$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: +CSpuJ0aH7Li0VTtBf3nQaMocrbzatxYVnG1w53L4r0= Subject key identifier: 2D:DB:1C:F3:C8:67:91:71:02:C2:3E:25:DE:76:61:90:A2:2C:84:EF Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 26 Signing time: Sun 01 Mar 2026 10:17:16 +0000 Manifest this update: Sun 01 Mar 2026 10:17:15 +0000 Manifest next update: Sun 08 Mar 2026 10:17:15 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: WpQaXJ4uijN9T2DGZfw2S9iP9TQqmRnhWj+oEHpI+nA=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Mar 1 10:17:15 2026 GMT Not After : Mar 8 10:17:15 2026 GMT Subject: CN=69a4122b-eece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:4b:10:9e:6d:d7:06:46:c6:ba:fe:82:4c: 6a:f4:fd:a8:33:0d:37:77:8e:d1:fc:0c:5b:f4:e6: a8:54:b7:ed:b7:63:b5:dc:4c:f2:bc:2a:73:6e:50: f5:cd:29:c0:1a:ba:07:43:2e:0e:e8:ea:ba:62:23: 32:c5:ce:64:c8:07:7e:9f:fc:e3:78:8c:f4:52:23: f2:f9:57:6d:90:3f:73:7b:d5:2c:ee:37:22:b6:64: 33:34:29:3f:f5:14:25:36:b9:86:77:bb:98:50:39: 58:d9:4e:21:da:b1:03:d6:c0:d8:e8:3b:11:20:14: 8b:bc:f0:1f:ed:b9:58:73:72:c4:9d:08:86:84:79: fd:2b:7c:8b:6f:a1:ba:7a:b3:35:78:28:c3:77:e3: e7:41:e3:d6:be:8d:7a:b3:76:2c:62:df:f8:75:83: 56:e5:3b:8a:7c:7d:db:cb:9c:2b:ce:08:d0:72:d4: b7:47:f4:62:50:5f:63:3c:92:86:2d:6d:19:a5:03: 96:fd:55:e1:4e:da:a2:d8:78:7c:36:61:2b:47:34: a1:ad:e5:67:4d:b5:93:6a:8a:e6:8b:9c:f6:f3:1f: 6e:79:9a:59:fb:db:b9:5c:ff:26:80:38:18:bc:71: ac:b4:ea:5a:c3:73:37:31:50:0d:e0:56:78:6c:9e: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DB:1C:F3:C8:67:91:71:02:C2:3E:25:DE:76:61:90:A2:2C:84:EF X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3b:78:4b:4c:9f:ad:6b:1a:ce:e3:50:3d:d5:10:9b:5d:3c: e6:21:09:92:58:35:84:89:08:1b:ad:79:3b:85:f7:96:b9:e6: 69:22:44:2b:6c:ca:53:4d:33:68:63:36:19:73:ec:dd:18:7a: 88:6c:08:99:a3:e9:d7:90:94:be:93:1a:1c:dd:af:76:31:c5: 18:f9:ba:8f:b2:c5:4d:18:95:e3:6f:f7:c2:f8:8b:3a:18:3a: 66:d2:61:67:f4:31:a5:47:18:e2:1c:dc:89:8b:50:bb:28:1f: ba:9f:c7:8c:6d:f3:75:68:1c:7c:6f:45:5e:03:0d:c9:4f:00: 7c:19:44:bb:b4:8e:8d:17:77:aa:be:67:51:6e:4b:ee:a6:e7: 1e:96:33:2a:fe:6b:60:eb:f6:ca:50:2a:b2:c2:f7:e1:d6:5d: ae:bc:27:05:a0:a6:a6:b6:98:83:76:52:60:c8:9e:ca:46:6a: f7:a8:e5:1c:33:c1:5e:68:2f:5f:55:13:3e:73:53:95:9a:2d: 40:a2:76:7f:d5:50:a8:d3:24:44:25:8d:c0:0f:ee:99:0b:ca: 05:5c:3f:ff:64:ee:ba:43:65:b6:59:8f:0a:54:17:a6:a6:67: 7f:da:69:18:50:94:83:d6:da:a6:8b:be:64:1d:ac:8e:39:0a: 19:df:b8:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB NjcyMDg1RTAeFw0yNjAzMDExMDE3MTVaFw0yNjAzMDgxMDE3MTVaMBgxFjAUBgNV BAMTDTY5YTQxMjJiLWVlY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUvksQnm3XBkbGuv6CTGr0/agzDTd3jtH8DFv05qhUt+23Y7XcTPK8KnNuUPXN KcAaugdDLg7o6rpiIzLFzmTIB36f/ON4jPRSI/L5V22QP3N71SzuNyK2ZDM0KT/1 FCU2uYZ3u5hQOVjZTiHasQPWwNjoOxEgFIu88B/tuVhzcsSdCIaEef0rfItvobp6 szV4KMN34+dB49a+jXqzdixi3/h1g1blO4p8fdvLnCvOCNBy1LdH9GJQX2M8koYt bRmlA5b9VeFO2qLYeHw2YStHNKGt5WdNtZNqiuaLnPbzH255mln727lc/yaAOBi8 cay06lrDczcxUA3gVnhsnjZnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULdsc88hn kXECwj4l3nZhkKIshO8wHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRI RkVkMGlMVkdGdjZaeUNGNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqO3hLTJ+taxrO41A91RCbXTzmIQmSWDWEiQgbrXk7hfeWueZpIkQrbMpTTTNo YzYZc+zdGHqIbAiZo+nXkJS+kxoc3a92McUY+bqPssVNGJXjb/fC+Is6GDpm0mFn 9DGlRxjiHNyJi1C7KB+6n8eMbfN1aBx8b0VeAw3JTwB8GUS7tI6NF3eqvmdRbkvu puceljMq/mtg6/bKUCqywvfh1l2uvCcFoKamtpiDdlJgyJ7KRmr3qOUcM8FeaC9f VRM+c1OVmi1AonZ/1VCo0yREJY3AD+6ZC8oFXD//ZO66Q2W2WY8KVBempmd/2mkY UJSD1tqmi75kHayOOQoZ37jb -----END CERTIFICATE-----Generated at Mon Mar 2 12:56:08 2026 by rpki-client