$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: QaZzz5iQpoKNMBY/3/Xw4xhHuCWwibuKe9gcZ5O6NFE= Subject key identifier: 8D:C9:81:94:C9:40:95:0B:8E:C0:15:FD:EA:55:4E:C8:C7:B8:3E:DF Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0774 Signing time: Mon 02 Mar 2026 01:26:33 +0000 Manifest this update: Mon 02 Mar 2026 01:26:31 +0000 Manifest next update: Mon 09 Mar 2026 01:26:31 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: YGdINJHK6IeUYHziyVyx4o1g4D7GKg78+pQMPEhfVAE=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Mar 2 01:26:31 2026 GMT Not After : Mar 9 01:26:31 2026 GMT Subject: CN=69a4e749-de92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:57:d1:5e:81:46:e0:80:bf:e9:19:09:58: bc:b6:81:ac:7f:c5:16:3d:65:d5:a3:98:7c:1c:1c: fc:b0:36:c1:52:d8:e1:05:51:cd:b9:48:0b:c6:2c: 58:80:75:01:8f:25:69:32:b7:12:4f:29:f9:4a:2c: 07:3b:de:03:ec:3d:af:fb:68:23:7a:b5:69:62:a4: 6c:7e:07:c4:9d:0f:b4:40:e9:63:ea:16:3c:e3:54: 55:c3:bd:67:f8:7d:76:9f:b1:27:4c:8f:dc:db:db: 8c:eb:cf:66:62:15:b8:e9:84:87:99:1a:2b:29:e8: d7:12:f1:c6:00:a9:b7:23:4c:0f:4b:ae:17:02:76: ab:02:6c:8b:b4:72:ae:ca:22:23:3d:a7:09:f2:9e: 53:23:47:f2:d3:f9:ef:24:f2:68:c6:fa:c2:4b:69: a0:05:73:eb:6f:1d:d4:e2:44:97:8d:d6:a4:e2:56: 5b:6c:bf:c3:2a:6b:cb:7b:1f:51:39:d2:06:30:9a: 44:22:61:0d:8f:4c:04:41:de:d0:d6:16:f2:f0:0b: 89:d1:bb:f4:2a:59:97:66:94:90:36:9a:c2:37:b7: 11:15:86:31:02:e5:7d:72:4d:c4:6d:fa:37:27:7c: ee:43:b6:b3:8d:dc:d1:7f:98:68:62:2a:42:d4:65: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C9:81:94:C9:40:95:0B:8E:C0:15:FD:EA:55:4E:C8:C7:B8:3E:DF X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f4:a0:67:cb:35:63:4c:56:4a:5d:6d:46:7b:1c:92:13:4d: 75:1a:55:b8:65:a3:ee:b8:39:08:4d:6e:af:26:2f:32:f6:af: 5f:65:68:bb:58:f2:cd:f8:02:3e:f8:79:a7:be:13:9a:35:57: e4:ba:c6:de:b2:75:b3:9a:aa:05:c5:7f:97:77:cc:c9:c3:bd: aa:28:8e:59:51:a5:2e:5d:94:24:28:de:8a:0d:b1:96:37:09: d1:ca:5f:9c:e5:24:79:1d:04:d4:7e:f0:2c:9b:96:ec:58:0f: f8:03:13:c6:5e:dd:8c:d9:25:bd:e8:f8:c0:5a:aa:4e:6e:82: 3c:ea:f3:69:11:58:12:45:25:95:1e:7c:c0:0c:80:6d:f3:cb: 64:28:4b:52:24:09:9d:f1:75:7b:02:81:f4:12:a9:4b:6f:9e: f6:46:37:f4:99:9c:6e:db:d1:a4:b6:87:45:db:d7:42:d9:87: 58:4b:bd:bb:7d:dd:f9:e1:38:d6:28:7d:45:63:ea:30:00:aa: 0d:62:0d:47:e6:74:58:14:0e:58:bf:1a:a9:03:69:c4:5b:49: 23:68:ad:05:69:54:ef:d4:86:e2:bf:76:58:28:4d:21:fd:4a: dd:97:f9:a6:28:bb:42:5f:a6:58:61:7e:d0:f0:70:cd:bb:cf: 31:9e:81:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjYwMzAyMDEyNjMxWhcNMjYwMzA5MDEyNjMxWjAYMRYwFAYD VQQDEw02OWE0ZTc0OS1kZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmFX0V6BRuCAv+kZCVi8toGsf8UWPWXVo5h8HBz8sDbBUtjhBVHNuUgLxixY gHUBjyVpMrcSTyn5SiwHO94D7D2v+2gjerVpYqRsfgfEnQ+0QOlj6hY841RVw71n +H12n7EnTI/c29uM689mYhW46YSHmRorKejXEvHGAKm3I0wPS64XAnarAmyLtHKu yiIjPacJ8p5TI0fy0/nvJPJoxvrCS2mgBXPrbx3U4kSXjdak4lZbbL/DKmvLex9R OdIGMJpEImENj0wEQd7Q1hby8AuJ0bv0KlmXZpSQNprCN7cRFYYxAuV9ck3Ebfo3 J3zuQ7azjdzRf5hoYipC1GXbxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3JgZTJ QJULjsAV/epVTsjHuD7fMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArPSgZ8s1Y0xWSl1tRnsckhNNdRpVuGWj7rg5CE1uryYvMvavX2Vou1jyzfgC Pvh5p74TmjVX5LrG3rJ1s5qqBcV/l3fMycO9qiiOWVGlLl2UJCjeig2xljcJ0cpf nOUkeR0E1H7wLJuW7FgP+AMTxl7djNklvej4wFqqTm6CPOrzaRFYEkUllR58wAyA bfPLZChLUiQJnfF1ewKB9BKpS2+e9kY39JmcbtvRpLaHRdvXQtmHWEu9u33d+eE4 1ih9RWPqMACqDWINR+Z0WBQOWL8aqQNpxFtJI2itBWlU79SG4r92WChNIf1K3Zf5 pii7Ql+mWGF+0PBwzbvPMZ6BeQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:51 2026 by rpki-client