$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: 0o4rP7zAXSSKgH2FaK61q5wWL5E447QJzhcgfz+BZiM= Subject key identifier: 75:6C:F0:D3:67:20:39:85:21:E3:46:22:68:60:A7:5D:E1:F3:FB:3C Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0ADD Signing time: Mon 02 Mar 2026 00:37:23 +0000 Manifest this update: Mon 02 Mar 2026 00:37:21 +0000 Manifest next update: Mon 09 Mar 2026 00:37:21 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: VN+yUfFQv6NHXNga8oXI235/sqiiTB99EE+f9oaUeZ4=) 2: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=) 3: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=) 4: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=) 5: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=) 6: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=) 7: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=) 8: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=) 9: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=) 10: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=) 11: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=) 12: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Mar 2 00:37:21 2026 GMT Not After : Mar 9 00:37:21 2026 GMT Subject: CN=69a4dbc2-310b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:b3:6a:4a:11:97:98:85:f6:7c:01:a9:82: 06:bc:8e:12:00:24:43:ff:e0:c5:1b:3e:05:aa:7d: 91:5d:59:7b:f9:db:b7:f5:14:38:36:74:b0:05:d7: 53:c0:8d:df:ee:c8:0e:4d:5f:94:76:bf:9a:21:5c: e7:aa:81:6f:5b:17:32:9d:57:47:0b:70:ec:f3:0a: a2:3b:cc:f5:60:b9:bc:83:cd:2d:9c:f6:b4:b1:dd: a8:90:13:7f:15:31:0d:8d:4a:d9:e1:54:e5:a6:97: 10:93:47:f9:08:7b:f9:f4:c8:dc:f9:84:8b:00:06: 98:27:f4:e4:db:3e:e3:3d:7f:60:fa:be:95:47:09: 77:54:55:dd:d9:ca:aa:8a:60:c3:57:73:e3:a9:ae: 30:54:30:e0:30:e9:7f:32:e8:d1:bd:ad:03:d7:18: 6a:18:ae:ba:0e:ed:0a:93:87:01:61:52:6f:cf:bb: 6f:74:43:90:75:52:41:11:49:88:c9:fb:e4:ab:92: ce:12:10:2d:6c:32:86:51:55:72:f9:81:58:3d:c8: 72:a2:6c:22:60:b2:5b:83:92:d8:71:00:46:c0:eb: ca:50:2e:18:b0:1c:c0:a1:6f:1f:29:b4:d6:39:32: ea:70:06:72:bf:6e:a1:e6:be:4d:3b:38:ba:6f:63: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6C:F0:D3:67:20:39:85:21:E3:46:22:68:60:A7:5D:E1:F3:FB:3C X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:57:3f:08:c1:07:a9:53:20:14:f5:56:06:69:39:31:13:fd: 30:d6:48:7f:de:4e:02:ec:8c:3f:e7:2c:1d:b9:ed:06:b9:2a: e5:e3:e6:23:7a:01:3f:0a:e3:19:61:bf:5b:13:24:d0:91:ec: e7:5d:79:d3:4c:c6:8a:6c:69:c4:47:18:dc:99:be:6c:98:f9: 35:85:04:23:e5:a4:54:19:25:f0:fc:90:2b:4d:51:66:1a:82: 2e:d7:bd:f9:17:8f:12:8c:78:2d:58:55:59:38:71:6c:c0:ef: ef:c4:92:d9:80:bd:ec:19:23:8f:4d:6c:3d:88:95:d2:c9:e8: 0f:0d:7a:ad:d3:e6:df:8c:72:3e:69:02:90:21:b4:35:a4:a5: 45:5c:32:00:5b:01:80:14:60:85:75:3a:2f:fe:28:dd:f2:f0: 8b:82:83:78:e2:91:ce:92:9d:80:32:e3:f6:ed:d4:1d:f9:b7: 31:59:ce:b4:45:81:e9:04:57:1b:a5:ed:21:8e:45:c4:df:a0: 7e:02:7a:28:95:00:43:fe:fa:f0:f2:8d:2c:ca:f6:12:79:20: 3b:88:2f:d3:ab:02:bb:cd:23:81:14:3c:2f:40:72:0e:fd:96: aa:86:4b:64:04:9a:ad:a7:35:66:b2:ca:7e:f0:98:76:4f:5f: 96:22:7f:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjYwMzAyMDAzNzIxWhcNMjYwMzA5MDAzNzIxWjAYMRYwFAYD VQQDEw02OWE0ZGJjMi0zMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj+zakoRl5iF9nwBqYIGvI4SACRD/+DFGz4Fqn2RXVl7+du39RQ4NnSwBddT wI3f7sgOTV+Udr+aIVznqoFvWxcynVdHC3Ds8wqiO8z1YLm8g80tnPa0sd2okBN/ FTENjUrZ4VTlppcQk0f5CHv59Mjc+YSLAAaYJ/Tk2z7jPX9g+r6VRwl3VFXd2cqq imDDV3Pjqa4wVDDgMOl/MujRva0D1xhqGK66Du0Kk4cBYVJvz7tvdEOQdVJBEUmI yfvkq5LOEhAtbDKGUVVy+YFYPchyomwiYLJbg5LYcQBGwOvKUC4YsBzAoW8fKbTW OTLqcAZyv26h5r5NOzi6b2O/xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVs8NNn IDmFIeNGImhgp13h8/s8MB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARFc/CMEHqVMgFPVWBmk5MRP9MNZIf95OAuyMP+csHbntBrkq5ePmI3oBPwrj GWG/WxMk0JHs511500zGimxpxEcY3Jm+bJj5NYUEI+WkVBkl8PyQK01RZhqCLte9 +RePEox4LVhVWThxbMDv78SS2YC97Bkjj01sPYiV0snoDw16rdPm34xyPmkCkCG0 NaSlRVwyAFsBgBRghXU6L/4o3fLwi4KDeOKRzpKdgDLj9u3UHfm3MVnOtEWB6QRX G6XtIY5FxN+gfgJ6KJUAQ/768PKNLMr2EnkgO4gv06sCu80jgRQ8L0ByDv2WqoZL ZASarac1ZrLKfvCYdk9fliJ/pA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:34 2026 by rpki-client