$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: twE9kNqhJezDhMxztGd4c1DUFaGDxkpQ8yLq8qBH/nw= Subject key identifier: 72:76:A5:6E:70:CF:70:66:D9:A9:5F:90:D6:10:04:BD:A5:BE:45:54 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 010B Signing time: Wed 25 Mar 2026 05:13:11 +0000 Manifest this update: Wed 25 Mar 2026 05:13:11 +0000 Manifest next update: Wed 01 Apr 2026 05:13:11 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: f9LdpzFQKqRpEaZ/zrd6PJ8tnH4BaDVIsBaxW3SAVic=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Mar 25 05:13:11 2026 GMT Not After : Apr 1 05:13:11 2026 GMT Subject: CN=69c36ee7-3693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:be:6f:d0:dd:47:44:5e:a8:5f:c7:61:b1: 41:97:79:8a:c5:83:ef:12:43:e9:bc:b9:83:d9:f4: fa:88:d8:19:e0:1e:17:ec:b4:62:02:d3:d2:5c:85: 99:88:ae:9f:e5:0c:29:e7:38:8a:19:28:10:c6:1f: e0:68:6f:c7:b2:25:d3:31:97:aa:1c:50:c4:a1:61: 08:72:91:cc:e7:02:64:18:b9:3e:4e:30:5f:0a:ba: 44:91:c6:ba:6d:7c:0a:4d:c4:cb:5c:22:40:f4:32: 98:7e:29:c4:96:a1:fb:08:43:b8:a7:9f:bc:31:75: 33:2f:ed:9a:e8:b8:c7:fb:20:0e:36:54:53:f2:3a: ec:eb:ae:bb:dc:a3:cc:f8:e1:b1:c1:ef:bf:3c:de: 3b:e8:42:8d:a0:53:dc:26:f4:f2:5b:8e:d9:d3:41: ee:1a:f7:03:73:a8:b6:bc:25:ad:0e:2b:00:ed:d7: 58:64:ec:e4:33:8e:e6:7d:5d:e8:6c:d9:8e:35:01: b2:d1:3e:53:88:d3:22:52:ca:a3:d7:cf:f8:f3:a8: 7e:f0:8e:05:91:e6:f9:e5:15:a4:58:a4:65:f0:5b: 70:32:81:c7:00:2d:96:e2:51:ef:9d:7f:7e:5b:89: d8:de:3c:59:0b:c8:41:77:ea:3d:79:fa:33:36:0a: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:A5:6E:70:CF:70:66:D9:A9:5F:90:D6:10:04:BD:A5:BE:45:54 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7d:07:ff:8d:89:dd:b2:65:7a:42:a6:07:4e:f8:92:90:2a: 82:cc:d8:d0:8e:c0:09:22:87:71:07:6a:98:82:d4:f9:67:35: 20:78:f9:39:75:ab:ed:6e:18:4f:3c:39:6c:b0:25:0e:12:6d: f2:7e:a2:02:0e:8e:3a:f2:cd:28:7f:8a:ae:51:cc:e7:27:05: a9:58:56:ca:46:e1:dd:ae:66:a7:4b:6b:26:80:a6:a8:91:61: 5b:9e:74:0c:57:51:be:46:f8:b7:32:29:cc:f5:13:a6:a0:52: 1d:fb:31:95:5e:aa:ce:2e:8a:b5:b0:10:ef:fd:eb:59:e4:5e: 6e:39:9e:55:22:2b:2f:e2:cd:90:45:1a:5d:4f:bf:24:56:83: b4:a7:d5:00:eb:71:30:20:2b:8c:a1:96:4d:82:cb:ed:a9:e5: 8f:36:24:71:54:d6:5b:d9:5c:66:35:60:6b:ce:dd:06:88:3b: b5:f1:58:ea:51:0c:2c:18:51:ab:2b:35:cb:82:d9:dd:48:7e: 42:6f:ba:22:13:76:5f:d1:e5:61:b6:be:e5:89:da:a3:16:a2: 48:db:46:b6:4c:2b:3a:eb:f8:fe:db:2c:9d:db:15:16:77:ba: 1a:ff:54:67:5b:30:36:67:78:3b:a3:9c:38:68:68:2a:e4:67: e1:d9:e5:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjYwMzI1MDUxMzExWhcNMjYwNDAxMDUxMzExWjAYMRYwFAYD VQQDEw02OWMzNmVlNy0zNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Fi+b9DdR0ReqF/HYbFBl3mKxYPvEkPpvLmD2fT6iNgZ4B4X7LRiAtPSXIWZ iK6f5Qwp5ziKGSgQxh/gaG/HsiXTMZeqHFDEoWEIcpHM5wJkGLk+TjBfCrpEkca6 bXwKTcTLXCJA9DKYfinElqH7CEO4p5+8MXUzL+2a6LjH+yAONlRT8jrs66673KPM +OGxwe+/PN476EKNoFPcJvTyW47Z00HuGvcDc6i2vCWtDisA7ddYZOzkM47mfV3o bNmONQGy0T5TiNMiUsqj18/486h+8I4Fkeb55RWkWKRl8FtwMoHHAC2W4lHvnX9+ W4nY3jxZC8hBd+o9efozNgoTtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJ2pW5w z3Bm2alfkNYQBL2lvkVUMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZX0H/42J3bJlekKmB074kpAqgszY0I7ACSKHcQdqmILU+Wc1IHj5OXWr7W4Y Tzw5bLAlDhJt8n6iAg6OOvLNKH+KrlHM5ycFqVhWykbh3a5mp0trJoCmqJFhW550 DFdRvkb4tzIpzPUTpqBSHfsxlV6qzi6KtbAQ7/3rWeRebjmeVSIrL+LNkEUaXU+/ JFaDtKfVAOtxMCArjKGWTYLL7anljzYkcVTWW9lcZjVga87dBog7tfFY6lEMLBhR qys1y4LZ3Uh+Qm+6IhN2X9HlYba+5YnaoxaiSNtGtkwrOuv4/tssndsVFne6Gv9U Z1swNmd4O6OcOGhoKuRn4dnlOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:29 2026 by rpki-client