$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: 1HQ5h94XTItppJqB0KXf3CbP/78EtcGphsTA4zAynuE= Subject key identifier: CC:4B:52:D4:E7:B9:0B:56:C4:32:27:E3:DC:00:5A:1A:0E:52:F1:7F Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 030D Signing time: Wed 25 Mar 2026 00:51:24 +0000 Manifest this update: Wed 25 Mar 2026 00:51:24 +0000 Manifest next update: Wed 01 Apr 2026 00:51:24 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: UtobZTQn7XPh1g9hhHfUm1oqg7JSpmM7v3uz/YYYFZs=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=) 3: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=) 4: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Mar 25 00:51:24 2026 GMT Not After : Apr 1 00:51:24 2026 GMT Subject: CN=69c3318c-9ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:a5:e0:67:59:1f:81:6b:75:5f:40:29:07: 38:e5:38:56:33:1d:68:ff:67:2f:5d:56:6b:5d:12: 80:9b:28:a7:81:a8:96:b7:03:d3:da:77:ec:fa:7f: 86:f4:0d:7c:e5:16:6c:74:5d:62:54:39:71:9a:ae: 17:a1:b7:38:a9:80:a3:7d:7a:0f:b4:22:89:b8:44: 05:cb:4b:55:23:03:56:20:3a:19:52:0d:bb:a5:12: 82:69:20:97:4b:86:53:74:76:3c:e5:cf:4a:c8:6d: 7c:45:ee:f0:f8:3f:af:78:04:4f:e1:94:2e:da:68: 50:e2:18:76:71:f3:41:16:d5:40:8d:b4:d5:e5:14: d8:dd:a4:26:aa:1c:db:19:10:b7:fe:6c:47:77:d5: 94:df:81:27:75:40:d8:0a:21:ac:e1:1f:c9:f0:94: 35:ea:75:c1:8b:4e:96:fc:cd:d0:27:d9:c3:dd:8d: 7c:21:b9:b4:97:fd:2d:a4:b6:d3:20:9c:07:42:d0: 65:f2:c7:7b:24:ee:b3:82:59:2e:e8:b7:0d:82:32: a4:d7:a2:e0:03:35:16:38:fa:e6:dd:a6:09:c9:bc: 2d:a5:1f:ef:92:2a:68:38:c3:a1:a2:88:d4:18:62: 6d:bd:e9:0d:f6:84:b7:3f:6b:bc:2f:be:50:61:a2: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:52:D4:E7:B9:0B:56:C4:32:27:E3:DC:00:5A:1A:0E:52:F1:7F X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:42:81:dd:be:9b:a8:d0:5a:fb:14:17:7a:19:79:8d:b1:6d: 80:66:87:01:8c:01:f8:d7:b3:d3:9b:1e:a8:f8:8a:70:3d:d5: 43:3a:ef:86:62:2c:ca:76:76:e3:9d:6d:b4:e2:a5:3a:45:1b: 6a:82:f6:2a:07:f7:a6:9b:5d:ec:53:69:36:c7:8a:39:64:b2: a8:b2:3d:8f:5d:19:79:f5:91:f9:fb:d1:78:4c:8d:72:26:a0: b5:6d:d4:95:81:39:7e:b2:64:b7:a4:3a:aa:45:3e:87:8c:dd: 03:43:29:82:a4:7b:31:14:5c:e2:4b:6f:5b:a6:88:f0:31:b0: 04:21:1a:95:bd:e6:64:e1:dd:41:7b:d6:21:10:2f:1d:05:cb: 8e:28:c5:46:d2:03:0c:6b:f0:f2:f0:d5:9e:2d:bb:be:2a:f7: fc:d4:28:54:b0:52:ae:7d:d4:99:9a:37:a4:8e:d1:76:b7:72: 82:bc:4c:07:28:7b:04:48:bf:8a:e3:6c:d6:7a:bb:46:22:76: 61:f9:3b:e2:8b:20:d1:f4:f7:2a:8e:1f:03:7c:67:86:91:82: ef:79:2a:fc:fd:69:f2:9b:82:d4:0a:19:66:c6:81:23:bb:74: cf:b8:c7:c1:90:2a:f8:10:12:65:12:aa:32:1b:3d:bc:02:5e: 8d:62:0c:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjYwMzI1MDA1MTI0WhcNMjYwNDAxMDA1MTI0WjAYMRYwFAYD VQQDEw02OWMzMzE4Yy05ZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn42l4GdZH4FrdV9AKQc45ThWMx1o/2cvXVZrXRKAmyingaiWtwPT2nfs+n+G 9A185RZsdF1iVDlxmq4Xobc4qYCjfXoPtCKJuEQFy0tVIwNWIDoZUg27pRKCaSCX S4ZTdHY85c9KyG18Re7w+D+veARP4ZQu2mhQ4hh2cfNBFtVAjbTV5RTY3aQmqhzb GRC3/mxHd9WU34EndUDYCiGs4R/J8JQ16nXBi06W/M3QJ9nD3Y18Ibm0l/0tpLbT IJwHQtBl8sd7JO6zglku6LcNgjKk16LgAzUWOPrm3aYJybwtpR/vkipoOMOhoojU GGJtvekN9oS3P2u8L75QYaLybQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxLUtTn uQtWxDIn49wAWhoOUvF/MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPEKB3b6bqNBa+xQXehl5jbFtgGaHAYwB+Nez05seqPiKcD3VQzrvhmIsynZ2 451ttOKlOkUbaoL2Kgf3pptd7FNpNseKOWSyqLI9j10ZefWR+fvReEyNciagtW3U lYE5frJkt6Q6qkU+h4zdA0MpgqR7MRRc4ktvW6aI8DGwBCEalb3mZOHdQXvWIRAv HQXLjijFRtIDDGvw8vDVni27vir3/NQoVLBSrn3UmZo3pI7RdrdygrxMByh7BEi/ iuNs1nq7RiJ2Yfk74osg0fT3Ko4fA3xnhpGC73kq/P1p8puC1AoZZsaBI7t0z7jH wZAq+BASZRKqMhs9vAJejWIMxQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:26 2026 by rpki-client