$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: jXB9HE/bXKxeL5TwFsDllWio8vJG53b4HcAUneplxrQ= Subject key identifier: AB:08:3A:54:BC:30:31:92:FA:54:4D:60:CB:00:E9:64:52:6B:FD:6D Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 021B Signing time: Mon 02 Mar 2026 01:22:07 +0000 Manifest this update: Mon 02 Mar 2026 01:22:05 +0000 Manifest next update: Mon 09 Mar 2026 01:22:05 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: ls4VBRZy+LWEyO8Ednxn23kTERGzgIU23eVX9HMpLWg=) 2: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: yFx7AW8xbcO0dpCVEQmFQhDVbAwsJqSWBx0A29YRnQA=) 3: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: aixqh6G+YGHmyosv8Ht5MGwrCl/LnG6M2lnRAo+84IA=) 4: AA398864B96611EF8161BF51C4F9AE02.roa (hash: eSIFI+gj+FuykbDv3aWB3PBFLJGoUzJ9OnfN4Tyzddw=) 5: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: spjYGn1+rdD85IthV7IpNNWBJD6JnV9iX4+gMc5Wqk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Mar 2 01:22:05 2026 GMT Not After : Mar 9 01:22:05 2026 GMT Subject: CN=69a4e63f-a481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:fa:ee:71:ca:81:00:1e:a1:a6:1c:33:27: 32:bd:8f:d2:8f:d2:85:c4:03:0e:bd:63:ca:48:c4: 19:54:4b:ce:43:a8:be:83:51:10:55:91:0d:1d:59: a1:c0:d8:d5:9c:96:6d:b5:16:25:a9:27:71:88:db: 85:cb:17:27:4f:1a:be:fc:1f:4f:1a:a8:92:45:ee: 40:f1:47:67:2a:0b:10:34:0f:8f:e9:db:30:4e:f7: e3:6c:3e:2c:33:e4:a1:ac:b1:1b:05:5d:ae:7c:b7: d4:75:40:3e:32:db:07:d6:fa:e0:24:e5:16:8b:17: f1:dc:97:06:31:0d:f5:17:44:b1:40:32:ee:f8:14: 88:7c:03:a3:c3:27:28:d6:9a:a7:05:92:17:a2:98: 48:55:5c:71:c0:62:96:49:3b:cc:86:bd:9f:8f:f0: a9:2d:e3:03:19:c3:31:3b:7a:b6:1d:fb:1c:79:4b: 07:57:72:0a:5e:08:42:1d:6e:fc:99:fc:56:0c:19: 05:aa:a7:6f:c5:3e:02:a6:56:b0:a6:61:c7:f6:d6: 44:fc:67:34:fb:1b:78:a8:38:e9:f1:bd:33:3f:36: a0:0f:13:45:3c:eb:b4:47:89:4e:42:2a:f5:e3:5c: 1d:88:a2:90:5f:42:19:91:0f:30:d5:34:01:42:18: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:3A:54:BC:30:31:92:FA:54:4D:60:CB:00:E9:64:52:6B:FD:6D X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:52:fe:73:8d:89:d1:c2:8c:8e:7c:f2:5e:9c:95:10:a6:49: 34:33:2f:49:c4:82:49:72:4a:14:3b:01:7a:67:ab:93:fa:20: 73:bb:ed:8d:8a:f5:ba:ba:ef:72:a7:11:84:cc:86:2c:13:c4: 6a:31:cd:5a:55:7a:da:c6:a1:77:30:25:95:9c:9a:41:d7:2f: f1:18:b0:e8:a9:65:9d:ee:a0:eb:5f:4b:c6:b2:d0:b8:2e:35: 5a:82:e5:e2:21:fe:2a:85:f0:1a:b9:0b:27:de:64:16:1c:a2: 5b:e3:3a:d3:19:6d:c1:e9:e7:16:0f:20:f8:f3:38:4b:cc:4e: 98:d1:b2:98:1a:86:99:71:06:9d:7e:8f:28:1a:19:85:0a:a8: ab:3e:bb:40:3b:fc:b6:aa:10:49:16:b1:9d:24:a7:a2:40:89: 80:d1:14:59:a7:7c:99:b6:f1:83:52:70:77:11:0c:fd:88:49: 17:dd:e8:22:1c:64:9d:b4:9a:b5:c1:44:dd:85:d2:fa:74:31: 94:2f:a9:33:70:e5:cd:30:51:50:44:b6:a4:f2:3b:d7:56:ab: 2f:37:43:e4:a2:4f:39:75:4d:00:8a:37:e4:38:4d:e2:bd:d3: 68:50:62:9e:0e:1a:c1:e5:f7:f8:95:2f:fa:55:87:07:5a:2c: 0c:a7:cb:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjYwMzAyMDEyMjA1WhcNMjYwMzA5MDEyMjA1WjAYMRYwFAYD VQQDEw02OWE0ZTYzZi1hNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5X67nHKgQAeoaYcMycyvY/Sj9KFxAMOvWPKSMQZVEvOQ6i+g1EQVZENHVmh wNjVnJZttRYlqSdxiNuFyxcnTxq+/B9PGqiSRe5A8UdnKgsQNA+P6dswTvfjbD4s M+ShrLEbBV2ufLfUdUA+MtsH1vrgJOUWixfx3JcGMQ31F0SxQDLu+BSIfAOjwyco 1pqnBZIXophIVVxxwGKWSTvMhr2fj/CpLeMDGcMxO3q2HfsceUsHV3IKXghCHW78 mfxWDBkFqqdvxT4CplawpmHH9tZE/Gc0+xt4qDjp8b0zPzagDxNFPOu0R4lOQir1 41wdiKKQX0IZkQ8w1TQBQhjM1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsIOlS8 MDGS+lRNYMsA6WRSa/1tMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe1L+c42J0cKMjnzyXpyVEKZJNDMvScSCSXJKFDsBemerk/ogc7vtjYr1urrv cqcRhMyGLBPEajHNWlV62sahdzAllZyaQdcv8Riw6Kllne6g619LxrLQuC41WoLl 4iH+KoXwGrkLJ95kFhyiW+M60xltwennFg8g+PM4S8xOmNGymBqGmXEGnX6PKBoZ hQqoqz67QDv8tqoQSRaxnSSnokCJgNEUWad8mbbxg1JwdxEM/YhJF93oIhxknbSa tcFE3YXS+nQxlC+pM3DlzTBRUES2pPI711arLzdD5KJPOXVNAIo35DhN4r3TaFBi ng4aweX3+JUv+lWHB1osDKfLVQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:50:16 2026 by rpki-client