$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: NwYPbYjYj1BNebfHysiAhypPB+05T52qQIktehV6e4Y= Subject key identifier: 4B:55:74:FB:71:80:32:85:3B:A2:B9:A0:00:DA:DF:63:8F:E7:06:32 Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 129B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 128F Signing time: Tue 24 Mar 2026 16:58:33 +0000 Manifest this update: Tue 24 Mar 2026 16:58:33 +0000 Manifest next update: Tue 31 Mar 2026 16:58:33 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: 31e2IWymoFDnfqfTkC/W/rTlcA5p3b7IeZKbYUsmLOI=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: 0mtH92tidj+S9C8pEF1gtwl/Ps40TYHu37CLwgbwKxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4763 (0x129b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Mar 24 16:58:33 2026 GMT Not After : Mar 31 16:58:33 2026 GMT Subject: CN=69c2c2b9-4c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:84:c2:22:67:c6:93:9b:c0:bb:93:db:46: c9:c9:77:e7:7a:7c:6f:15:43:8f:42:05:dd:a0:da: cb:d5:c9:63:ee:35:3e:d7:80:c3:52:97:4c:17:42: 84:3d:49:73:d0:58:c9:ad:d0:79:c0:9e:7e:ad:7a: 61:51:cf:1c:37:2e:4f:83:f2:b9:e3:06:a0:52:72: da:32:2e:67:b1:70:48:3f:b7:ce:f6:77:43:30:38: bd:41:c9:c6:b1:a9:59:02:16:ac:2e:de:62:52:0d: b8:27:43:17:02:8e:a7:ea:b3:ef:8f:15:20:3d:98: 9d:52:65:e3:83:7e:69:ff:23:bb:55:a2:fc:7e:4e: 35:91:39:c1:04:26:a0:3b:24:37:0a:26:d5:bc:78: ea:9f:44:39:27:b0:f3:42:0d:25:6c:ad:a2:2a:15: 4c:18:50:50:96:79:cb:c9:1d:75:98:44:8f:86:1e: 30:52:28:55:0b:b9:fa:36:73:20:ad:7d:ed:76:6e: c0:fb:23:d7:07:d9:44:62:70:ca:04:ae:f7:e0:b1: b5:f3:9d:01:11:92:09:c8:31:1c:e6:8f:b8:3e:76: e8:f9:8a:33:05:40:46:28:e8:69:bd:9c:05:45:58: 41:8d:61:4c:5c:76:27:00:68:ad:d4:b1:8f:3e:ec: df:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:55:74:FB:71:80:32:85:3B:A2:B9:A0:00:DA:DF:63:8F:E7:06:32 X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4d:9e:a7:00:50:d8:61:16:22:1a:9f:b4:89:67:42:83:cc: 2d:db:03:99:df:ee:8d:19:a9:a0:d8:8b:d6:64:c3:6a:58:c0: 30:d3:42:b6:ab:ea:a3:83:54:a9:04:e2:98:29:09:a5:81:50: c0:62:72:4a:a6:37:f3:0e:b0:08:bf:86:09:c9:b2:6b:5c:c7: dc:42:37:21:8a:3c:c7:d5:64:8c:b9:f1:7b:dc:c0:66:d3:93: 58:44:85:1e:cd:e8:68:dc:81:15:96:bb:0c:4d:7d:20:7a:54: 41:79:55:7e:ef:42:cd:6c:75:9b:a2:74:f1:5e:53:64:20:d7: c0:50:eb:c8:0c:9f:c0:25:d5:d4:4d:d0:6e:40:c6:50:da:e3: 34:61:fb:9c:92:8f:1d:8f:a1:66:b6:58:15:4f:b0:2b:1c:17: 7e:7f:24:10:2c:45:6a:fe:bc:10:e2:c8:1e:f3:c4:a7:86:eb: 5d:72:9a:97:e2:03:e6:8c:dd:29:ba:59:b3:90:b1:00:de:1d: d2:3c:e9:c8:2c:fb:ed:ee:fb:ee:0a:89:53:14:78:2e:23:d9: a9:9f:f3:d9:a9:21:2a:16:61:9b:1c:d3:c2:c8:69:e2:bf:4e: f7:1b:99:11:02:af:a7:35:cc:4e:09:0a:39:dc:d4:ea:88:74: de:ac:2b:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjYwMzI0MTY1ODMzWhcNMjYwMzMxMTY1ODMzWjAYMRYwFAYD VQQDEw02OWMyYzJiOS00YzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWKEwiJnxpObwLuT20bJyXfnenxvFUOPQgXdoNrL1clj7jU+14DDUpdMF0KE PUlz0FjJrdB5wJ5+rXphUc8cNy5Pg/K54wagUnLaMi5nsXBIP7fO9ndDMDi9QcnG salZAhasLt5iUg24J0MXAo6n6rPvjxUgPZidUmXjg35p/yO7VaL8fk41kTnBBCag OyQ3CibVvHjqn0Q5J7DzQg0lbK2iKhVMGFBQlnnLyR11mESPhh4wUihVC7n6NnMg rX3tdm7A+yPXB9lEYnDKBK734LG1850BEZIJyDEc5o+4Pnbo+YozBUBGKOhpvZwF RVhBjWFMXHYnAGit1LGPPuzfHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtVdPtx gDKFO6K5oADa32OP5wYyMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc02epwBQ2GEWIhqftIlnQoPMLdsDmd/ujRmpoNiL1mTDaljAMNNCtqvqo4NU qQTimCkJpYFQwGJySqY38w6wCL+GCcmya1zH3EI3IYo8x9VkjLnxe9zAZtOTWESF Hs3oaNyBFZa7DE19IHpUQXlVfu9CzWx1m6J08V5TZCDXwFDryAyfwCXV1E3QbkDG UNrjNGH7nJKPHY+hZrZYFU+wKxwXfn8kECxFav68EOLIHvPEp4brXXKal+ID5ozd KbpZs5CxAN4d0jzpyCz77e777gqJUxR4LiPZqZ/z2akhKhZhmxzTwshp4r9O9xuZ EQKvpzXMTgkKOdzU6oh03qwrCg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:55:35 2026 by rpki-client