$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: pRUWWNq7Epiv1bY1xmQ7pSPsxPYKAx24PrpCzomgpno= Subject key identifier: E7:F5:50:31:12:6A:45:0E:F9:45:DA:2D:9E:E4:6D:B5:4E:AC:D2:2F Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0AEA Signing time: Thu 26 Mar 2026 19:23:23 +0000 Manifest this update: Thu 26 Mar 2026 19:23:22 +0000 Manifest next update: Thu 02 Apr 2026 19:23:22 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: oBsGnoSY72/jkFNMKT3CwHvi23hh52zhjBkRcTV4kOo=) 2: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=) 3: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=) 4: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=) 5: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=) 6: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=) 7: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=) 8: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=) 9: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=) 10: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=) 11: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=) 12: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Mar 26 19:23:22 2026 GMT Not After : Apr 2 19:23:22 2026 GMT Subject: CN=69c587ab-3141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:0b:f8:db:12:7c:17:76:5b:86:f2:27:b9: 5b:c4:af:b0:c4:e0:0e:f3:87:dc:f9:9a:78:38:8d: 4d:01:bc:c1:d6:6f:51:76:b4:64:bd:42:7b:43:f8: 15:cf:61:69:b2:8e:ae:5d:0b:02:35:4c:67:ec:77: 36:44:f3:f4:1c:d4:f9:14:23:d0:6f:04:42:50:34: e3:05:76:bd:44:ff:e4:bc:52:f1:14:e0:f5:25:5f: d2:ae:34:3a:cb:6e:6a:9f:a1:5d:c8:c2:f0:f0:04: 25:4a:21:dd:f6:d8:cf:0d:50:db:41:f8:3b:81:fe: 1c:1c:8f:bb:ed:c9:ed:e3:c6:e0:45:07:3b:2b:c6: 43:05:df:96:28:a1:94:ca:eb:03:0d:67:53:75:10: 46:fd:69:87:67:01:36:3f:49:e4:14:06:1a:ed:18: d7:e1:f6:65:2b:be:26:33:d1:c4:07:80:6b:3c:f4: 89:88:d6:ad:9d:85:73:86:f5:1c:a7:50:1d:1c:ab: e9:c9:59:12:93:06:0f:8c:a4:a0:b4:ac:90:c7:cc: 4e:17:6d:ed:99:ff:07:73:81:e8:b7:8d:d9:25:f0: 52:6d:64:ec:9e:a0:01:59:90:5c:94:78:5c:c5:74: 9a:9e:85:ff:8c:db:11:0a:ac:10:93:5b:7e:20:e3: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F5:50:31:12:6A:45:0E:F9:45:DA:2D:9E:E4:6D:B5:4E:AC:D2:2F X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:34:d7:27:87:07:c4:79:7a:7e:d5:99:83:27:50:78:55:ad: f5:b8:26:ae:6e:46:f9:94:52:1c:04:9e:5c:66:3d:0c:42:b1: 50:2b:3f:81:19:da:3f:2c:4d:13:ed:74:90:1f:24:9a:9c:2c: 5f:95:3e:cd:5c:c8:49:fb:89:87:6a:af:16:50:63:d0:f1:15: 64:79:9c:cb:8c:54:66:6c:61:0f:11:81:ff:45:25:49:40:9c: f1:d6:f7:9a:a5:d9:76:df:84:e5:f0:a5:d7:ad:b6:36:5c:60: b1:66:4a:b2:30:d0:d0:24:07:22:c8:28:29:dc:c6:2a:1b:8c: e3:13:da:86:d0:cb:00:c9:89:ed:d7:b2:a5:7b:53:20:20:df: cf:cb:7d:20:ac:8b:b8:98:74:77:b7:e6:6e:20:2f:05:f6:9a: 9c:37:49:cc:2f:f5:ba:b9:30:05:0a:06:09:b7:9e:ce:55:56: 2c:20:97:0a:dd:ca:69:15:0f:05:88:09:26:79:93:9f:88:25: 13:63:df:9b:0a:b3:ca:04:55:5d:e8:f6:b1:91:d8:ae:46:38: 57:28:cc:b4:29:49:aa:97:e2:b1:d9:fb:a0:a5:ed:ed:24:05: 9e:94:ce:3b:9f:d3:73:35:b8:8d:95:e5:20:1f:c8:e9:9a:ee: 04:cd:ce:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjYwMzI2MTkyMzIyWhcNMjYwNDAyMTkyMzIyWjAYMRYwFAYD VQQDEw02OWM1ODdhYi0zMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOoL+NsSfBd2W4byJ7lbxK+wxOAO84fc+Zp4OI1NAbzB1m9RdrRkvUJ7Q/gV z2Fpso6uXQsCNUxn7Hc2RPP0HNT5FCPQbwRCUDTjBXa9RP/kvFLxFOD1JV/SrjQ6 y25qn6FdyMLw8AQlSiHd9tjPDVDbQfg7gf4cHI+77cnt48bgRQc7K8ZDBd+WKKGU yusDDWdTdRBG/WmHZwE2P0nkFAYa7RjX4fZlK74mM9HEB4BrPPSJiNatnYVzhvUc p1AdHKvpyVkSkwYPjKSgtKyQx8xOF23tmf8Hc4Hot43ZJfBSbWTsnqABWZBclHhc xXSanoX/jNsRCqwQk1t+IOP4ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOf1UDES akUO+UXaLZ7kbbVOrNIvMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWjTXJ4cHxHl6ftWZgydQeFWt9bgmrm5G+ZRSHASeXGY9DEKxUCs/gRnaPyxN E+10kB8kmpwsX5U+zVzISfuJh2qvFlBj0PEVZHmcy4xUZmxhDxGB/0UlSUCc8db3 mqXZdt+E5fCl1622NlxgsWZKsjDQ0CQHIsgoKdzGKhuM4xPahtDLAMmJ7deypXtT ICDfz8t9IKyLuJh0d7fmbiAvBfaanDdJzC/1urkwBQoGCbeezlVWLCCXCt3KaRUP BYgJJnmTn4glE2PfmwqzygRVXej2sZHYrkY4VyjMtClJqpfisdn7oKXt7SQFnpTO O5/TczW4jZXlIB/I6ZruBM3Oeg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:26 2026 by rpki-client