ef:6d:e2:ad:aa:97:79:6c:1e:01:16:e8: b3:94:26:39:f7:05:71:9f:52:e1:a1:08:00:98:0f:0e:d1:1f: 15:bb:4e:aa:3c:be:c5:2b:1f:0f:73:b2:79:5d:61:ad:a0:89: 27:65:a0:0c:d5:54:58:06:b3:75:dc:81:d9:1a:a8:82:39:4c: 78:f8:ff:a7:f1:d1:53:bf:5d:e7:8d:fe:1a:e8:6f:b2:37:57: 21:8d:61:8e:6b:b6:53:ef:c9:c7:f3:ea:ea:8d:cc:7a:19:3e: 36:93:67:34:23:d8:f2:bc:53:85:f8:b9:ef:96:c6:84:df:1f: 70:f0:0a:30:ef:3e:78:f9:a9:f4:64:98:62:02:65:cf:d5:ab: d4:8b:72:c7:99:8f:d2:55:6d:71:39:a7:e9:d6:6e:6e:db:34: fb:92:e8:d9:ec:0f:13:86:63:23:7b:78:0f:3d:bb:4f:02:34: 39:de:dd:c2:2e:c4:6b:d8:a7:5c:9b:f7:cd:b2:f1:b3:b5:4c: f9:c5:e4:75:2a:39:e3:0f:be:57:80:3d:d4:04:5f:50:e4:e2: aa:af:16:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjYwMzI0MjMwODEyWhcNMjYwMzMxMjMwODEyWjAYMRYwFAYD VQQDEw02OWMzMTk1Yy0wOGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUpk1xcTlHNeCgiy9D0vG0fUxAn84RN5JnQ2h98rR7K9xIDizCh2d1IhhtfN 48NpUYKIqf6r9UaBtHmmQmkBvEgO3bq8VplPVk6lQtqUp5ejB+BL6Hj9Wm/9kOWW HgNDwbicGOo7ivrx8zXedT3y53n+qu+elqdY8L1sLd3BRmQzAygx0FO/8vtChcYo Rps0MaJbm870ZetUxRtPPF+o8/emlMuSzVXfwu4Jf/oN85THx2v+6HJ1RKM1Sbqg RcDVSYWJFE/rlk4tOLIrohDMGkbuPX7OQzM9qX7mx3KUIvycS6ngvRRlTXlk6EjJ CdoZtL3oRkGhtpLxmB2fdszjjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmjSaid 4Euu5xBYAlDyXuiBXbYIMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGZNc6rnVQbYhHUsFRk6g0MMfEm7U9+OTNQ/5h9KkX3FeFe6bWZrBjYrI723i raqXeWweARbos5QmOfcFcZ9S4aEIAJgPDtEfFbtOqjy+xSsfD3OyeV1hraCJJ2Wg DNVUWAazddyB2RqogjlMePj/p/HRU79d543+GuhvsjdXIY1hjmu2U+/Jx/Pq6o3M ehk+NpNnNCPY8rxThfi575bGhN8fcPAKMO8+ePmp9GSYYgJlz9Wr1Ityx5mP0lVt cTmn6dZubts0+5Lo2ewPE4ZjI3t4Dz27TwI0Od7dwi7Ea9inXJv3zbLxs7VM+cXk dSo54w++V4A91ARfUOTiqq8WGw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:59 2026 by rpki-client