$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: ig1jDPLMTejYn21eTzylBnDa6B/yPfgJVM4Pb/NopPY= Subject key identifier: FF:23:54:60:81:22:2C:93:DF:29:4A:D5:9C:0F:ED:4A:76:FC:17:48 Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 12 Signing time: Wed 25 Mar 2026 08:17:36 +0000 Manifest this update: Wed 25 Mar 2026 08:17:35 +0000 Manifest next update: Wed 01 Apr 2026 08:17:35 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: smZCaes4XPcwC6XC5fDP5q4fXUcwlAMHGCZ8DTbrN84=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: Mar 25 08:17:35 2026 GMT Not After : Apr 1 08:17:35 2026 GMT Subject: CN=69c39a20-2efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:e6:06:15:65:56:ab:db:ba:07:4e:1a:f2: b0:9b:71:94:82:ba:58:ec:86:aa:b7:35:0d:47:38: b6:32:1c:4a:95:32:66:72:7e:de:9c:2c:9e:f0:07: 0a:e0:78:b0:4f:d4:69:7c:f0:b4:69:2c:b3:da:18: 33:b7:29:cc:d7:c1:4a:20:16:99:97:97:50:b0:34: fb:0d:7c:95:3e:ee:eb:7a:de:b8:4a:01:2a:7f:5c: b5:5f:f3:5d:b0:06:6f:0c:bf:4b:5a:7d:3f:fb:18: 71:1a:43:41:8f:e7:6d:bf:f4:40:80:91:2f:8a:8d: 03:d0:27:98:2a:fe:f7:01:76:0a:5e:91:9e:44:2c: 46:d5:5e:6e:e7:0e:53:b9:0e:46:d6:a0:e4:d1:6c: e5:4c:da:c4:2c:6f:07:11:1d:91:ba:25:7b:a3:15: d1:f0:f5:cb:05:ce:19:6a:78:1c:8b:11:da:6e:46: fa:af:84:ce:ca:d4:0f:64:ed:f6:3b:f0:45:21:8b: 70:a6:c2:e7:36:3e:99:87:c6:c5:85:9c:fd:49:f8: af:c7:77:39:48:57:cf:e1:1b:b8:60:40:0a:82:fe: f1:8b:cb:39:a8:1f:82:3f:8f:77:ff:cb:b6:96:fb: 4e:90:0a:fb:b0:b0:31:c6:b6:91:47:be:40:22:67: 05:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:54:60:81:22:2C:93:DF:29:4A:D5:9C:0F:ED:4A:76:FC:17:48 X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:01:1c:e1:7e:08:6a:59:11:d5:dc:93:a3:59:32:a5:61:ae: d6:b2:9b:3f:9e:45:54:db:4d:88:49:17:94:b5:39:9d:fa:c6: af:37:6f:7e:4a:8d:b5:3a:16:64:ab:50:e8:13:aa:e9:d7:fc: 01:22:0d:bb:3c:bd:d9:85:29:74:3e:69:ce:ae:23:91:a3:e3: 43:5d:15:e6:22:70:aa:24:c7:c2:e2:0e:bd:82:5e:10:26:40: d0:f9:bb:73:1e:3a:f7:95:96:64:ca:f8:b9:a3:65:08:d4:94: 4d:f9:2e:48:14:ae:9b:3d:2f:03:59:be:ad:40:54:d6:61:7f: ae:ca:9d:84:99:d4:9b:7a:4a:dd:5b:0c:d7:cc:58:32:6b:10: 1f:bb:ee:fc:ec:7a:d1:cc:cb:61:1a:ec:06:76:3e:78:6a:de: f8:29:34:1d:ff:2f:e5:40:ac:c6:72:57:bf:00:53:76:a2:60: 04:d1:ca:c0:cb:03:06:34:b5:0f:57:7f:a6:7b:2f:64:c6:e3: 5b:22:46:00:93:bf:c2:a4:be:f0:11:be:2f:00:bd:c6:f2:c9: b9:87:76:6f:4e:c5:7d:bf:fa:fb:0b:f7:b4:cf:5f:18:54:a8: 47:c4:5a:1f:35:9e:20:4b:0b:d2:85:27:2f:8b:80:4a:2f:9c: 1a:d3:a3:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjAzMjUwODE3MzVaFw0yNjA0MDEwODE3MzVaMBgxFjAUBgNV BAMTDTY5YzM5YTIwLTJlZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdY+YGFWVWq9u6B04a8rCbcZSCuljshqq3NQ1HOLYyHEqVMmZyft6cLJ7wBwrg eLBP1Gl88LRpLLPaGDO3KczXwUogFpmXl1CwNPsNfJU+7ut63rhKASp/XLVf812w Bm8Mv0tafT/7GHEaQ0GP522/9ECAkS+KjQPQJ5gq/vcBdgpekZ5ELEbVXm7nDlO5 DkbWoOTRbOVM2sQsbwcRHZG6JXujFdHw9csFzhlqeByLEdpuRvqvhM7K1A9k7fY7 8EUhi3Cmwuc2PpmHxsWFnP1J+K/HdzlIV8/hG7hgQAqC/vGLyzmoH4I/j3f/y7aW +06QCvuwsDHGtpFHvkAiZwUNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/yNUYIEi LJPfKUrVnA/tSnb8F0gwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWARzhfghqWRHV3JOjWTKlYa7Wsps/nkVU202ISReUtTmd+savN29+So21OhZk q1DoE6rp1/wBIg27PL3ZhSl0PmnOriORo+NDXRXmInCqJMfC4g69gl4QJkDQ+btz Hjr3lZZkyvi5o2UI1JRN+S5IFK6bPS8DWb6tQFTWYX+uyp2EmdSbekrdWwzXzFgy axAfu+787HrRzMthGuwGdj54at74KTQd/y/lQKzGcle/AFN2omAE0crAywMGNLUP V3+mey9kxuNbIkYAk7/CpL7wEb4vAL3G8sm5h3ZvTsV9v/r7C/e0z18YVKhHxFof NZ4gSwvShScvi4BKL5wa06M/ -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:06 2026 by rpki-client