$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: 9uQlTI94zKfq+kJGFlJE7oPfyxf54tDOevcnA0QIjPY= Subject key identifier: AA:DD:22:C7:F5:06:FB:8F:EB:52:F5:07:A4:4C:27:0F:A9:FF:11:91 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 3548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 3530 Signing time: Tue 24 Mar 2026 14:37:13 +0000 Manifest this update: Tue 24 Mar 2026 14:37:13 +0000 Manifest next update: Tue 31 Mar 2026 14:37:13 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: SYSblcKxcDzFTgQ6XXYBwsjbfYYEOaGTsdGf22Ra+Pc=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: iEFgU1Qm/Iuc4U4Fc9T/1IELrhOtOZtYVcokYZc+zT8=) 3: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: qclWXVlBnstyYKCXuampSC0Gl802Drh3emJ7c8YgQUQ=) 4: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: A1JJHlqgLeycmUKsITWH6CZ+L2789FVfnYoijesk8IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13640 (0x3548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Mar 24 14:37:13 2026 GMT Not After : Mar 31 14:37:13 2026 GMT Subject: CN=69c2a199-b1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:dc:66:88:2f:e6:63:11:69:30:ab:6b:d6: f8:af:9d:ef:3a:be:4b:cf:91:75:23:30:5c:70:71: 9a:ae:88:2c:d6:f8:02:2b:54:c9:a0:cc:a7:a8:95: b9:d7:32:e6:15:4f:0b:8d:d8:34:f8:45:a1:74:bf: 75:c3:31:0f:2d:36:96:a6:4b:6f:cf:ee:80:6b:93: 36:e2:f3:c6:ad:1f:ca:ce:17:51:0d:97:57:49:ab: 2f:32:7a:1d:95:14:12:c3:8d:05:30:0c:d0:95:7c: ec:b5:55:c7:3c:a6:62:0f:e4:13:79:0e:58:69:18: e4:aa:54:22:06:e1:15:d9:20:cc:08:88:d6:6e:54: 1c:fa:cf:29:28:91:ea:b5:c5:c1:39:b1:f4:ca:b6: d4:72:2e:ef:90:5d:1c:be:ef:07:dd:73:97:cf:a3: 92:ef:ec:69:31:50:a5:e7:01:b3:dd:15:d8:d2:26: 6b:12:6a:83:b2:f2:11:e9:20:61:4c:4b:4c:97:d0: f5:d4:42:12:a5:94:a8:af:76:e9:97:c9:4e:c0:23: 5c:a7:4f:ea:7b:2f:b5:42:e7:a7:38:0c:82:4a:46: 87:92:5e:5a:03:21:fe:09:77:7f:24:b2:1a:a9:28: 4a:0d:90:8b:9d:6c:07:8a:84:ae:78:f3:fb:ae:bf: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:22:C7:F5:06:FB:8F:EB:52:F5:07:A4:4C:27:0F:A9:FF:11:91 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:a5:1a:e2:3b:ce:0c:c9:39:19:97:b7:0e:de:a4:03:47:c7: 25:45:35:be:70:0e:de:32:af:9f:91:3a:31:41:9f:39:db:17: ef:c6:87:10:37:7f:dc:1b:d3:f1:f3:12:7a:32:bc:94:f5:4a: 3c:7d:8e:50:76:64:7a:16:41:66:e3:d6:20:47:cb:25:1e:0e: 8a:9f:0d:09:9e:a1:c2:91:63:32:e8:de:57:2d:ca:10:82:bd: 1b:ce:78:1b:b6:8a:17:80:45:c8:45:1f:40:5b:fe:33:91:0e: d2:a3:ce:31:a7:d1:52:c2:04:a2:b4:4c:aa:32:98:88:1c:55: e7:76:37:e0:98:da:8c:00:fe:6a:9d:a5:24:70:6f:90:71:59: df:52:f9:99:c4:f8:a5:0e:98:4c:3a:6f:1a:49:36:f8:ee:53: 73:a1:0c:0c:21:76:3e:c8:37:fc:20:1b:c8:23:5b:33:8f:8d: d9:e6:30:ae:72:d8:e2:7e:57:fd:df:6c:f7:14:68:0b:8d:55: d1:f5:df:1c:2a:24:78:78:2e:da:a6:5b:52:fb:9a:23:31:b4: 8c:16:c0:3e:a1:dd:f4:67:ae:bf:a8:52:bd:ee:88:30:c1:a3: 40:f2:88:7a:2a:af:31:7c:99:dd:f7:74:81:6d:19:fa:a9:b9: d4:dc:75:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwMzI0MTQzNzEzWhcNMjYwMzMxMTQzNzEzWjAYMRYwFAYD VQQDEw02OWMyYTE5OS1iMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9DcZogv5mMRaTCra9b4r53vOr5Lz5F1IzBccHGarogs1vgCK1TJoMynqJW5 1zLmFU8Ljdg0+EWhdL91wzEPLTaWpktvz+6Aa5M24vPGrR/KzhdRDZdXSasvMnod lRQSw40FMAzQlXzstVXHPKZiD+QTeQ5YaRjkqlQiBuEV2SDMCIjWblQc+s8pKJHq tcXBObH0yrbUci7vkF0cvu8H3XOXz6OS7+xpMVCl5wGz3RXY0iZrEmqDsvIR6SBh TEtMl9D11EISpZSor3bpl8lOwCNcp0/qey+1QuenOAyCSkaHkl5aAyH+CXd/JLIa qShKDZCLnWwHioSuePP7rr8kjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrdIsf1 BvuP61L1B6RMJw+p/xGRMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy6Ua4jvODMk5GZe3Dt6kA0fHJUU1vnAO3jKvn5E6MUGfOdsX78aHEDd/3BvT 8fMSejK8lPVKPH2OUHZkehZBZuPWIEfLJR4Oip8NCZ6hwpFjMujeVy3KEIK9G854 G7aKF4BFyEUfQFv+M5EO0qPOMafRUsIEorRMqjKYiBxV53Y34JjajAD+ap2lJHBv kHFZ31L5mcT4pQ6YTDpvGkk2+O5Tc6EMDCF2Psg3/CAbyCNbM4+N2eYwrnLY4n5X /d9s9xRoC41V0fXfHCokeHgu2qZbUvuaIzG0jBbAPqHd9Geuv6hSve6IMMGjQPKI eiqvMXyZ3fd0gW0Z+qm51Nx1Bg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:52:21 2026 by rpki-client