$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: tsPOtqtmvFoYbUoacS9CW227z+SUZk4JPQ08Ium2BCk= Subject key identifier: BD:BD:2E:87:54:D0:7F:EB:99:52:A5:43:CD:83:FF:3E:8D:34:89:EE Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0D04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0CFA Signing time: Thu 26 Mar 2026 18:04:07 +0000 Manifest this update: Thu 26 Mar 2026 18:04:07 +0000 Manifest next update: Thu 02 Apr 2026 18:04:07 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: p26KUHRDGknAb90gHLY0lTuB5xfoWphcx2wl47L1yyU=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: CRSEbG93yP/OLxFWNQlVZkdk1+UwwnU68vGA6YSFBzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Mar 26 18:04:07 2026 GMT Not After : Apr 2 18:04:07 2026 GMT Subject: CN=69c57517-86a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:59:8c:0b:e8:76:cc:d4:54:36:93:b3:08: 40:5a:39:bc:03:47:73:4f:9a:9b:44:51:51:c6:e2: 0e:54:1f:16:1a:bc:d3:45:7b:b7:78:6d:b9:2f:4c: 8e:6c:85:e0:b0:12:5c:7c:53:18:d0:0a:fb:70:d6: 48:cf:da:99:4f:35:73:f5:6e:35:fb:e5:f7:05:86: 88:80:cf:45:2b:15:60:27:30:98:c2:ea:e7:d3:5f: ab:66:ec:05:9f:19:2c:9f:61:ee:20:7b:39:05:cf: fc:93:c7:9b:55:eb:15:86:c5:88:13:59:27:fc:a0: 81:c4:55:dd:98:d0:d4:ee:f3:37:63:cf:0a:00:87: 28:36:4c:bd:50:ad:c2:1f:38:f6:f3:32:10:fe:d2: 7f:02:81:82:b7:2a:8f:02:c6:a8:03:5c:fa:ed:78: ff:d4:10:12:06:4b:00:1a:51:6e:a3:5b:6b:26:50: e0:aa:d6:90:2c:52:ac:79:48:11:dc:a2:f0:ab:10: 6b:84:99:f1:a5:3c:d1:3a:15:92:1b:80:25:8d:9e: e1:11:fb:e4:68:32:f4:81:77:91:eb:ea:ae:93:4f: 0b:a6:0f:0f:7c:fb:67:dd:5d:40:af:cd:f1:56:0d: c4:9b:5b:fe:10:dd:1d:8e:66:74:4a:b1:51:a9:1d: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BD:2E:87:54:D0:7F:EB:99:52:A5:43:CD:83:FF:3E:8D:34:89:EE X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:67:f3:1e:d0:64:1f:5c:50:f5:5a:8e:4d:37:1d:86:f5:49: 92:99:ef:34:39:c7:c5:5c:f3:35:21:dc:be:b3:4d:3c:8f:f1: 3c:fe:dd:e7:1a:1d:e7:68:d4:a0:f1:68:8a:0b:61:d9:89:fd: 38:a1:12:ec:74:5d:e4:c6:ff:dc:c6:e8:c1:e2:f4:e1:ca:ea: c3:cb:f3:f1:a3:f6:93:c5:04:7b:99:72:f0:b5:69:95:df:38: 1c:e4:59:63:ba:3a:4a:d6:41:7f:40:29:43:e9:b4:31:40:3d: 5f:84:5a:c0:4d:31:ae:21:9a:5b:30:56:c6:fa:e5:28:93:0a: a1:56:78:ad:37:92:18:85:a8:75:49:95:00:2f:a6:86:27:80: 21:65:85:2f:d9:4e:ff:8e:6c:e2:15:1d:34:e2:cd:05:6c:bb: f0:b7:c5:b5:7f:75:25:17:83:25:e7:1e:40:25:da:d0:8a:91: 1b:27:01:d4:ef:21:aa:27:d6:13:f4:d2:96:ff:a3:84:23:fe: ad:82:01:97:30:88:0b:c9:f4:b1:5b:a8:85:fb:c7:33:56:49: c5:a0:84:35:cb:88:cd:26:ba:0f:1a:e6:34:cd:e3:97:53:3f: 14:0b:63:ec:61:90:a9:e3:47:a5:55:69:98:d4:1f:24:8e:af: 83:1c:2a:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjYwMzI2MTgwNDA3WhcNMjYwNDAyMTgwNDA3WjAYMRYwFAYD VQQDEw02OWM1NzUxNy04NmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CBZjAvodszUVDaTswhAWjm8A0dzT5qbRFFRxuIOVB8WGrzTRXu3eG25L0yO bIXgsBJcfFMY0Ar7cNZIz9qZTzVz9W41++X3BYaIgM9FKxVgJzCYwurn01+rZuwF nxksn2HuIHs5Bc/8k8ebVesVhsWIE1kn/KCBxFXdmNDU7vM3Y88KAIcoNky9UK3C Hzj28zIQ/tJ/AoGCtyqPAsaoA1z67Xj/1BASBksAGlFuo1trJlDgqtaQLFKseUgR 3KLwqxBrhJnxpTzROhWSG4AljZ7hEfvkaDL0gXeR6+quk08Lpg8PfPtn3V1Ar83x Vg3Em1v+EN0djmZ0SrFRqR1QSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL29LodU 0H/rmVKlQ82D/z6NNInuMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf2fzHtBkH1xQ9VqOTTcdhvVJkpnvNDnHxVzzNSHcvrNNPI/xPP7d5xod52jU oPFoigth2Yn9OKES7HRd5Mb/3MboweL04crqw8vz8aP2k8UEe5ly8LVpld84HORZ Y7o6StZBf0ApQ+m0MUA9X4RawE0xriGaWzBWxvrlKJMKoVZ4rTeSGIWodUmVAC+m hieAIWWFL9lO/45s4hUdNOLNBWy78LfFtX91JReDJeceQCXa0IqRGycB1O8hqifW E/TSlv+jhCP+rYIBlzCIC8n0sVuohfvHM1ZJxaCENcuIzSa6DxrmNM3jl1M/FAtj 7GGQqeNHpVVpmNQfJI6vgxwq0w== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:31 2026 by rpki-client