$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: wtZ93FGjpkrMmrx9X/Svdgb4wHdX6UECx8DHTdaTCo8= Subject key identifier: B3:A8:0D:76:26:29:FB:CA:BE:AF:56:60:56:86:13:83:C3:BD:F9:04 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 176B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 173F Signing time: Sun 01 Mar 2026 22:55:00 +0000 Manifest this update: Sun 01 Mar 2026 22:54:59 +0000 Manifest next update: Sun 08 Mar 2026 22:54:59 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: QHTuBo+sOQHFeL5o64g6lVQZbCxeyrVU6Hp2dUBU5gk=) 2: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=) 3: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=) 4: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5995 (0x176b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Mar 1 22:54:59 2026 GMT Not After : Mar 8 22:54:59 2026 GMT Subject: CN=69a4c3c4-b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:54:f5:7f:83:56:75:9f:09:e1:1c:94:4f: 59:bc:9b:14:b6:42:06:e3:ac:50:a2:43:de:e7:2f: 43:b2:6d:ed:5f:98:05:fd:df:0c:04:f2:bb:49:3b: 79:35:f6:a3:0e:45:b0:58:0f:c3:95:4a:ec:cd:0a: a3:64:cb:7c:03:83:31:d4:b8:05:80:ca:ce:29:43: fd:a1:29:1d:91:8f:02:3b:51:c3:48:52:de:ed:d2: 4d:5f:29:d5:e6:49:67:04:4d:13:d0:50:c4:21:4c: 1c:99:8b:d9:4c:ba:de:0c:36:23:d9:50:81:20:b9: e9:cf:a6:90:82:47:7a:0b:6a:54:fd:8a:44:30:c4: c2:a4:4a:c5:7e:c0:ec:60:c1:5a:67:34:8f:41:d2: b3:ba:25:10:b1:47:94:8c:83:02:6e:62:f3:72:c1: bd:aa:0a:e2:d0:9a:d4:ca:06:d1:a4:f6:6e:37:1e: f3:37:e8:cd:9b:87:d7:f7:f5:37:f8:e2:95:ad:6b: 9e:25:4a:e0:9d:ab:da:cd:a3:df:4f:42:72:ef:16: c7:11:93:1b:8d:c3:ec:91:39:fa:55:25:89:5d:62: eb:00:e2:90:0f:7d:84:55:72:cf:91:b4:a8:42:9b: b9:65:40:a6:7b:78:b5:bc:88:ae:05:e3:f3:f2:5d: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A8:0D:76:26:29:FB:CA:BE:AF:56:60:56:86:13:83:C3:BD:F9:04 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:38:23:ea:d4:5f:c0:52:1e:dd:2b:0f:c5:66:8e:d6:b0:ce: b4:02:c6:cf:18:79:fa:98:aa:bc:9d:f7:f9:fc:01:b1:b6:a3: e3:2d:ed:bc:5b:62:dc:ee:cd:d2:6f:da:a2:08:09:14:ca:23: f2:63:d9:9e:ca:ce:f7:e4:f9:6d:3d:3d:1f:2f:4c:5d:eb:ad: a1:6d:c6:cc:3e:50:09:5b:c5:7c:89:7e:da:38:7f:18:8d:ad: af:a5:39:41:b7:0b:36:24:13:61:e6:64:a8:27:c7:23:46:bc: 5d:27:fa:97:5e:dc:33:d3:6a:8b:5f:83:92:70:14:3b:69:9e: 6e:4c:77:8d:4d:e8:41:66:ed:62:4e:c6:80:c6:e2:3a:71:b1: 9e:b1:d1:aa:91:3c:11:2a:f2:e3:99:a3:e8:12:42:0c:a6:10: 22:54:b1:44:0a:de:34:4b:ed:65:fe:e3:b9:8a:f6:c9:45:74: b8:c4:7c:54:d8:87:d3:3f:af:b7:7d:4c:d6:7d:5a:46:f1:ce: 1f:57:fc:89:77:79:a2:53:fc:2f:8c:91:fc:5d:d7:0d:81:b4: 55:ee:8c:c4:54:7d:f2:07:b8:de:df:03:48:f2:e2:1e:03:cb: 47:7b:9f:dd:1a:0f:9b:5a:50:06:1a:5c:0b:5b:22:07:f9:d8: d2:84:31:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjYwMzAxMjI1NDU5WhcNMjYwMzA4MjI1NDU5WjAYMRYwFAYD VQQDEw02OWE0YzNjNC1iMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5pU9X+DVnWfCeEclE9ZvJsUtkIG46xQokPe5y9Dsm3tX5gF/d8MBPK7STt5 NfajDkWwWA/DlUrszQqjZMt8A4Mx1LgFgMrOKUP9oSkdkY8CO1HDSFLe7dJNXynV 5klnBE0T0FDEIUwcmYvZTLreDDYj2VCBILnpz6aQgkd6C2pU/YpEMMTCpErFfsDs YMFaZzSPQdKzuiUQsUeUjIMCbmLzcsG9qgri0JrUygbRpPZuNx7zN+jNm4fX9/U3 +OKVrWueJUrgnavazaPfT0Jy7xbHEZMbjcPskTn6VSWJXWLrAOKQD32EVXLPkbSo Qpu5ZUCme3i1vIiuBePz8l27bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOoDXYm KfvKvq9WYFaGE4PDvfkEMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPDgj6tRfwFIe3SsPxWaO1rDOtALGzxh5+piqvJ33+fwBsbaj4y3tvFti3O7N 0m/aoggJFMoj8mPZnsrO9+T5bT09Hy9MXeutoW3GzD5QCVvFfIl+2jh/GI2tr6U5 QbcLNiQTYeZkqCfHI0a8XSf6l17cM9Nqi1+DknAUO2mebkx3jU3oQWbtYk7GgMbi OnGxnrHRqpE8ESry45mj6BJCDKYQIlSxRAreNEvtZf7juYr2yUV0uMR8VNiH0z+v t31M1n1aRvHOH1f8iXd5olP8L4yR/F3XDYG0Ve6MxFR98ge43t8DSPLiHgPLR3uf 3RoPm1pQBhpcC1siB/nY0oQxng== -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:08 2026 by rpki-client