$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: 2wMWlA3YsrQQSPdJvwAM+tPvHnMtmT5xuZ0QEoychvk= Subject key identifier: B5:76:26:FE:02:98:96:DD:67:08:24:5B:EF:29:71:8B:F6:C6:51:03 Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: D5 Signing time: Wed 25 Mar 2026 05:58:15 +0000 Manifest this update: Wed 25 Mar 2026 05:58:15 +0000 Manifest next update: Wed 01 Apr 2026 05:58:15 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: tgorEdZed766X/nfd7cqYTkpx9R9SAnAdJY+X3GlzvM=) 2: 7F639A182CB011F08B722116C4F9AE02.roa (hash: jw0OlOADXVlEE4I0cP+j9CVDdilfXWfPDRrYPS66FZw=) 3: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: SZZXZtv9x+ZJ89heiQVizmtDvpK3qMjrqCOCy4opKQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: Mar 25 05:58:15 2026 GMT Not After : Apr 1 05:58:15 2026 GMT Subject: CN=69c37977-e4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:ec:f0:07:0c:29:a0:30:86:e7:20:8b:d0: c4:ff:52:08:31:cf:0c:a8:fb:dc:a8:71:cd:0f:2f: a9:fd:33:20:ab:24:ab:a6:39:89:aa:ed:79:d1:8a: 6b:9e:e7:bf:b3:ca:38:8f:c4:d2:48:9a:10:9c:54: 75:74:25:47:8e:16:69:9f:f2:85:38:eb:47:7b:46: b2:6f:81:4f:4a:34:dd:0d:b1:01:76:ce:2e:84:2a: 90:23:7d:ff:0b:1e:b4:1f:99:cd:39:a2:d3:31:8f: 17:fb:9e:29:b7:bf:2f:ea:76:95:3d:26:ba:79:63: 24:95:b4:58:b8:7d:62:12:1b:04:87:e8:1b:4e:2a: 55:41:8c:63:d6:7c:ff:29:7b:47:81:b2:80:e2:2a: 19:49:40:c0:eb:f1:40:33:a5:31:d4:f2:ae:7c:c4: d4:f2:90:d4:a0:f6:c3:27:59:d7:df:5f:4b:af:70: 0f:ae:47:4c:2d:72:d7:e2:74:7f:1e:e4:54:b0:5e: 57:8b:33:6c:c6:86:50:76:ab:76:c7:38:02:d4:87: 43:ef:c2:72:94:2e:b0:22:ee:8f:ad:c5:80:9c:6d: 04:43:f4:f8:bb:74:eb:29:03:f0:c8:04:46:b5:73: cc:e9:76:07:05:52:fa:f3:24:53:9e:4f:9f:ef:b1: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:76:26:FE:02:98:96:DD:67:08:24:5B:EF:29:71:8B:F6:C6:51:03 X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ba:83:2b:e2:e7:83:2a:06:71:4f:6d:b8:9e:7d:04:8a:ef: 82:76:c8:18:75:b4:94:91:b5:17:aa:15:b9:63:21:22:4d:a8: b2:45:d7:31:b4:e4:98:69:ff:d1:3c:4d:85:0f:37:d1:f6:4f: 8e:ca:91:8d:6f:39:3c:c5:db:12:12:d9:e0:67:19:dc:6a:df: f2:78:4a:d0:6e:2d:1c:b5:47:e8:c5:7f:1e:e1:b3:ec:b4:67: bb:1a:a0:bc:5e:9d:b8:c8:93:12:58:74:bd:78:41:e8:7d:b8: 8c:22:56:4f:09:f0:d8:8c:f2:11:c4:d8:07:4c:66:55:f0:22: 73:34:36:82:e0:5c:fb:a6:d5:14:14:15:34:a5:36:ce:f1:c8: db:1d:f7:a9:4d:f1:f6:45:0f:67:74:84:89:4e:44:5a:2b:cb: 19:69:b9:bd:e0:09:b5:b8:7e:66:14:62:eb:6c:01:fd:fa:d1: a4:a4:2c:aa:ed:42:02:ae:61:ab:e5:2a:cb:4b:90:e4:62:54: e7:ef:68:63:8d:f5:03:bd:25:4c:58:e7:75:9c:60:8c:5d:f7: 97:e9:eb:d6:e1:dc:64:86:d1:39:a6:d6:d4:c1:cd:4e:22:44: 6f:2d:b2:fc:1a:67:1f:1f:24:6f:2a:1d:0d:83:8c:ad:1a:6f: c2:76:7b:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3 NUVBRTZEMjkwHhcNMjYwMzI1MDU1ODE1WhcNMjYwNDAxMDU1ODE1WjAYMRYwFAYD VQQDEw02OWMzNzk3Ny1lNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCjs8AcMKaAwhucgi9DE/1IIMc8MqPvcqHHNDy+p/TMgqySrpjmJqu150Ypr nue/s8o4j8TSSJoQnFR1dCVHjhZpn/KFOOtHe0ayb4FPSjTdDbEBds4uhCqQI33/ Cx60H5nNOaLTMY8X+54pt78v6naVPSa6eWMklbRYuH1iEhsEh+gbTipVQYxj1nz/ KXtHgbKA4ioZSUDA6/FAM6Ux1PKufMTU8pDUoPbDJ1nX319Lr3APrkdMLXLX4nR/ HuRUsF5XizNsxoZQdqt2xzgC1IdD78JylC6wIu6PrcWAnG0EQ/T4u3TrKQPwyARG tXPM6XYHBVL68yRTnk+f77HQUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLV2Jv4C mJbdZwgkW+8pcYv2xlEDMB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5 UlRjcWpqczJnMHgxNnViU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC7qDK+LngyoGcU9tuJ59BIrvgnbIGHW0lJG1F6oVuWMhIk2oskXXMbTkmGn/ 0TxNhQ830fZPjsqRjW85PMXbEhLZ4GcZ3Grf8nhK0G4tHLVH6MV/HuGz7LRnuxqg vF6duMiTElh0vXhB6H24jCJWTwnw2IzyEcTYB0xmVfAiczQ2guBc+6bVFBQVNKU2 zvHI2x33qU3x9kUPZ3SEiU5EWivLGWm5veAJtbh+ZhRi62wB/frRpKQsqu1CAq5h q+Uqy0uQ5GJU5+9oY431A70lTFjndZxgjF33l+nr1uHcZIbROabW1MHNTiJEby2y /BpnHx8kbyodDYOMrRpvwnZ7yQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:27 2026 by rpki-client