$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: tfSKxQJ5PwNGZBI7ocGnrdAM21LU6XHoWLBOKrEPgnc= Subject key identifier: 50:9D:F0:22:95:2D:24:67:8B:B8:68:AA:FB:4C:A7:11:31:48:80:78 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 01D7 Signing time: Wed 25 Mar 2026 02:59:28 +0000 Manifest this update: Wed 25 Mar 2026 02:59:28 +0000 Manifest next update: Wed 01 Apr 2026 02:59:28 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: BMDtSpmMn1vskCKvSEi/cKVy9fWvrGhVZ7TzuW+Pu60=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Mar 25 02:59:28 2026 GMT Not After : Apr 1 02:59:28 2026 GMT Subject: CN=69c34f90-d66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:a6:6e:47:d2:f0:3c:13:ed:39:f1:b5:ed: 94:f4:f3:e5:12:e3:26:b1:78:32:30:0a:a2:96:80: b5:7b:1e:fb:a9:fe:74:e0:7f:5b:db:f9:5e:2c:55: c2:22:14:5d:d9:b2:a6:b1:56:89:5e:d7:9b:7f:f1: 66:2f:51:55:4f:22:2b:34:91:6f:4d:b1:49:65:93: ee:ed:95:d6:4f:a1:e2:4d:9e:a5:a1:f0:66:10:2b: 91:35:f1:98:24:93:a7:41:45:9f:76:02:ed:cd:b1: 9f:95:f2:f1:c0:12:92:49:54:51:ae:ce:0a:9e:38: dc:b8:f1:c9:8c:76:57:9d:fb:9b:bd:60:dc:f2:f7: 91:2e:79:65:27:ad:39:56:b4:b3:98:78:73:0c:9b: d2:2e:05:c1:61:b1:94:92:d0:20:0c:f0:53:65:67: 6b:67:2a:58:b6:65:dc:89:03:e7:f9:06:4d:cd:d5: 60:c3:00:f2:02:b2:dd:40:72:5a:47:ed:48:71:13: 7d:e5:2b:1b:96:ab:9d:9c:73:e1:b2:cb:51:8b:e5: 98:8d:35:98:cb:55:19:56:0c:72:32:02:27:1a:c0: 1e:bc:f1:fc:a0:2f:6a:b6:49:d8:02:31:b1:61:84: 60:b7:c3:2f:88:61:7d:99:0f:6c:ee:13:15:91:01: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9D:F0:22:95:2D:24:67:8B:B8:68:AA:FB:4C:A7:11:31:48:80:78 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:05:ef:72:fa:04:c0:42:bc:2b:ee:e7:61:83:46:3f:69:3d: 82:d5:8a:06:3a:5c:8a:6b:f3:96:89:27:55:3d:6b:86:7c:32: ec:b0:a5:13:3f:ae:88:91:06:d1:b2:88:cd:58:71:64:a0:e6: 57:54:43:d6:e2:5e:1c:1c:38:b8:c0:3c:ed:4b:0a:56:aa:af: da:13:fa:40:c0:7f:d7:f7:a5:b3:04:d0:d5:59:7b:68:fe:ab: 8e:de:72:cf:e8:43:33:fa:af:b1:2a:02:ad:a6:3b:8f:38:74: 4b:da:76:c2:6c:ea:66:98:17:ce:c1:1a:54:98:51:ff:23:0d: 0b:6e:93:42:29:c3:84:ba:f6:9a:39:f8:a1:c5:4d:38:00:6f: 28:f8:16:cf:b7:94:e6:91:1e:32:70:a6:5d:1d:6f:16:bd:10: f5:c5:63:e3:ab:04:20:38:eb:10:9c:69:b6:d2:18:20:c7:14: 4a:73:52:95:a7:b1:1f:a2:65:d0:14:c4:10:a9:40:e4:f6:3f: 17:dd:db:53:16:10:6a:26:49:d4:86:84:ae:a0:d3:24:68:0a: 99:5e:5d:82:43:77:62:6e:b9:7b:fa:f5:4e:36:2e:91:8e:09: ed:db:d1:bd:95:5c:b4:a3:b1:22:6e:eb:5a:9d:e4:90:13:83: da:59:c0:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjYwMzI1MDI1OTI4WhcNMjYwNDAxMDI1OTI4WjAYMRYwFAYD VQQDEw02OWMzNGY5MC1kNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi0OmbkfS8DwT7Tnxte2U9PPlEuMmsXgyMAqiloC1ex77qf504H9b2/leLFXC IhRd2bKmsVaJXtebf/FmL1FVTyIrNJFvTbFJZZPu7ZXWT6HiTZ6lofBmECuRNfGY JJOnQUWfdgLtzbGflfLxwBKSSVRRrs4KnjjcuPHJjHZXnfubvWDc8veRLnllJ605 VrSzmHhzDJvSLgXBYbGUktAgDPBTZWdrZypYtmXciQPn+QZNzdVgwwDyArLdQHJa R+1IcRN95SsblqudnHPhsstRi+WYjTWYy1UZVgxyMgInGsAevPH8oC9qtknYAjGx YYRgt8MviGF9mQ9s7hMVkQHFWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCd8CKV LSRni7hoqvtMpxExSIB4MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhAXvcvoEwEK8K+7nYYNGP2k9gtWKBjpcimvzloknVT1rhnwy7LClEz+uiJEG 0bKIzVhxZKDmV1RD1uJeHBw4uMA87UsKVqqv2hP6QMB/1/elswTQ1Vl7aP6rjt5y z+hDM/qvsSoCraY7jzh0S9p2wmzqZpgXzsEaVJhR/yMNC26TQinDhLr2mjn4ocVN OABvKPgWz7eU5pEeMnCmXR1vFr0Q9cVj46sEIDjrEJxpttIYIMcUSnNSlaexH6Jl 0BTEEKlA5PY/F93bUxYQaiZJ1IaErqDTJGgKmV5dgkN3Ym65e/r1TjYukY4J7dvR vZVctKOxIm7rWp3kkBOD2lnARw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:57 2026 by rpki-client