$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json) Hash identifier: Djzpy8gijOfyO0HwhEk9oPjU+jvzHCkYU77AMNxnu0o= Subject key identifier: 18:21:95:2D:66:AC:10:8D:E8:4C:EB:B8:24:E2:1C:6A:06:35:34:F6 Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft Manifest number: 0856 Signing time: Tue 24 Mar 2026 20:34:19 +0000 Manifest this update: Tue 24 Mar 2026 20:34:19 +0000 Manifest next update: Tue 31 Mar 2026 20:34:19 +0000 Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: 6JOob0g3s4NzqHIuBgU2x+ijtORFhOHgmELLCVNpQjk=) 2: F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa (hash: EUsut2FLyF5LpYeC+ChqBUx/d1bJvIhQE3FoslwFs7U=) 3: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: lvBgsJNBEu3OJi7G0u8obCCadwKeypPMdN+vG2Lispo=) 4: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: m0VczHunCUj3NnxAFWU5QA67YBiWaVQ6jnViwqflf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Validity Not Before: Mar 24 20:34:19 2026 GMT Not After : Mar 31 20:34:19 2026 GMT Subject: CN=69c2f54b-4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:90:6f:69:5f:41:d8:c5:82:2c:37:43:d8: 3e:da:43:66:44:fd:50:e0:71:8c:f4:76:53:8f:f5: 6d:20:49:1c:cd:96:02:06:14:e1:ae:cf:18:72:08: 96:a8:a7:64:7d:ae:75:e1:ae:b6:a6:30:6d:b9:53: 11:a1:c8:0d:31:6e:3f:a9:97:68:5b:bb:e9:99:d7: 7e:2b:d3:57:cf:02:79:5f:b7:aa:42:7a:8f:76:46: fd:a0:cb:c5:59:c4:1f:7d:e9:40:ff:8a:d5:7d:d8: 66:2e:bc:fd:24:85:3f:e2:12:07:67:3f:59:14:9e: 51:7d:08:a2:cc:a0:5b:84:42:00:83:41:f4:41:33: 2b:4b:c4:cd:d1:55:5c:67:a9:75:e9:42:ae:8f:c3: 95:6a:7d:99:f0:33:b3:3c:a6:0a:d8:b8:38:8a:4d: 34:a1:e9:26:45:39:e8:da:bb:16:b5:e2:47:c5:4b: b1:b0:9d:c9:25:fc:c3:00:d3:59:f1:0b:b7:49:56: d8:e2:59:33:19:40:64:9d:ac:2a:ac:11:02:fa:62: a8:3e:1c:b5:ea:da:9e:d0:22:f6:4a:78:89:00:8f: 41:07:bd:8d:8b:66:dc:41:da:77:d8:2d:fa:b3:aa: f7:25:da:17:88:bd:2f:59:37:20:e7:b0:b0:5c:cc: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:21:95:2D:66:AC:10:8D:E8:4C:EB:B8:24:E2:1C:6A:06:35:34:F6 X509v3 Authority Key Identifier: keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e4:2c:35:4a:e6:f8:5a:a7:23:e4:68:24:b4:2f:5f:9f:6b: bf:27:35:fc:5b:93:6f:4c:d8:13:f9:33:ac:49:7f:e4:cd:c9: 4e:c0:de:f9:38:db:fb:2d:31:4e:70:ef:25:2e:ab:d9:2b:36: 25:5d:87:53:78:c1:77:07:56:67:c3:ad:f3:e7:01:b0:cc:63: 29:f1:25:58:f3:b5:5f:79:58:b9:c1:c6:07:ef:56:d0:9c:85: 78:82:90:dd:50:47:74:f0:1f:74:68:b2:c9:c7:6b:74:c9:35: bb:f4:c4:e4:bb:81:d0:6a:79:fe:88:30:de:33:eb:11:31:a1: 49:10:99:4b:e3:8b:9c:2e:e2:30:cc:7c:32:7e:b9:0a:29:4d: ac:aa:6e:45:3d:1a:53:b5:10:ec:d1:e8:ee:35:06:bd:83:f2: 05:6c:a9:4b:8b:cf:22:ba:0e:f0:a7:7c:c9:fa:fd:f9:82:4b: c6:45:63:84:31:f8:d5:22:fd:4e:00:fd:d2:12:bc:a4:f5:49: a1:66:50:f0:0e:f0:0a:13:88:fe:a1:55:46:07:65:1e:7d:2b: 3c:c1:cb:39:5c:b0:5e:71:5f:38:1a:e5:6f:69:89:3f:40:d1: a4:e3:bf:22:f4:3a:d4:9a:1c:90:fd:5d:0e:52:b1:22:d1:82: c4:67:89:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0 OTg2RERGMDgwHhcNMjYwMzI0MjAzNDE5WhcNMjYwMzMxMjAzNDE5WjAYMRYwFAYD VQQDEw02OWMyZjU0Yi00ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5SQb2lfQdjFgiw3Q9g+2kNmRP1Q4HGM9HZTj/VtIEkczZYCBhThrs8YcgiW qKdkfa514a62pjBtuVMRocgNMW4/qZdoW7vpmdd+K9NXzwJ5X7eqQnqPdkb9oMvF WcQffelA/4rVfdhmLrz9JIU/4hIHZz9ZFJ5RfQiizKBbhEIAg0H0QTMrS8TN0VVc Z6l16UKuj8OVan2Z8DOzPKYK2Lg4ik00oekmRTno2rsWteJHxUuxsJ3JJfzDANNZ 8Qu3SVbY4lkzGUBknawqrBEC+mKoPhy16tqe0CL2SniJAI9BB72Ni2bcQdp32C36 s6r3JdoXiL0vWTcg57CwXMyWXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBghlS1m rBCN6EzruCTiHGoGNTT2MB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl+QsNUrm+FqnI+RoJLQvX59rvyc1/FuTb0zYE/kzrEl/5M3JTsDe+Tjb+y0x TnDvJS6r2Ss2JV2HU3jBdwdWZ8Ot8+cBsMxjKfElWPO1X3lYucHGB+9W0JyFeIKQ 3VBHdPAfdGiyycdrdMk1u/TE5LuB0Gp5/ogw3jPrETGhSRCZS+OLnC7iMMx8Mn65 CilNrKpuRT0aU7UQ7NHo7jUGvYPyBWypS4vPIroO8Kd8yfr9+YJLxkVjhDH41SL9 TgD90hK8pPVJoWZQ8A7wChOI/qFVRgdlHn0rPMHLOVywXnFfOBrlb2mJP0DRpOO/ IvQ61JockP1dDlKxItGCxGeJ2g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:17 2026 by rpki-client