$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: jY2FTNnUe5m1FiPkCbxQIph9saSznMVspzIkZ0XLBeU= Subject key identifier: AA:5B:2F:96:A1:87:FC:6E:53:37:19:5E:C0:11:95:AA:A5:9D:68:E1 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 083E Signing time: Tue 24 Mar 2026 20:38:14 +0000 Manifest this update: Tue 24 Mar 2026 20:38:14 +0000 Manifest next update: Tue 31 Mar 2026 20:38:14 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: gSsw8HmW1Dv4MmeU/U2gkW+oJFGd4EhnBaOKhwap5qA=) 2: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=) 3: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=) 4: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Mar 24 20:38:14 2026 GMT Not After : Mar 31 20:38:14 2026 GMT Subject: CN=69c2f636-a1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:bd:f4:65:f7:e4:ad:2a:de:30:61:1b:cb: 21:19:5f:ce:b1:a3:02:9b:a6:d8:6c:d4:de:76:df: 00:8e:24:79:e9:25:44:db:b4:94:45:0c:19:61:2c: 8f:41:b9:fa:81:c4:8c:5a:98:fc:f1:9f:46:cb:f9: 6a:ad:e7:0e:df:71:74:bb:d6:bf:e3:e1:2d:09:c8: 4a:fc:fe:08:61:71:db:4a:a0:c3:08:32:c2:77:5f: 72:42:7e:64:e7:5f:f7:25:89:70:70:35:2a:70:d7: c5:f8:bf:43:42:2f:93:14:79:8c:96:b0:4a:6d:ce: 05:d2:f9:61:2e:d2:1e:56:f4:3c:3a:d3:e0:f8:47: bb:6e:4e:69:73:d8:fd:d4:90:5e:94:13:4a:bd:5b: 8c:a2:ee:5e:58:3b:cb:67:6b:b1:1c:31:2c:cd:61: df:64:e6:43:89:49:7a:c5:ce:11:00:80:0b:bf:0e: f8:37:6e:74:54:dd:10:c8:bc:1b:7d:54:89:f2:f3: 2f:b2:ca:47:08:50:3d:01:1d:de:2d:08:37:a8:3f: 73:f4:6f:4f:4c:cb:20:4e:4c:e2:f6:dd:4a:0e:a8: 4e:48:a7:5e:90:11:7a:47:d3:8c:5c:a7:b7:44:63: 3f:a6:f4:63:d6:06:4f:63:1a:d9:60:c2:0d:e5:d0: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5B:2F:96:A1:87:FC:6E:53:37:19:5E:C0:11:95:AA:A5:9D:68:E1 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b9:88:ab:7b:08:47:f4:a9:80:3d:39:b1:78:db:d7:c7:6e: 73:d0:af:ba:ef:5a:81:0f:e1:b9:61:ba:43:6e:d6:f0:c7:ed: d7:52:37:5b:0f:83:f6:28:fc:ba:77:3b:f8:6f:1b:e5:78:06: 42:b2:39:86:88:48:32:2b:a7:36:c3:3f:ef:53:0c:c7:6c:0a: 3a:84:40:b3:ef:f7:46:1e:db:55:02:09:e6:c5:d0:ae:3b:ad: ff:af:06:1d:83:2b:a8:73:9f:8b:31:fc:40:df:68:41:e2:f9: 49:31:35:90:8e:7a:18:ed:31:4e:5e:6c:32:6f:5f:bf:68:1a: fa:33:3e:6b:9c:58:1c:de:fa:f3:78:97:c3:b0:02:f2:ad:c1: 7a:31:16:cf:9a:ab:ee:0f:f0:e6:ae:20:7b:42:cb:12:a4:34: e4:fd:9e:dc:31:5a:62:35:4f:f0:5f:a7:6f:ff:18:8e:67:96: 04:45:8c:96:ae:da:00:e2:ba:e0:58:01:71:a5:07:7d:ad:cb: a1:cb:d7:fb:ad:49:e5:1a:fb:f8:fa:3b:8d:0e:86:48:d7:0d: 5c:f5:14:c4:39:95:f1:7f:f0:81:c8:66:d9:8b:7c:33:32:9a: 42:e3:08:52:7c:33:c7:cd:19:96:65:cd:c4:d0:f2:ce:73:15: d5:67:37:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjYwMzI0MjAzODE0WhcNMjYwMzMxMjAzODE0WjAYMRYwFAYD VQQDEw02OWMyZjYzNi1hMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngK99GX35K0q3jBhG8shGV/OsaMCm6bYbNTedt8AjiR56SVE27SURQwZYSyP Qbn6gcSMWpj88Z9Gy/lqrecO33F0u9a/4+EtCchK/P4IYXHbSqDDCDLCd19yQn5k 51/3JYlwcDUqcNfF+L9DQi+TFHmMlrBKbc4F0vlhLtIeVvQ8OtPg+Ee7bk5pc9j9 1JBelBNKvVuMou5eWDvLZ2uxHDEszWHfZOZDiUl6xc4RAIALvw74N250VN0QyLwb fVSJ8vMvsspHCFA9AR3eLQg3qD9z9G9PTMsgTkzi9t1KDqhOSKdekBF6R9OMXKe3 RGM/pvRj1gZPYxrZYMIN5dAg8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpbL5ah h/xuUzcZXsARlaqlnWjhMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt7mIq3sIR/SpgD05sXjb18duc9Cvuu9agQ/huWG6Q27W8Mft11I3Ww+D9ij8 unc7+G8b5XgGQrI5hohIMiunNsM/71MMx2wKOoRAs+/3Rh7bVQIJ5sXQrjut/68G HYMrqHOfizH8QN9oQeL5STE1kI56GO0xTl5sMm9fv2ga+jM+a5xYHN7683iXw7AC 8q3BejEWz5qr7g/w5q4ge0LLEqQ05P2e3DFaYjVP8F+nb/8YjmeWBEWMlq7aAOK6 4FgBcaUHfa3LocvX+61J5Rr7+Po7jQ6GSNcNXPUUxDmV8X/wgchm2Yt8MzKaQuMI Unwzx80ZlmXNxNDyznMV1Wc33Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:54:43 2026 by rpki-client