$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: 92SFf40yhPn4RtXXbh9sF1pw71PvAOkT+cS8UK5odfo= Subject key identifier: F2:10:DD:57:DB:AC:59:B4:D7:E6:D6:9E:EB:DC:5E:A1:F2:7B:62:4B Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 0218 Signing time: Sun 01 Mar 2026 03:56:01 +0000 Manifest this update: Sun 01 Mar 2026 03:56:00 +0000 Manifest next update: Sun 08 Mar 2026 03:56:00 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: CRODVNc8ju4+slSK/BwgOSj+Pt3gyHtFmCGZxdBaBU8=) 2: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: fSxpUr+WUEiMsQuXQ14Z3BJW2UDp3SS+KK2DrcMSuYE=) 3: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: uvhIRu3Zl3QRrUhy2ZG8t4bZnlI9E1gwDxFwYKld2lg=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: ihXElke8srSYYptYUqBX48/+59ysvth9EZ73na0o1PM=) 5: AA398864B96611EF8161BF51C4F9AE02.roa (hash: TD7salmLrRM34euIo8G4Ct9yO9PS+fagaxM6vGI2MEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Mar 1 03:56:00 2026 GMT Not After : Mar 8 03:56:00 2026 GMT Subject: CN=69a3b8d1-a9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:0b:3a:6a:87:41:1e:85:2c:89:ae:5c:17: e3:a6:87:be:5c:85:3e:04:09:ce:ef:0f:dc:d5:3d: dc:3c:2c:7a:e1:92:7d:18:6c:cd:2c:4f:2e:22:4b: 46:6d:1f:85:2a:47:11:6a:9e:8a:8f:50:ae:b5:b1: b2:58:93:63:ee:82:9f:15:42:d6:cc:95:89:d0:97: f5:85:85:4e:81:18:64:76:d4:27:0b:63:5c:b9:ab: 21:3e:fe:a4:db:dd:70:01:d5:d0:7f:e2:26:4b:84: 4b:43:a9:f8:f0:1e:59:3d:6e:c8:11:8d:2c:35:02: 94:22:50:23:8c:0f:9d:be:15:21:8e:c4:c3:f4:ca: d9:b0:05:7e:bc:53:07:23:a0:55:8c:b2:5e:e8:89: 50:7c:c4:6b:dc:4b:a5:65:88:86:73:08:8c:d6:7e: db:1e:8d:63:33:7a:1a:2a:7f:df:c0:76:03:1f:ef: 37:60:a6:ea:cd:55:0f:a2:db:52:8b:80:92:35:a6: 1e:c8:fc:e9:16:2c:96:8c:03:d4:36:b0:84:2f:06: a8:28:dd:55:9a:ab:a4:6b:8b:37:6a:6d:01:f7:88: d4:ca:7d:dd:66:c2:ea:ba:0a:6b:29:0b:99:e1:9e: 75:2d:3c:24:e2:d3:3d:9c:9e:2e:b6:6a:ca:40:72: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:DD:57:DB:AC:59:B4:D7:E6:D6:9E:EB:DC:5E:A1:F2:7B:62:4B X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:36:6f:4f:2e:19:47:1a:e4:3f:3f:ad:98:4e:5d:08:96:f3: 34:6c:2f:33:d8:02:3d:81:40:26:ea:b1:44:5d:17:54:e5:22: 59:76:51:a8:28:43:06:35:d6:4d:28:d0:35:70:3c:b3:e0:e1: e9:99:93:70:2d:db:fc:12:32:68:11:4f:97:6c:2e:cd:b0:5d: d8:6d:55:8b:04:39:7f:24:76:b0:08:4e:1a:f0:f2:e3:59:bb: a7:1f:30:c0:25:0e:7a:a9:d2:34:b7:12:d3:13:29:54:bc:fd: 0e:51:81:0e:6b:7c:c2:a8:88:ad:0a:4e:27:87:26:cf:7b:c0: e2:a1:1e:70:88:65:c0:bc:21:24:ce:48:f3:46:5c:53:3e:b6: 15:dd:d1:23:c5:ee:0f:32:70:18:74:7a:b7:f0:ea:a1:00:eb: 3b:81:d6:47:c0:f4:02:63:35:fc:5d:a5:33:0d:54:93:8e:57: a1:0f:80:10:b3:94:e0:95:2c:38:07:92:c4:1c:16:22:93:8f: f5:5a:17:54:dd:35:30:66:13:f4:f6:6a:f1:d0:9c:fd:45:52: 4a:89:75:80:62:08:71:50:69:14:b3:32:ce:b5:6a:a7:9f:bd: 0b:12:41:75:24:93:0d:9e:dd:ab:fa:b4:00:19:2b:06:61:62: 46:85:bd:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjYwMzAxMDM1NjAwWhcNMjYwMzA4MDM1NjAwWjAYMRYwFAYD VQQDDA02OWEzYjhkMS1hOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgkLOmqHQR6FLImuXBfjpoe+XIU+BAnO7w/c1T3cPCx64ZJ9GGzNLE8uIktG bR+FKkcRap6Kj1CutbGyWJNj7oKfFULWzJWJ0Jf1hYVOgRhkdtQnC2NcuashPv6k 291wAdXQf+ImS4RLQ6n48B5ZPW7IEY0sNQKUIlAjjA+dvhUhjsTD9MrZsAV+vFMH I6BVjLJe6IlQfMRr3EulZYiGcwiM1n7bHo1jM3oaKn/fwHYDH+83YKbqzVUPottS i4CSNaYeyPzpFiyWjAPUNrCELwaoKN1Vmquka4s3am0B94jUyn3dZsLqugprKQuZ 4Z51LTwk4tM9nJ4utmrKQHKSswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIQ3Vfb rFm01+bWnuvcXqHye2JLMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGzZvTy4ZRxrkPz+tmE5dCJbzNGwvM9gCPYFAJuqxRF0XVOUiWXZRqChDBjXW TSjQNXA8s+Dh6ZmTcC3b/BIyaBFPl2wuzbBd2G1ViwQ5fyR2sAhOGvDy41m7px8w wCUOeqnSNLcS0xMpVLz9DlGBDmt8wqiIrQpOJ4cmz3vA4qEecIhlwLwhJM5I80Zc Uz62Fd3RI8XuDzJwGHR6t/DqoQDrO4HWR8D0AmM1/F2lMw1Uk45XoQ+AELOU4JUs OAeSxBwWIpOP9VoXVN01MGYT9PZq8dCc/UVSSol1gGIIcVBpFLMyzrVqp5+9CxJB dSSTDZ7dq/q0ABkrBmFiRoW9JA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:43 2026 by rpki-client