$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: 8rd1WqhmBA2+Qu8+7VYUSNES2H+rsAYp1BjKHr0NJY4= Subject key identifier: A2:38:74:5B:DA:E5:0E:D9:A1:D7:20:8B:9D:2C:71:58:F5:06:1C:E8 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 202E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1FDA Signing time: Tue 24 Mar 2026 15:56:05 +0000 Manifest this update: Tue 24 Mar 2026 15:56:05 +0000 Manifest next update: Tue 31 Mar 2026 15:56:05 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: epSOO0AYT5xs0G9C+vqPUOB3cSnX8qHRq1DiA+6CZO8=) 2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ZyrkgOdS2CMVpPMVwiikQSmBmkf/Q62a7PKdJPSjlLw=) 3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: j6Fn0yl9QruB/L8VIjM7Cvrv8dXDeLRII1Kg9BFfdqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8238 (0x202e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Mar 24 15:56:05 2026 GMT Not After : Mar 31 15:56:05 2026 GMT Subject: CN=69c2b415-9064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:58:0c:2d:d2:9c:c9:fd:a3:bf:98:93:a9: 42:28:ec:ca:b1:72:d5:66:7e:7f:e7:fa:ee:e8:22: 88:b8:48:f7:d8:65:d3:c3:7f:58:b0:ce:50:8f:ea: 13:ec:60:4a:11:25:ea:f7:f8:91:54:e1:b1:c2:8e: fb:7a:dc:b8:75:ac:8f:87:3f:89:33:77:6b:34:2f: 3a:72:a6:98:72:ba:1f:0d:c8:15:df:4c:c6:aa:72: 61:b4:8f:60:0d:8b:e4:0b:39:9a:39:03:10:84:19: 6f:8e:77:54:d6:1b:c5:52:35:9d:a5:21:8b:72:59: 4c:73:36:d7:da:b2:83:d9:43:70:b3:33:66:be:c0: ca:61:03:f9:0a:40:ad:cb:4a:5a:59:fa:ab:8b:70: 4c:e3:c4:c7:8d:90:01:b5:56:0e:c8:9c:99:0a:dd: 95:ea:d5:08:c7:74:b4:05:51:16:9e:6c:ed:4e:a5: a9:c1:6a:70:0a:83:c2:db:9d:6c:5e:f6:f8:f6:3c: 5b:d6:b5:f2:80:4d:b2:88:29:5c:84:30:c3:71:fb: f0:77:79:0a:0b:24:cd:59:51:13:46:2e:9f:34:a0: 9e:0b:ad:a5:ee:07:f8:77:19:0b:7c:0b:97:c0:e6: 24:33:55:c5:02:7f:4a:46:32:fb:ba:b3:d2:6d:e6: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:38:74:5B:DA:E5:0E:D9:A1:D7:20:8B:9D:2C:71:58:F5:06:1C:E8 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f0:23:71:df:3e:80:de:aa:d6:6f:f3:5c:3d:45:4d:f2:a6: 52:37:86:67:84:06:ff:90:df:c3:1f:e1:df:a7:d2:bb:54:2e: b2:21:0b:c9:6f:20:d1:e7:b0:75:a7:b0:ac:38:d7:1d:0c:b9: b7:fd:3e:da:05:aa:30:0e:70:c8:d4:af:2e:13:3b:ea:5c:00: 18:8d:b0:27:52:e0:eb:d0:8c:7a:01:72:a4:f2:b6:5a:fe:e1: 80:7f:07:69:65:ac:ed:7f:04:2a:6f:34:48:cb:2a:8c:e4:b4: f3:2b:a4:0a:44:6e:1a:90:da:51:6f:44:08:80:9d:74:f3:d8: d5:39:a4:c3:da:da:3a:9d:9f:06:aa:96:bb:32:eb:6b:7d:f6: 62:8a:ea:26:2a:6d:91:07:bc:0d:f1:99:01:81:4c:27:84:64: e4:9a:2d:e0:d1:6b:14:10:83:27:c5:70:bf:6a:8f:3b:f8:57: c7:42:0c:bb:22:53:45:f2:40:8a:ba:21:0d:bc:7c:a8:3c:19: 5b:90:e6:61:e6:19:ee:86:33:8d:df:c1:c5:5e:07:39:b8:76: ee:2d:33:76:9a:7e:7c:a2:05:6b:a1:11:c2:cb:4f:fc:a7:6e: f4:ac:27:91:80:6e:14:cc:27:c3:ab:80:ee:67:35:b7:bb:24: 55:ae:8a:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjYwMzI0MTU1NjA1WhcNMjYwMzMxMTU1NjA1WjAYMRYwFAYD VQQDEw02OWMyYjQxNS05MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAle9YDC3SnMn9o7+Yk6lCKOzKsXLVZn5/5/ru6CKIuEj32GXTw39YsM5Qj+oT 7GBKESXq9/iRVOGxwo77ety4dayPhz+JM3drNC86cqaYcrofDcgV30zGqnJhtI9g DYvkCzmaOQMQhBlvjndU1hvFUjWdpSGLcllMczbX2rKD2UNwszNmvsDKYQP5CkCt y0paWfqri3BM48THjZABtVYOyJyZCt2V6tUIx3S0BVEWnmztTqWpwWpwCoPC251s Xvb49jxb1rXygE2yiClchDDDcfvwd3kKCyTNWVETRi6fNKCeC62l7gf4dxkLfAuX wOYkM1XFAn9KRjL7urPSbeYDLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKI4dFva 5Q7Zodcgi50scVj1BhzoMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvAjcd8+gN6q1m/zXD1FTfKmUjeGZ4QG/5Dfwx/h36fSu1QusiELyW8g0eew daewrDjXHQy5t/0+2gWqMA5wyNSvLhM76lwAGI2wJ1Lg69CMegFypPK2Wv7hgH8H aWWs7X8EKm80SMsqjOS08yukCkRuGpDaUW9ECICddPPY1Tmkw9raOp2fBqqWuzLr a332YorqJiptkQe8DfGZAYFMJ4Rk5Jot4NFrFBCDJ8Vwv2qPO/hXx0IMuyJTRfJA irohDbx8qDwZW5DmYeYZ7oYzjd/BxV4HObh27i0zdpp+fKIFa6ERwstP/Kdu9Kwn kYBuFMwnw6uA7mc1t7skVa6KSg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:09 2026 by rpki-client