$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json) Hash identifier: O40NmuasWmaVdlsK8kDCABbS/D0U4AVFpPA+JOuu3uM= Subject key identifier: 69:CE:BA:28:2B:1F:B4:D7:37:79:B4:C9:20:43:3F:6A:68:0F:88:B4 Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft Manifest number: 2B Signing time: Sun 01 Mar 2026 10:10:39 +0000 Manifest this update: Sun 01 Mar 2026 10:10:39 +0000 Manifest next update: Sun 08 Mar 2026 10:10:39 +0000 Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: lnSSoIWW5EN00hLmjlRPeihmedD/lH3DJRdBxT7O/tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Validity Not Before: Mar 1 10:10:39 2026 GMT Not After : Mar 8 10:10:39 2026 GMT Subject: CN=69a4109f-9c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b2:c9:3f:12:04:58:d4:7b:54:e0:39:34:89: 4a:71:19:19:c5:71:06:9c:da:11:31:3c:87:8a:be: 28:4e:ab:54:f9:3f:ef:07:ce:47:ab:86:71:e7:11: 65:d9:bd:44:26:7b:a2:bd:c0:08:d8:e5:30:73:9c: 8a:e4:71:16:5a:9c:1b:cf:c9:08:13:81:d9:26:94: 43:c2:27:c3:8e:54:d7:21:6d:b9:03:52:ae:44:95: 5b:d0:b0:67:78:96:e6:83:31:81:a4:52:04:d0:83: d5:f3:56:41:ad:6e:7b:e0:84:fb:dd:6b:fa:1d:ba: d9:aa:ab:35:c4:6e:25:df:84:0f:13:68:be:65:ae: 4a:35:33:4d:e1:30:3f:0f:50:a8:3a:6a:90:a8:81: 6e:f0:09:73:70:0d:74:e4:4b:ed:42:66:f4:53:ff: cf:e2:4e:7c:b5:cf:22:f5:de:11:bf:1f:91:3a:17: 1d:d5:b4:98:fb:08:e9:63:ee:a9:f4:26:14:8a:32: 00:92:e6:85:42:ae:ff:84:aa:ff:b5:27:f8:70:ca: 9d:4d:ff:1d:e0:b1:20:e7:c3:db:2a:7b:14:88:14: 28:e1:9f:65:d3:b4:d6:81:32:aa:37:a0:50:d6:eb: ea:85:6c:01:42:9a:83:f8:a5:f9:1a:c3:37:d2:f6: 31:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CE:BA:28:2B:1F:B4:D7:37:79:B4:C9:20:43:3F:6A:68:0F:88:B4 X509v3 Authority Key Identifier: keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a7:9c:82:07:87:38:6c:c1:ba:a5:56:d8:c9:0c:ac:c6:20: 23:83:86:82:b3:bb:dc:c9:16:75:b2:c4:f4:e9:68:d3:b3:4c: c9:db:dc:e2:da:63:f4:82:2a:dc:90:0f:f7:00:ea:ba:72:a1: 24:b7:a8:93:1e:5f:c7:70:8e:f0:82:d6:58:a2:2c:e7:6f:96: 92:27:20:34:0d:a9:ca:35:34:10:2c:73:0b:69:d9:f0:34:21: fa:cd:f1:d8:8a:3d:9a:52:e4:0a:fd:ec:41:62:ad:65:00:02: c7:7a:04:0c:aa:10:81:4b:58:08:40:01:01:e5:e9:91:9a:5e: ef:bb:96:ea:09:3e:6c:7f:42:57:77:03:e6:e7:91:eb:0d:e1: a1:b2:20:fe:01:8e:25:bc:e2:c2:7b:9d:c2:a0:17:cf:23:a8: 20:c1:dc:cf:af:ed:15:dd:e8:07:1f:25:5b:2b:8b:73:99:72: f6:b4:13:94:ea:f0:24:e6:35:c4:5f:55:7f:80:9d:d5:5f:a2: 90:83:b0:fe:2d:cf:3e:55:e4:d4:34:9f:19:6b:4d:0a:eb:8e: f8:05:01:5b:46:83:21:93:95:12:7f:78:7e:68:b7:9f:8b:2b: c6:ab:45:a7:da:5b:22:4e:f2:4c:28:9d:49:de:e2:4e:f4:57: 39:a4:e0:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFFRTExMC8GA1UEBRMoOENGNUMxOEY4MzFDQTkxMkM4OTNGRTBFOEU3MzIzNTNC NjBBNkVEMjAeFw0yNjAzMDExMDEwMzlaFw0yNjAzMDgxMDEwMzlaMBgxFjAUBgNV BAMTDTY5YTQxMDlmLTljNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTssk/EgRY1HtU4Dk0iUpxGRnFcQac2hExPIeKvihOq1T5P+8HzkerhnHnEWXZ vUQme6K9wAjY5TBznIrkcRZanBvPyQgTgdkmlEPCJ8OOVNchbbkDUq5ElVvQsGd4 luaDMYGkUgTQg9XzVkGtbnvghPvda/odutmqqzXEbiXfhA8TaL5lrko1M03hMD8P UKg6apCogW7wCXNwDXTkS+1CZvRT/8/iTny1zyL13hG/H5E6Fx3VtJj7COlj7qn0 JhSKMgCS5oVCrv+Eqv+1J/hwyp1N/x3gsSDnw9sqexSIFCjhn2XTtNaBMqo3oFDW 6+qFbAFCmoP4pfkawzfS9jGtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUac66KCsf tNc3ebTJIEM/amgPiLQwHwYDVR0jBBgwFoAUjPXBj4McqRLIk/4OjnMjU7YKbtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUVFL0Q2MEM3MDAyRDc0 RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJMSWtfNE9qbk1qVTdZS2J0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalBYQmo0TWNxUkxJa180T2puTWpVN1lLYnRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUVFL0Q2MEM3MDAyRDc0RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJM SWtfNE9qbk1qVTdZS2J0SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjp5yCB4c4bMG6pVbYyQysxiAjg4aCs7vcyRZ1ssT06WjTs0zJ29zi2mP0girc kA/3AOq6cqEkt6iTHl/HcI7wgtZYoiznb5aSJyA0DanKNTQQLHMLadnwNCH6zfHY ij2aUuQK/exBYq1lAALHegQMqhCBS1gIQAEB5emRml7vu5bqCT5sf0JXdwPm55Hr DeGhsiD+AY4lvOLCe53CoBfPI6ggwdzPr+0V3egHHyVbK4tzmXL2tBOU6vAk5jXE X1V/gJ3VX6KQg7D+Lc8+VeTUNJ8Za00K6474BQFbRoMhk5USf3h+aLefiyvGq0Wn 2lsiTvJMKJ1J3uJO9Fc5pOCU -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:59 2026 by rpki-client