$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft File: juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json) Hash identifier: tFMXIgYMUOsydinE1FVi1+zO4CeMnObKdgaS0Lch9KM= Subject key identifier: A4:AF:74:06:ED:0B:90:ED:13:07:34:4F:5E:AC:7E:38:E4:C4:2B:4A Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 Certificate issuer: /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft Manifest number: 2E Signing time: Tue 24 Mar 2026 19:34:29 +0000 Manifest this update: Tue 24 Mar 2026 19:34:28 +0000 Manifest next update: Tue 31 Mar 2026 19:34:28 +0000 Files and hashes: 1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: 3G7n2A4ui1GCdXrOAl/omvso1oU8KRtlbEvVKoevFDc=) 2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Validity Not Before: Mar 24 19:34:28 2026 GMT Not After : Mar 31 19:34:28 2026 GMT Subject: CN=69c2e744-9212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:c4:e5:00:c1:7f:d4:60:db:74:ad:78:98: af:2d:44:a7:6a:2d:87:11:1a:58:bb:e8:1c:97:3d: dc:ea:f8:19:87:9e:aa:1c:0d:f8:93:b0:d3:8d:f1: 8a:20:5a:44:36:78:41:57:22:fe:2b:0a:c9:6a:ba: 85:17:18:ad:85:0b:af:ff:60:23:67:55:90:66:1d: d0:3c:ba:75:05:38:06:13:2c:ff:34:ae:7e:b6:89: 4f:e8:37:36:3b:8e:52:8f:eb:9d:51:c2:3d:91:20: ba:86:6c:ae:e0:98:50:28:4b:74:8b:2d:d6:1a:9e: ce:17:e9:60:01:40:cf:6a:c9:f2:b0:db:dd:5c:cb: d8:e9:c8:4b:62:f5:3a:28:e8:ca:10:6e:9e:8c:1b: 92:7a:a3:d1:8d:58:df:1d:3e:8a:3f:77:5c:c8:0b: 4f:7a:2e:9c:ce:2c:5b:9e:ea:24:e8:f3:17:c4:20: 5b:03:a3:a3:69:cb:e0:a0:12:87:5a:82:84:4e:e3: f0:b2:6f:fe:e9:c6:b0:9b:cf:7f:52:59:09:78:23: c9:89:2c:7a:7d:e3:47:71:e2:14:5b:37:f3:0f:72: ca:dd:8f:69:a4:eb:0a:8c:80:7d:d3:ae:3c:6f:f5: 7e:05:87:32:22:d7:6c:dd:ed:21:54:82:5b:eb:4f: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AF:74:06:ED:0B:90:ED:13:07:34:4F:5E:AC:7E:38:E4:C4:2B:4A X509v3 Authority Key Identifier: keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ff:c8:9a:d4:1c:e6:64:5f:98:8b:2e:2b:66:d7:1a:3b:80: 71:6a:d8:2b:3e:bb:32:1c:10:f9:ce:67:f4:de:fa:0c:52:6b: 72:34:8f:44:84:ae:4e:26:39:9a:ec:e4:39:ce:12:87:b5:5b: 62:43:d5:07:6a:0f:cf:2e:8b:45:b5:ae:82:a5:da:ac:33:37: 13:36:39:dd:b2:fd:3f:5a:d7:ca:bd:42:a5:ae:78:66:02:b1: de:d6:80:ce:1b:7a:08:d2:94:44:be:65:7f:c0:2c:b0:24:fa: aa:08:13:31:80:16:14:46:83:d0:9c:bb:78:3b:fa:ca:45:e2: a3:c0:bc:98:63:62:2d:b4:1a:9c:09:89:54:de:6a:c4:b0:c2: e5:33:5e:f5:ae:e1:99:1b:1f:86:d8:58:20:d4:ed:29:56:74: 95:33:37:3b:c0:39:11:79:09:9d:79:55:a3:50:10:13:82:2d: b6:9f:63:20:46:9d:14:a1:20:15:88:d0:35:54:f5:e8:f1:a0: e1:69:dd:7d:3f:5b:05:64:1e:b9:8b:a9:b1:d6:7c:0e:ec:cd: be:9d:5a:8d:a7:52:6e:f5:8f:73:03:8d:44:36:55:04:0d:0b: e0:72:0a:80:03:29:4b:14:35:71:28:22:98:7e:48:c9:52:26: dd:37:bd:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MURFMDExMC8GA1UEBRMoOEVFQ0IxMTk4MEVEMTE1MzRGNDE5MkY0REUwOEQxQjJD REI5MTZDODAeFw0yNjAzMjQxOTM0MjhaFw0yNjAzMzExOTM0MjhaMBgxFjAUBgNV BAMTDTY5YzJlNzQ0LTkyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbeMTlAMF/1GDbdK14mK8tRKdqLYcRGli76ByXPdzq+BmHnqocDfiTsNON8Yog WkQ2eEFXIv4rCslquoUXGK2FC6//YCNnVZBmHdA8unUFOAYTLP80rn62iU/oNzY7 jlKP651Rwj2RILqGbK7gmFAoS3SLLdYans4X6WABQM9qyfKw291cy9jpyEti9Too 6MoQbp6MG5J6o9GNWN8dPoo/d1zIC096LpzOLFue6iTo8xfEIFsDo6Npy+CgEoda goRO4/Cyb/7pxrCbz39SWQl4I8mJLHp940dx4hRbN/MPcsrdj2mk6wqMgH3Trjxv 9X4FhzIi12zd7SFUglvrT4m1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpK90Bu0L kO0TBzRPXqx+OOTEK0owHwYDVR0jBBgwFoAUjuyxGYDtEVNPQZL03gjRss25Fsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxREUwL0VCQTk4REY0RUMy MjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZOUFFaTDAzZ2pSc3MyNUZz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvanV5eEdZRHRFVk5QUVpMMDNnalJzczI1RnNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx REUwL0VCQTk4REY0RUMyMjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZO UFFaTDAzZ2pSc3MyNUZzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB//8ia1BzmZF+Yiy4rZtcaO4BxatgrPrsyHBD5zmf03voMUmtyNI9EhK5OJjma 7OQ5zhKHtVtiQ9UHag/PLotFta6CpdqsMzcTNjndsv0/WtfKvUKlrnhmArHe1oDO G3oI0pREvmV/wCywJPqqCBMxgBYURoPQnLt4O/rKReKjwLyYY2IttBqcCYlU3mrE sMLlM171ruGZGx+G2Fgg1O0pVnSVMzc7wDkReQmdeVWjUBATgi22n2MgRp0UoSAV iNA1VPXo8aDhad19P1sFZB65i6mx1nwO7M2+nVqNp1Ju9Y9zA41ENlUEDQvgcgqA AylLFDVxKCKYfkjJUibdN70n -----END CERTIFICATE-----Generated at Thu Mar 26 16:36:47 2026 by rpki-client