$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: 0oybX4QzHaK4XKaBeQZdjqF6cKj+o6IHXbbK0nqg3VM= Subject key identifier: FE:72:51:76:83:B8:FD:59:D5:86:79:91:18:55:BE:41:41:1C:7D:F0 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 08DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 08C8 Signing time: Tue 24 Mar 2026 20:11:52 +0000 Manifest this update: Tue 24 Mar 2026 20:11:52 +0000 Manifest next update: Tue 31 Mar 2026 20:11:52 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: reUAaew/D6V5TzwSX7DG7YkN58kw8WyASGRDkZzzaV0=) 2: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: U4HdV/PDUa6khnwJGf56kPZWlaze7/9evihtQtzPYLs=) 3: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: a0KJzFwwqv0lg3ULNBnJePGLp0NsrsB64/1kaRLoBG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2268 (0x8dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: Mar 24 20:11:52 2026 GMT Not After : Mar 31 20:11:52 2026 GMT Subject: CN=69c2f008-f560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:2f:9c:d5:68:05:4a:3b:0e:62:ad:db:bb: 61:a3:4b:c3:ef:9c:7a:26:27:2c:0e:d6:56:56:0c: 62:99:ca:d9:50:b8:c4:9a:40:bd:78:5d:ea:5d:f2: 89:b3:00:d3:9b:cf:27:31:2d:9e:fb:64:17:63:1f: 3d:7d:a0:fb:0a:13:9e:5e:00:7d:2e:a1:1e:af:d8: b5:07:f2:d6:c6:e2:25:af:b1:74:d4:e5:84:b3:ad: 93:d8:40:67:f0:ab:85:14:b7:bb:ed:a5:02:f3:c6: ea:70:1a:7b:8b:22:2e:65:4e:f9:fa:71:a9:4d:b0: 41:ed:8a:e0:01:e0:b5:57:77:a4:83:7a:2f:fc:b1: 5c:f5:ba:6e:af:ae:ac:a3:61:ad:7a:c6:af:f2:66: 5f:ae:1b:1a:fc:e4:9c:11:98:76:b6:0b:33:4e:17: 62:c5:04:74:2f:7b:e6:03:fb:31:8e:ee:e1:15:90: 5e:56:3a:0d:a3:26:a9:48:13:ae:dc:f0:c2:6f:10: 73:26:d1:15:40:42:12:6e:f2:4b:df:5a:1b:b3:53: 57:2d:37:30:f5:1e:4d:66:12:15:53:80:00:3e:e8: d7:43:f8:6e:25:e4:87:83:93:5f:2b:c0:02:31:e3: 23:a6:c7:be:77:1f:6b:f6:42:fb:80:eb:46:66:66: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:72:51:76:83:B8:FD:59:D5:86:79:91:18:55:BE:41:41:1C:7D:F0 X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:62:0a:c9:48:67:e5:dd:05:1e:34:d2:2b:ba:25:d2:c3:61: 07:d1:7c:48:12:8a:2e:e0:86:96:d2:b8:9f:78:b4:fb:8d:dd: 9b:c1:29:d1:a8:ed:fa:02:73:78:a0:7d:fc:3f:1e:1f:b3:62: bc:db:01:ab:bc:ef:2b:d0:77:ab:c9:2c:98:25:4d:e0:5c:04: 0f:bd:41:db:dc:e2:6d:c6:a6:46:a0:8d:27:0c:7b:43:79:44: 28:9a:f3:fb:f7:9d:a9:dc:a8:ef:6c:88:10:4b:38:87:cf:b9: a1:fb:f9:a6:41:38:f0:a4:be:53:64:c8:29:05:b2:dd:48:5c: bc:e8:56:b3:63:7d:a5:c6:f8:5f:7e:7f:4b:71:7d:6d:d9:59: 0f:c5:1c:99:94:34:6b:12:4e:96:b0:26:74:61:1c:f3:d3:64: b5:63:a2:85:35:7b:2e:7b:47:23:cc:de:61:29:8f:97:66:af: 1b:c6:71:82:5c:19:82:23:a2:79:5f:e2:d8:7d:c9:06:eb:03: 02:53:78:1c:10:d3:b8:c2:66:75:5a:09:20:66:15:16:09:c8: d2:06:f9:fe:b7:5b:f2:4e:0a:2a:99:25:ed:be:1e:49:65:3e: 91:54:e2:a7:c9:b2:ee:32:d0:f8:50:55:88:3e:e8:2c:dd:73: d9:fd:bc:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjYwMzI0MjAxMTUyWhcNMjYwMzMxMjAxMTUyWjAYMRYwFAYD VQQDEw02OWMyZjAwOC1mNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGAvnNVoBUo7DmKt27tho0vD75x6JicsDtZWVgximcrZULjEmkC9eF3qXfKJ swDTm88nMS2e+2QXYx89faD7ChOeXgB9LqEer9i1B/LWxuIlr7F01OWEs62T2EBn 8KuFFLe77aUC88bqcBp7iyIuZU75+nGpTbBB7YrgAeC1V3ekg3ov/LFc9bpur66s o2Gtesav8mZfrhsa/OScEZh2tgszThdixQR0L3vmA/sxju7hFZBeVjoNoyapSBOu 3PDCbxBzJtEVQEISbvJL31obs1NXLTcw9R5NZhIVU4AAPujXQ/huJeSHg5NfK8AC MeMjpse+dx9r9kL7gOtGZmakqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5yUXaD uP1Z1YZ5kRhVvkFBHH3wMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApWIKyUhn5d0FHjTSK7ol0sNhB9F8SBKKLuCGltK4n3i0+43dm8Ep0ajt+gJz eKB9/D8eH7NivNsBq7zvK9B3q8ksmCVN4FwED71B29zibcamRqCNJwx7Q3lEKJrz +/edqdyo72yIEEs4h8+5ofv5pkE48KS+U2TIKQWy3UhcvOhWs2N9pcb4X35/S3F9 bdlZD8UcmZQ0axJOlrAmdGEc89NktWOihTV7LntHI8zeYSmPl2avG8ZxglwZgiOi eV/i2H3JBusDAlN4HBDTuMJmdVoJIGYVFgnI0gb5/rdb8k4KKpkl7b4eSWU+kVTi p8my7jLQ+FBViD7oLN1z2f28Tg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:00 2026 by rpki-client