$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: cGbkEtUso63IDBGBaTCGM5Z7zfV+m1m7H2jpeAAZ0hI= Subject key identifier: 23:11:B6:E3:1D:B8:57:82:9B:E4:A8:91:57:E3:04:F8:F4:AC:C7:D9 Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: AF Signing time: Wed 25 Mar 2026 06:23:16 +0000 Manifest this update: Wed 25 Mar 2026 06:23:16 +0000 Manifest next update: Wed 01 Apr 2026 06:23:16 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: bu7jnaq8be8nIGXzcnzwZGwvaX9UM+1VKNjpzecBslo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Mar 25 06:23:16 2026 GMT Not After : Apr 1 06:23:16 2026 GMT Subject: CN=69c37f54-f99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:af:b7:36:d8:9b:8a:45:8b:4e:bd:17:03: c7:28:26:bf:d7:24:00:6e:79:ca:95:b5:32:e0:66: 34:7f:16:64:ad:f8:71:e4:fa:10:27:f4:ef:59:6e: 9b:49:b0:56:c8:d0:e9:47:05:ce:d3:c5:42:04:da: 16:27:88:3c:dc:19:5b:f8:2c:7a:5c:39:e3:6e:eb: 12:3b:70:64:cc:56:ce:78:8f:9b:52:49:16:f5:32: 6c:2d:ff:77:3d:74:01:52:d1:e9:6b:d8:07:be:92: 05:83:6b:cd:87:bc:e8:c2:32:44:08:b2:b1:fa:f0: eb:5f:cb:3a:35:32:9f:4b:ad:58:df:aa:a4:1b:7e: 96:9b:cd:36:80:4a:a0:34:93:0a:96:3b:f2:79:7a: c7:73:54:24:f0:07:e1:4e:7b:96:f1:6d:75:f5:11: 86:92:ea:c5:38:3e:48:94:80:2f:62:7f:d9:df:e0: 95:e5:85:dd:ae:da:93:17:29:e0:4c:2c:66:6a:90: 3b:0a:54:2f:db:aa:96:c4:93:93:76:10:5c:f0:5b: 04:93:67:8d:68:09:84:03:1c:00:46:c2:c4:c2:f5: 05:10:4d:81:bf:b1:4d:9d:0f:1b:5c:1d:c4:b4:10: 31:85:bf:bb:60:05:15:d4:ce:11:e9:b1:b7:0a:7b: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:11:B6:E3:1D:B8:57:82:9B:E4:A8:91:57:E3:04:F8:F4:AC:C7:D9 X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:68:a7:6e:65:1b:5d:c4:ea:00:fa:06:96:e8:4b:5e:d9:c6: 5f:23:44:62:75:2c:d4:21:26:4f:f5:81:56:3e:d4:bf:0c:a7: 30:27:5b:48:03:7e:ed:d8:86:a2:e9:ff:a9:57:1c:f6:a1:14: b1:67:2a:63:be:25:46:91:b6:0f:68:72:43:3e:b5:06:e0:1b: 5d:4f:45:92:0a:ff:17:38:87:2d:9d:f0:85:cc:5c:4d:45:ae: fa:dd:62:4c:bc:f7:57:6a:3f:f2:29:af:d4:5a:f8:9d:55:07: 99:72:19:fe:f6:9e:d2:d3:01:36:cc:6c:f3:89:85:ff:52:de: 46:31:89:c4:43:3c:c3:6e:12:ad:b1:2c:4b:f3:3e:05:a3:82: 55:b6:2d:e5:e6:12:ea:86:67:a6:26:47:84:06:4d:01:17:6e: 28:cd:c5:c0:7a:22:67:f2:a8:a1:51:ad:ae:28:3e:16:8b:ef: 18:b7:e8:ee:db:83:f4:48:66:18:94:71:a9:fb:c4:ce:24:06: 8a:f4:89:ab:4d:ee:81:34:e6:2e:ce:34:98:e1:f8:fd:e2:75: 14:16:ef:ad:96:c2:c5:37:c8:be:36:d5:8a:15:a8:d6:bc:ed: 70:4c:f4:df:6e:04:4d:2a:f4:f7:a6:96:20:6f:14:aa:f3:5e: 9e:1f:d0:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3RDYxMTAvBgNVBAUTKDI1OUIwM0E1QTJFMUUyQ0NDNEU0QkQ3NUVCMzM2RjIz MTFCNDQ0MkEwHhcNMjYwMzI1MDYyMzE2WhcNMjYwNDAxMDYyMzE2WjAYMRYwFAYD VQQDEw02OWMzN2Y1NC1mOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh6vtzbYm4pFi069FwPHKCa/1yQAbnnKlbUy4GY0fxZkrfhx5PoQJ/TvWW6b SbBWyNDpRwXO08VCBNoWJ4g83Blb+Cx6XDnjbusSO3BkzFbOeI+bUkkW9TJsLf93 PXQBUtHpa9gHvpIFg2vNh7zowjJECLKx+vDrX8s6NTKfS61Y36qkG36Wm802gEqg NJMKljvyeXrHc1Qk8AfhTnuW8W119RGGkurFOD5IlIAvYn/Z3+CV5YXdrtqTFyng TCxmapA7ClQv26qWxJOTdhBc8FsEk2eNaAmEAxwARsLEwvUFEE2Bv7FNnQ8bXB3E tBAxhb+7YAUV1M4R6bG3CnsspwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMRtuMd uFeCm+SokVfjBPj0rMfZMB8GA1UdIwQYMBaAFCWbA6Wi4eLMxOS9deszbyMRtEQq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdENi8xRTQ2MDkzNDIw QTYxMUYwOUZDMjJBNUFDNEY5QUUwMi9KWnNEcGFMaDRzekU1TDExNnpOdkl4RzBS Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdENi8xRTQ2MDkzNDIwQTYxMUYwOUZDMjJBNUFDNEY5QUUwMi9KWnNEcGFMaDRz ekU1TDExNnpOdkl4RzBSQ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2inbmUbXcTqAPoGluhLXtnGXyNEYnUs1CEmT/WBVj7UvwynMCdbSAN+7diG oun/qVcc9qEUsWcqY74lRpG2D2hyQz61BuAbXU9Fkgr/FziHLZ3whcxcTUWu+t1i TLz3V2o/8imv1Fr4nVUHmXIZ/vae0tMBNsxs84mF/1LeRjGJxEM8w24SrbEsS/M+ BaOCVbYt5eYS6oZnpiZHhAZNARduKM3FwHoiZ/KooVGtrig+FovvGLfo7tuD9Ehm GJRxqfvEziQGivSJq03ugTTmLs40mOH4/eJ1FBbvrZbCxTfIvjbVihWo1rztcEz0 324ETSr096aWIG8UqvNenh/Q+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:57 2026 by rpki-client