$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: Uh/gCGym5QdwnoVB3ntvAJT88xp5fwIXKI2w+Z1VURg= Subject key identifier: 62:53:39:D3:75:EB:80:D7:91:9B:B2:E0:BA:F6:BD:48:DA:04:15:B2 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 1379 Signing time: Tue 24 Mar 2026 19:12:11 +0000 Manifest this update: Tue 24 Mar 2026 19:12:11 +0000 Manifest next update: Tue 31 Mar 2026 19:12:11 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: xpJlrb8qFgktRpQnBcPGRs8kUSr2KiNnF+2L1uccypA=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: yGyRKh06TFma60wn7/oVG0CZ1hXIDiNrfwQrrBtGYeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Mar 24 19:12:11 2026 GMT Not After : Mar 31 19:12:11 2026 GMT Subject: CN=69c2e20b-532a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ae:e8:d8:03:ca:63:2c:a9:e5:bf:28:e3:aa: 25:90:36:86:bc:71:cb:7a:c7:d7:39:00:97:9d:bb: 44:0a:08:d5:1d:fc:b5:ee:12:6b:95:fb:6c:13:38: 8c:59:17:4a:2d:7b:37:fd:17:77:24:0e:59:95:97: 21:c0:f6:f0:b7:98:fb:54:db:66:25:fb:b6:78:bf: 4f:cd:66:4d:c4:29:75:86:68:bd:14:27:1f:1b:5d: bd:44:b3:eb:26:3d:ba:61:97:66:de:0b:0f:ab:1d: f0:c6:10:11:cc:bc:47:5f:9d:db:41:94:4f:30:96: 98:c0:a9:fd:9b:e4:c2:30:06:c7:9e:f1:58:46:09: 77:18:85:49:32:17:97:5b:28:f6:12:1c:13:78:9b: d2:28:af:b3:2f:ba:0d:9f:de:ae:f3:9b:bc:b6:56: 35:ea:50:97:2a:1d:ec:b1:e0:15:45:ee:44:2b:29: ec:d3:b0:bc:5d:5e:cb:b1:c4:f9:74:35:ef:fb:0f: a9:0f:c5:c8:c1:e8:04:e8:21:e1:bb:db:4c:fe:ac: 94:fd:9f:96:89:7a:32:be:a6:db:7c:5a:29:88:23: 09:7e:b9:50:6c:7f:08:1f:ac:da:5d:25:eb:1e:e0: 91:bb:87:57:0e:0a:dc:45:52:20:52:e5:27:07:3d: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:53:39:D3:75:EB:80:D7:91:9B:B2:E0:BA:F6:BD:48:DA:04:15:B2 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:72:21:0b:c9:94:c1:03:68:39:32:ad:76:e2:86:d8:f7:f7: b5:ee:9e:8e:aa:08:98:59:ea:2c:50:ec:78:5a:78:05:96:f4: a0:d2:e4:a3:f6:70:7d:de:b0:92:d0:fc:0e:f4:4d:f6:1e:be: d2:85:f8:a9:eb:63:f6:e0:48:56:6b:8e:65:2b:0d:53:64:33: 3a:5d:aa:94:41:da:57:ff:cd:37:4c:c4:2f:d3:ba:02:ee:9d: 29:f9:d5:38:47:cb:70:ef:cc:72:e9:50:9b:86:56:5f:7c:f8: 6f:f2:1e:f0:d9:cb:ba:9a:1e:99:ce:e7:c1:c6:2d:90:b4:50: 7c:62:fd:94:73:33:8b:cf:e5:32:4d:2d:7a:5e:e8:50:bb:65: 2e:aa:61:ee:63:2e:17:a7:0c:57:44:05:78:b6:87:6b:f4:b0: 31:5d:d3:60:af:2c:2d:55:2e:e0:94:3a:3d:01:25:01:63:5c: dc:51:fc:ef:da:c1:43:4e:b4:4d:d1:5d:56:74:7e:e0:02:ba: 60:94:52:d8:ef:5e:c4:1e:bb:9b:c4:c4:57:25:d0:99:ba:25: 24:ee:82:e2:de:17:0d:ba:5f:1b:6f:dc:c6:eb:30:6a:16:9c: 6a:aa:67:69:93:90:e9:be:ce:c8:26:99:9e:01:15:b1:34:04: b9:33:b4:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjYwMzI0MTkxMjExWhcNMjYwMzMxMTkxMjExWjAYMRYwFAYD VQQDEw02OWMyZTIwYi01MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4q7o2APKYyyp5b8o46olkDaGvHHLesfXOQCXnbtECgjVHfy17hJrlftsEziM WRdKLXs3/Rd3JA5ZlZchwPbwt5j7VNtmJfu2eL9PzWZNxCl1hmi9FCcfG129RLPr Jj26YZdm3gsPqx3wxhARzLxHX53bQZRPMJaYwKn9m+TCMAbHnvFYRgl3GIVJMheX Wyj2EhwTeJvSKK+zL7oNn96u85u8tlY16lCXKh3sseAVRe5EKyns07C8XV7LscT5 dDXv+w+pD8XIwegE6CHhu9tM/qyU/Z+WiXoyvqbbfFopiCMJfrlQbH8IH6zaXSXr HuCRu4dXDgrcRVIgUuUnBz0dvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJTOdN1 64DXkZuy4Lr2vUjaBBWyMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqXIhC8mUwQNoOTKtduKG2Pf3te6ejqoImFnqLFDseFp4BZb0oNLko/Zwfd6w ktD8DvRN9h6+0oX4qetj9uBIVmuOZSsNU2QzOl2qlEHaV//NN0zEL9O6Au6dKfnV OEfLcO/MculQm4ZWX3z4b/Ie8NnLupoemc7nwcYtkLRQfGL9lHMzi8/lMk0tel7o ULtlLqph7mMuF6cMV0QFeLaHa/SwMV3TYK8sLVUu4JQ6PQElAWNc3FH879rBQ060 TdFdVnR+4AK6YJRS2O9exB67m8TEVyXQmbolJO6C4t4XDbpfG2/cxuswahacaqpn aZOQ6b7OyCaZngEVsTQEuTO0Ng== -----END CERTIFICATE-----Generated at Thu Mar 26 15:22:35 2026 by rpki-client