$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: z+Nr6BMTC6WkC2LbK9qjzgvNrqODXCuGefSIr3xAeCo= Subject key identifier: 3E:5B:AC:E9:E7:01:52:C9:4C:B0:FC:F7:F7:7C:FA:91:50:26:4E:36 Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: 0124 Signing time: Wed 25 Mar 2026 04:59:58 +0000 Manifest this update: Wed 25 Mar 2026 04:59:57 +0000 Manifest next update: Wed 01 Apr 2026 04:59:57 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: hD6xVH3zEgHup6D2ayWz3HyI4OQW5fB3HtKIVtdOUlE=) 2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: XkQ1uVk/uXSTQGxlpz6vDp4cVf/noCzCGg0tuyD68XM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Mar 25 04:59:57 2026 GMT Not After : Apr 1 04:59:57 2026 GMT Subject: CN=69c36bcd-6f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:b3:9c:de:38:ef:f3:7e:dc:ee:76:ea:dc: 34:33:80:44:55:fc:f1:32:80:5c:16:3a:38:3b:2f: e5:4c:22:e0:6f:88:6a:45:3f:3e:13:38:76:66:25: 3f:f4:da:fd:64:0f:3f:8e:d2:b0:91:d6:9b:ce:81: 1e:55:9e:11:80:97:d2:c0:16:b0:c3:52:7f:32:d5: d1:dc:d3:ee:83:7b:6c:32:ae:37:78:66:ab:2c:82: b2:dc:0c:9f:a6:f6:ac:2c:80:79:6b:7d:de:09:eb: 95:ef:39:c9:58:de:78:77:90:ff:7a:22:78:81:18: 62:fe:93:e5:62:cb:9f:23:0b:a4:a2:b9:6f:2a:34: 67:a3:ef:6c:72:aa:eb:8f:73:f5:ca:40:ff:7e:cd: 51:66:63:16:9e:89:61:09:85:82:a9:3f:89:f6:3a: 2b:2f:bd:b6:e7:07:74:a3:e1:88:77:a3:a4:81:25: 49:61:a4:90:a4:6b:6f:67:e2:c6:c3:07:b0:4c:c4: 64:78:49:97:c1:e2:55:9f:d8:9b:db:c4:6c:92:b1: 95:a1:a3:4d:6d:5a:05:e9:68:b9:cc:0b:65:ff:15: 65:a0:2e:6b:07:ac:90:58:d8:b2:f6:44:70:7a:ee: f5:73:6e:82:f9:9a:64:df:86:81:e6:29:42:2c:64: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:AC:E9:E7:01:52:C9:4C:B0:FC:F7:F7:7C:FA:91:50:26:4E:36 X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ce:a2:a5:ba:1b:4c:07:76:d5:2e:9c:46:7a:6e:06:bd:22: cf:d6:bd:29:d8:ec:00:ff:e5:59:8c:f5:a3:d8:7e:e4:b3:43: d3:e6:e4:ab:b8:fb:4b:0b:47:82:a8:ce:8b:1a:fd:95:56:7c: 5f:89:cd:1b:50:2e:8a:55:24:72:9d:3f:91:e9:4a:43:93:ec: ef:c8:3b:0b:65:6f:61:83:2a:86:4b:25:c9:41:8a:d4:6e:2b: 84:ed:47:2c:79:c6:66:6f:12:e4:00:53:09:f3:40:b4:2e:22: bb:31:ad:c6:3a:45:80:7e:2e:37:56:8a:e7:bc:98:d1:94:b0: d7:80:32:72:2b:6a:3c:5f:85:5b:19:2a:51:c6:22:16:91:41: 71:48:9e:e8:ce:a1:58:29:18:4b:b0:42:1d:b2:28:ba:97:7a: 27:e9:6d:bf:51:cb:9b:1d:a9:d5:72:55:50:06:6c:f4:86:cb: be:6d:4a:2f:62:68:54:54:94:cb:b0:23:5b:03:91:a2:5a:35: 73:2f:af:f0:ed:38:f1:2e:d1:6d:78:06:d3:b7:3c:6e:39:5b: 6c:e5:c4:58:f1:e0:22:3e:25:0b:bb:f9:ae:a9:7e:3d:b2:41: e5:86:c0:f9:3a:d2:71:95:b4:ac:f7:54:09:cb:40:3f:b6:17: 76:5c:e8:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjYwMzI1MDQ1OTU3WhcNMjYwNDAxMDQ1OTU3WjAYMRYwFAYD VQQDEw02OWMzNmJjZC02ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVOznN447/N+3O526tw0M4BEVfzxMoBcFjo4Oy/lTCLgb4hqRT8+Ezh2ZiU/ 9Nr9ZA8/jtKwkdabzoEeVZ4RgJfSwBaww1J/MtXR3NPug3tsMq43eGarLIKy3Ayf pvasLIB5a33eCeuV7znJWN54d5D/eiJ4gRhi/pPlYsufIwukorlvKjRno+9scqrr j3P1ykD/fs1RZmMWnolhCYWCqT+J9jorL7225wd0o+GId6OkgSVJYaSQpGtvZ+LG wwewTMRkeEmXweJVn9ib28RskrGVoaNNbVoF6Wi5zAtl/xVloC5rB6yQWNiy9kRw eu71c26C+Zpk34aB5ilCLGSaQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5brOnn AVLJTLD89/d8+pFQJk42MB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU86ipbobTAd21S6cRnpuBr0iz9a9KdjsAP/lWYz1o9h+5LND0+bkq7j7SwtH gqjOixr9lVZ8X4nNG1AuilUkcp0/kelKQ5Ps78g7C2VvYYMqhkslyUGK1G4rhO1H LHnGZm8S5ABTCfNAtC4iuzGtxjpFgH4uN1aK57yY0ZSw14AycitqPF+FWxkqUcYi FpFBcUie6M6hWCkYS7BCHbIoupd6J+ltv1HLmx2p1XJVUAZs9IbLvm1KL2JoVFSU y7AjWwORolo1cy+v8O048S7RbXgG07c8bjlbbOXEWPHgIj4lC7v5rql+PbJB5YbA +TrScZW0rPdUCctAP7YXdlzoog== -----END CERTIFICATE-----Generated at Fri Mar 27 03:25:20 2026 by rpki-client