$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft File: jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json) Hash identifier: ivHKt0M/qSO0BKFrFCYEazh1POjlm9uIRe2ad4/bAAw= Subject key identifier: 04:E6:62:6E:B5:F0:6A:1F:C9:5B:72:17:8E:8D:5C:95:26:95:88:8B Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft Manifest number: 028A Signing time: Wed 25 Mar 2026 01:12:21 +0000 Manifest this update: Wed 25 Mar 2026 01:12:20 +0000 Manifest next update: Wed 01 Apr 2026 01:12:20 +0000 Files and hashes: 1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: an/dlKsd2S3SiaFRrasWEzQB2lCZojmQDa2Pt6d3sp0=) 2: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: BiwwOyQgxA4+/HewSQXwpc96m5gDAx6nGaPfygeCW6A=) 3: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: 9tSyRbjUZPm8rCblKyMICEwxVcge0D18MmAXoxN4pks=) 4: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: sTMoNXSw9rfVitp0F+b1gnnePrm61i0+13xbYrtzWns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53 Validity Not Before: Mar 25 01:12:20 2026 GMT Not After : Apr 1 01:12:20 2026 GMT Subject: CN=69c33675-f33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:3e:fb:06:ed:0f:43:5c:1c:15:09:e9:9d: cc:ef:f1:21:1a:05:97:0f:f7:d7:c5:07:38:5d:69: 3a:20:ce:78:15:e4:3d:e1:42:83:22:21:8b:72:e9: 15:b3:0a:db:32:6c:b2:f6:8a:12:3b:bf:a2:a3:43: 78:f0:86:28:c5:ab:a7:32:b0:eb:38:38:6a:7e:0c: 9d:04:85:5b:b7:db:25:90:91:0f:3b:96:8e:21:58: 7e:6f:85:23:56:13:56:38:48:a6:ed:fa:74:90:c6: e6:a9:5b:5e:46:09:4f:b7:db:56:11:95:bf:b1:1f: a7:97:0c:32:ed:6c:42:c9:14:7b:1f:f0:bc:3b:ee: 8d:82:31:04:6c:97:80:b8:4d:bb:0a:14:ac:31:46: 52:c7:28:3d:ac:7b:e0:0f:56:5d:a9:60:b2:29:0f: 7e:98:12:b1:62:6f:ac:3b:4a:10:27:69:e4:6d:7b: 5a:d2:94:5f:e0:e7:60:63:20:9b:55:cf:29:b2:86: df:8d:e6:61:98:96:30:9f:03:be:28:47:26:95:1c: 63:eb:9a:93:4e:71:92:c0:15:72:b8:6e:ba:44:a5: ba:61:eb:74:65:7e:f9:f2:23:4b:a9:b2:ef:1d:ac: 57:21:52:76:b1:00:36:2f:39:ae:6b:74:40:47:06: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E6:62:6E:B5:F0:6A:1F:C9:5B:72:17:8E:8D:5C:95:26:95:88:8B X509v3 Authority Key Identifier: keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ef:4f:5f:64:b8:ff:c2:f6:25:bc:5b:fd:59:e2:5f:a6:f6: 51:72:83:ca:3f:00:2b:28:a4:ec:cb:9b:ab:64:d4:09:b5:da: 17:75:22:4b:16:9f:51:f8:96:2b:42:f0:be:cc:71:a9:12:d3: 59:ca:09:9b:61:3d:2b:8d:fc:2c:0e:42:22:cb:1d:36:75:0a: 70:18:97:7b:57:8f:c6:c3:b3:4d:da:ae:21:62:80:c0:7d:e0: 56:ca:d4:50:82:1d:35:3a:b8:1c:5c:99:67:24:61:0a:f5:62: 87:b7:e3:19:74:e6:90:60:21:f0:6f:6d:28:58:25:c2:5c:77: ed:f5:a5:c6:3f:a1:fc:1b:c1:bf:00:7f:62:5f:d1:ad:b6:4b: 09:c2:40:1d:1c:ca:18:bb:67:4b:42:6b:10:c4:f1:c3:3a:db: f2:9c:fd:a9:6d:08:d5:b9:d7:02:16:6e:56:de:8c:c2:2a:22: d5:37:f2:bd:f5:2b:9c:0b:70:bc:c6:27:8b:62:21:e7:8b:8a: 2f:6e:6d:17:d6:23:bb:d3:eb:c5:82:f6:26:6a:f1:7f:df:6e: 64:83:09:93:fa:4c:e3:f6:c9:99:e5:f8:29:30:6c:40:6c:16: 15:c6:dd:ac:24:f7:ab:61:77:19:3a:bd:de:e8:ad:79:c4:f5: 59:c7:3d:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1 NTYwMjhFNTMwHhcNMjYwMzI1MDExMjIwWhcNMjYwNDAxMDExMjIwWjAYMRYwFAYD VQQDEw02OWMzMzY3NS1mMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjO8++wbtD0NcHBUJ6Z3M7/EhGgWXD/fXxQc4XWk6IM54FeQ94UKDIiGLcukV swrbMmyy9ooSO7+io0N48IYoxaunMrDrODhqfgydBIVbt9slkJEPO5aOIVh+b4Uj VhNWOEim7fp0kMbmqVteRglPt9tWEZW/sR+nlwwy7WxCyRR7H/C8O+6NgjEEbJeA uE27ChSsMUZSxyg9rHvgD1ZdqWCyKQ9+mBKxYm+sO0oQJ2nkbXta0pRf4OdgYyCb Vc8psobfjeZhmJYwnwO+KEcmlRxj65qTTnGSwBVyuG66RKW6Yet0ZX758iNLqbLv HaxXIVJ2sQA2Lzmua3RARwbmxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATmYm61 8GofyVtyF46NXJUmlYiLMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2MS9CMkMyMDZFMDRBMUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0 ZGpCMGRUUXFrdUZWWUNqbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANu9PX2S4/8L2Jbxb/VniX6b2UXKDyj8AKyik7Mubq2TUCbXaF3UiSxafUfiW K0LwvsxxqRLTWcoJm2E9K438LA5CIssdNnUKcBiXe1ePxsOzTdquIWKAwH3gVsrU UIIdNTq4HFyZZyRhCvVih7fjGXTmkGAh8G9tKFglwlx37fWlxj+h/BvBvwB/Yl/R rbZLCcJAHRzKGLtnS0JrEMTxwzrb8pz9qW0I1bnXAhZuVt6Mwioi1TfyvfUrnAtw vMYni2Ih54uKL25tF9Yju9PrxYL2Jmrxf99uZIMJk/pM4/bJmeX4KTBsQGwWFcbd rCT3q2F3GTq93uitecT1Wcc9Pg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:59 2026 by rpki-client