$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: p5n99TBCy2wuNChTgbghuXvJZeL72UnanM56cn7PKVI= Subject key identifier: DB:48:EC:01:EC:80:2D:AC:CF:13:71:45:76:B8:F2:BF:C7:09:61:98 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 0487 Signing time: Tue 24 Mar 2026 23:42:13 +0000 Manifest this update: Tue 24 Mar 2026 23:42:12 +0000 Manifest next update: Tue 31 Mar 2026 23:42:12 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: 0/jQPCyNuNw2p9WzT2fImFwx60IYEe81MnV0Y7G6Moc=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: mv8SkF1WEmPfxfUOYkEgTcu3fJnOUzVytUPnzBIsTmQ=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: nqloee83mYK4LAUWoWj3kE85J21wVy7rJGLqi69BeH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Mar 24 23:42:12 2026 GMT Not After : Mar 31 23:42:12 2026 GMT Subject: CN=69c32155-1bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4c:bd:92:d1:9e:18:8c:a4:e6:fa:bb:eb:40: ca:3b:07:0a:7c:96:ab:4e:c9:f1:7a:39:e2:88:65: 9c:e1:c6:91:cd:e8:f8:a0:88:a9:61:62:90:5f:5d: 09:52:3c:b4:3e:66:f7:2c:74:37:66:93:eb:24:dd: 8c:5d:b2:36:3c:02:9e:55:0a:47:23:0c:c4:6c:b9: d4:ce:bf:1a:db:89:7d:e0:1c:2e:db:31:65:55:68: c0:e3:9a:e2:b1:cc:aa:22:65:e9:26:3f:25:f2:34: c5:9b:38:73:c3:2e:e8:d0:e0:79:19:b6:74:ac:4d: a9:0c:f6:8f:93:16:6e:d9:0d:3c:8f:56:06:a6:0e: c5:fe:50:a2:38:33:6d:12:a4:52:1c:32:68:38:81: c6:31:66:65:80:a0:ba:2a:3b:5b:b8:2e:75:7e:07: ef:fe:70:5d:1a:74:c0:8b:81:0f:34:67:f7:84:77: e2:a3:67:51:af:66:e9:cc:b0:98:f8:0c:8c:e3:16: b5:46:7e:1a:fe:41:a3:fe:0e:38:0d:4d:3e:4f:0c: e5:f8:e1:9e:4c:90:1b:ca:61:39:30:71:52:3c:d8: a0:9e:5f:cb:e8:6c:fb:9a:65:83:ff:8d:65:69:26: 1d:48:e5:f4:44:cb:0f:25:aa:ff:9e:1a:35:78:04: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:EC:01:EC:80:2D:AC:CF:13:71:45:76:B8:F2:BF:C7:09:61:98 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:bf:80:cb:2c:da:b5:fd:95:85:27:1c:e0:5f:e2:6b:03:0e: 89:7b:fc:e2:f5:08:d2:a0:75:76:de:ba:8a:1b:41:bf:45:02: a9:90:5f:63:d9:9f:2a:ab:d9:4f:80:83:18:67:96:a2:b4:37: a3:60:7e:a8:0c:9a:31:c1:21:25:43:34:b9:17:54:0f:f3:45: 14:ca:17:7d:c9:37:61:70:6e:8e:cd:48:96:24:16:76:4a:37: 37:b9:69:b5:9e:73:16:4f:39:49:1e:89:6b:96:10:70:70:72: 2d:10:66:e5:54:d1:eb:9c:f2:e5:76:1b:e3:8a:b1:c1:85:9c: ea:a4:fb:7b:e1:11:d5:ca:11:9c:62:b8:1a:99:ef:81:de:60: 93:8e:c5:f2:6e:6b:ba:8c:24:e7:f4:39:ac:04:6a:56:c3:db: 2d:1c:33:92:83:37:05:7b:7a:62:00:d4:4f:5a:01:d1:41:dc: 41:df:7f:e0:d9:e3:01:15:ef:b5:9c:a8:2e:b8:9b:be:63:71: 8b:a5:70:4f:90:d3:94:33:bf:87:b6:92:8d:c9:ef:47:ee:17: b3:b5:d6:7d:53:b5:09:21:5d:fb:8a:85:e1:2a:e4:0c:2f:62: 40:c4:1a:a7:50:e9:ee:58:d7:30:33:5c:c6:66:b4:9a:6f:a7: 36:0a:57:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjYwMzI0MjM0MjEyWhcNMjYwMzMxMjM0MjEyWjAYMRYwFAYD VQQDEw02OWMzMjE1NS0xYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA90y9ktGeGIyk5vq760DKOwcKfJarTsnxejniiGWc4caRzej4oIipYWKQX10J Ujy0Pmb3LHQ3ZpPrJN2MXbI2PAKeVQpHIwzEbLnUzr8a24l94Bwu2zFlVWjA45ri scyqImXpJj8l8jTFmzhzwy7o0OB5GbZ0rE2pDPaPkxZu2Q08j1YGpg7F/lCiODNt EqRSHDJoOIHGMWZlgKC6KjtbuC51fgfv/nBdGnTAi4EPNGf3hHfio2dRr2bpzLCY +AyM4xa1Rn4a/kGj/g44DU0+Twzl+OGeTJAbymE5MHFSPNignl/L6Gz7mmWD/41l aSYdSOX0RMsPJar/nho1eAS7fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtI7AHs gC2szxNxRXa48r/HCWGYMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt7+Ayyzatf2VhScc4F/iawMOiXv84vUI0qB1dt66ihtBv0UCqZBfY9mfKqvZ T4CDGGeWorQ3o2B+qAyaMcEhJUM0uRdUD/NFFMoXfck3YXBujs1IliQWdko3N7lp tZ5zFk85SR6Ja5YQcHByLRBm5VTR65zy5XYb44qxwYWc6qT7e+ER1coRnGK4Gpnv gd5gk47F8m5ruowk5/Q5rARqVsPbLRwzkoM3BXt6YgDUT1oB0UHcQd9/4NnjARXv tZyoLribvmNxi6VwT5DTlDO/h7aSjcnvR+4Xs7XWfVO1CSFd+4qF4SrkDC9iQMQa p1Dp7ljXMDNcxma0mm+nNgpXWg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:25 2026 by rpki-client