$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: 5PyhZTxR2uMtuq2ZT8bTyWIMa7euLPcwJ72WNnmQcsU= Subject key identifier: 88:E9:63:C4:2A:E4:0B:C2:29:B2:B0:15:86:64:F1:93:40:89:80:C3 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 09CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 09B8 Signing time: Tue 24 Mar 2026 19:44:15 +0000 Manifest this update: Tue 24 Mar 2026 19:44:15 +0000 Manifest next update: Tue 31 Mar 2026 19:44:15 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: Nk9BS1JLR6eJBEPECWTbWJghe9chVbs5CXHBPQ59lsQ=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2510 (0x9ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Mar 24 19:44:15 2026 GMT Not After : Mar 31 19:44:15 2026 GMT Subject: CN=69c2e98f-180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:f9:a5:ae:44:c4:f8:67:74:10:d6:c1:f9: 63:19:22:dd:a4:d2:b9:5c:c4:ed:f7:b5:68:fe:9e: 67:3c:22:ff:56:d5:97:8b:2f:93:62:11:4a:e9:5b: b6:9d:bf:16:90:6a:5b:ac:64:a2:52:f1:a0:62:25: 93:92:88:64:39:12:59:87:64:da:e7:97:f4:d0:bc: d5:f5:e7:a3:f3:96:13:0c:80:fa:83:c9:49:00:aa: 5e:4f:9d:d6:59:1a:f9:52:bb:58:cf:76:2a:6f:c4: 16:ba:75:c9:bd:06:c2:49:7c:f2:23:89:63:f6:89: ec:61:67:99:74:44:8d:b4:ec:16:5c:e1:05:70:e3: 20:00:27:2b:49:3f:d3:c9:25:0d:2b:3a:d4:e5:ac: 69:9a:38:87:17:1b:0b:46:73:96:c1:15:c2:da:61: 48:0a:b3:cf:99:44:40:9d:9b:4d:41:61:bc:bf:16: 66:cd:54:7b:0d:00:a0:c9:02:8f:35:dc:d9:e2:4b: c7:4d:d7:93:bc:ef:c7:4c:87:7c:5b:61:62:f1:1a: c6:98:4d:35:f1:b8:b4:c0:44:14:b3:a3:5f:1a:cc: ff:31:96:b8:54:ec:d3:c2:98:20:b6:64:26:84:fe: 1d:6b:c8:ee:84:1f:7e:a9:f2:ac:a5:43:d9:92:90: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:63:C4:2A:E4:0B:C2:29:B2:B0:15:86:64:F1:93:40:89:80:C3 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:93:bd:45:43:bf:e5:ab:29:24:89:a0:1e:8c:29:02:d2:88: 51:bc:d8:51:48:d3:15:ae:4a:1c:d0:93:cc:f2:98:22:6a:5c: 72:b2:0d:da:8a:26:d2:2b:36:e9:d9:1a:fc:42:26:10:ec:4e: f0:2b:fe:ea:6c:7a:ea:71:ec:b1:bd:0b:a5:ee:a6:27:73:2b: 5e:61:b8:1d:db:29:77:62:f7:90:60:99:38:9a:a6:01:0e:8b: 35:b8:79:02:c9:05:b8:0c:f7:fd:34:34:f5:9b:c2:c4:cb:be: 6c:22:ec:78:f1:6f:a1:9f:d0:6a:e9:52:34:0c:e1:9c:63:ff: 04:72:5a:6e:c9:f4:86:2c:8a:8d:e2:cf:a9:69:44:47:0e:f1: 8d:13:fd:f1:75:c5:03:7b:76:34:2a:17:87:d1:c5:7e:d3:cf: 48:2f:97:13:59:54:21:28:67:52:b7:00:d4:ce:b9:5c:17:e3: 2d:b2:41:80:30:8c:8d:04:d3:61:71:c1:76:75:0d:6d:f8:58: 84:40:93:29:e9:a3:11:18:67:66:0e:39:cf:08:97:b6:11:12: 93:c2:36:e8:5e:f4:66:aa:c0:f9:f8:66:76:6c:7e:2d:ea:90: 02:f5:b4:50:f4:f0:d6:a6:8b:c9:69:f0:1f:34:b8:d5:1b:b4: 5b:9b:a0:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjYwMzI0MTk0NDE1WhcNMjYwMzMxMTk0NDE1WjAYMRYwFAYD VQQDEw02OWMyZTk4Zi0xODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNH5pa5ExPhndBDWwfljGSLdpNK5XMTt97Vo/p5nPCL/VtWXiy+TYhFK6Vu2 nb8WkGpbrGSiUvGgYiWTkohkORJZh2Ta55f00LzV9eej85YTDID6g8lJAKpeT53W WRr5UrtYz3Yqb8QWunXJvQbCSXzyI4lj9onsYWeZdESNtOwWXOEFcOMgACcrST/T ySUNKzrU5axpmjiHFxsLRnOWwRXC2mFICrPPmURAnZtNQWG8vxZmzVR7DQCgyQKP NdzZ4kvHTdeTvO/HTId8W2Fi8RrGmE018bi0wEQUs6NfGsz/MZa4VOzTwpggtmQm hP4da8juhB9+qfKspUPZkpCRCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjpY8Qq 5AvCKbKwFYZk8ZNAiYDDMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlpO9RUO/5aspJImgHowpAtKIUbzYUUjTFa5KHNCTzPKYImpccrIN2oom0is2 6dka/EImEOxO8Cv+6mx66nHssb0Lpe6mJ3MrXmG4Hdspd2L3kGCZOJqmAQ6LNbh5 AskFuAz3/TQ09ZvCxMu+bCLsePFvoZ/QaulSNAzhnGP/BHJabsn0hiyKjeLPqWlE Rw7xjRP98XXFA3t2NCoXh9HFftPPSC+XE1lUIShnUrcA1M65XBfjLbJBgDCMjQTT YXHBdnUNbfhYhECTKemjERhnZg45zwiXthESk8I26F70ZqrA+fhmdmx+LeqQAvW0 UPTw1qaLyWnwHzS41Ru0W5ugtg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:21 2026 by rpki-client