$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: Lsq2XxwqHTSn5i3dAdI7uydRzdjbPKGPr5S9w1KvGN4= Subject key identifier: 33:FD:35:F2:F6:14:B1:E7:52:6E:17:D7:5A:B9:15:E8:EF:CE:21:4D Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 0719 Signing time: Tue 24 Mar 2026 21:33:50 +0000 Manifest this update: Tue 24 Mar 2026 21:33:50 +0000 Manifest next update: Tue 31 Mar 2026 21:33:50 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: RSIOSExWNyL5MY0utxTn2Vbhct6ohk7TaKZXOV1mwm4=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 5p6KcnLc05tJjviw0bQLNNvRQf/lT9uBBLbX63CSm5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Mar 24 21:33:50 2026 GMT Not After : Mar 31 21:33:50 2026 GMT Subject: CN=69c3033e-7aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:b6:4b:19:ea:e5:93:2c:73:d7:65:af:dd: 8e:96:70:70:14:be:da:ae:5f:87:a1:d3:45:f5:cc: b7:18:fc:15:23:f1:69:17:ad:ce:b0:13:dc:aa:bf: af:14:32:89:9b:6f:7c:cf:80:c5:c9:8b:cf:97:1f: ca:10:2e:c8:d6:df:4a:70:76:8b:1b:12:6a:bf:a1: ae:06:3a:a5:2a:20:34:07:86:79:f5:72:01:8b:81: 61:f7:d3:c1:11:54:bd:15:29:c0:de:7b:0e:43:60: 37:12:93:6b:0f:82:58:0a:a0:bc:9e:0c:42:1e:9f: cf:f8:75:6c:77:cb:5f:23:f7:9e:97:ee:9a:9b:6f: 87:02:41:88:35:a4:9a:07:71:37:3c:4f:cc:20:9a: 7a:4a:a7:33:e2:29:87:5d:48:99:bb:c7:b3:89:73: f1:7d:3b:dd:96:31:7a:44:95:da:cb:0e:dd:a9:e1: 94:4c:32:08:39:e3:bb:f9:4f:19:29:d5:04:37:7f: d6:8e:16:ab:4e:65:08:3d:16:12:85:44:7d:b1:b1: fd:6c:f6:ac:aa:fd:15:45:15:0c:be:f7:d1:88:78: b0:48:5b:1f:5d:43:75:8b:f9:e8:76:94:63:76:de: d3:d5:b5:9e:be:85:cb:58:5a:b3:16:b3:a3:a5:7f: d5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:35:F2:F6:14:B1:E7:52:6E:17:D7:5A:B9:15:E8:EF:CE:21:4D X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:7c:2d:2e:b8:67:a8:eb:9f:2c:a1:26:ac:dd:b7:c3:61:68: 1f:33:bd:b4:a9:9a:53:2b:6d:f8:c0:09:f6:c6:16:72:d1:fc: eb:0c:b5:c0:d1:30:2c:fe:74:a1:37:01:aa:62:f3:7d:31:6f: 3b:9b:75:6d:1a:fd:a1:07:23:b6:6f:d6:6a:a9:68:0b:1f:3c: 1a:74:c9:c2:bd:c7:e5:31:9f:55:38:cf:91:6d:94:fc:1b:46: 85:5e:25:1c:c9:ac:66:d9:f2:66:b2:37:24:58:56:6c:97:35: f3:16:42:a6:54:67:08:f7:41:8b:ad:7f:e8:b7:1c:c6:65:00: fa:c7:86:82:91:6c:9c:86:2c:fa:d3:ff:7b:8d:9e:33:6d:7f: eb:1d:db:c8:8d:3a:49:26:00:ed:a8:7a:09:2f:bc:d5:cb:81: 5d:70:65:85:8a:21:ca:90:cf:39:b3:0c:0f:5b:7f:b9:1b:13: 80:b6:e6:34:bc:67:58:da:d2:d0:35:e6:9c:66:21:b5:72:41: 4a:e4:4c:f2:53:1f:dc:07:1e:06:21:54:5b:7a:5a:1f:5d:a1: 81:6d:21:50:9f:99:8b:1c:b1:35:1e:9f:a8:b7:91:b8:6e:e5: b8:9c:dd:38:31:aa:67:3a:bf:6e:ce:77:00:a6:3d:73:2a:2a: d4:5d:ed:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjYwMzI0MjEzMzUwWhcNMjYwMzMxMjEzMzUwWjAYMRYwFAYD VQQDEw02OWMzMDMzZS03YWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssm2Sxnq5ZMsc9dlr92OlnBwFL7arl+HodNF9cy3GPwVI/FpF63OsBPcqr+v FDKJm298z4DFyYvPlx/KEC7I1t9KcHaLGxJqv6GuBjqlKiA0B4Z59XIBi4Fh99PB EVS9FSnA3nsOQ2A3EpNrD4JYCqC8ngxCHp/P+HVsd8tfI/eel+6am2+HAkGINaSa B3E3PE/MIJp6Sqcz4imHXUiZu8eziXPxfTvdljF6RJXayw7dqeGUTDIIOeO7+U8Z KdUEN3/WjharTmUIPRYShUR9sbH9bPasqv0VRRUMvvfRiHiwSFsfXUN1i/nodpRj dt7T1bWevoXLWFqzFrOjpX/VhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP9NfL2 FLHnUm4X11q5FejvziFNMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY3wtLrhnqOufLKEmrN23w2FoHzO9tKmaUytt+MAJ9sYWctH86wy1wNEwLP50 oTcBqmLzfTFvO5t1bRr9oQcjtm/WaqloCx88GnTJwr3H5TGfVTjPkW2U/BtGhV4l HMmsZtnyZrI3JFhWbJc18xZCplRnCPdBi61/6LccxmUA+seGgpFsnIYs+tP/e42e M21/6x3byI06SSYA7ah6CS+81cuBXXBlhYohypDPObMMD1t/uRsTgLbmNLxnWNrS 0DXmnGYhtXJBSuRM8lMf3AceBiFUW3paH12hgW0hUJ+ZixyxNR6fqLeRuG7luJzd ODGqZzq/bs53AKY9cyoq1F3taQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:01 2026 by rpki-client