$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft File: jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json) Hash identifier: f4MGZrGB/PM22F6Gp/wrNvUpbu1IYQryWMDkAC/FFEs= Subject key identifier: 33:6B:3B:30:BA:BD:D8:C2:C5:81:64:87:24:4F:78:C6:8E:AB:A6:9C Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft Manifest number: 027C Signing time: Sun 01 Mar 2026 02:28:10 +0000 Manifest this update: Sun 01 Mar 2026 02:28:10 +0000 Manifest next update: Sun 08 Mar 2026 02:28:10 +0000 Files and hashes: 1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: k9s1OaHDDk6y60UXEZlZYC7dKaHVXGIBNR56HYIV7d4=) 2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=) 3: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=) 4: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53 Validity Not Before: Mar 1 02:28:10 2026 GMT Not After : Mar 8 02:28:10 2026 GMT Subject: CN=69a3a43a-2b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:ac:dc:4b:22:f7:26:ef:2d:97:7b:bc:81: cc:b5:e2:26:d6:bc:67:4b:98:ce:df:03:d5:d6:90: f5:2e:f4:a1:9f:98:ca:f8:6c:65:11:ec:34:f1:78: 23:48:7d:03:98:3b:0c:60:1d:5d:89:83:e6:d2:bf: 8f:e5:80:ad:e1:53:7f:81:70:d6:34:a6:c4:8c:72: 0c:61:45:4f:a1:fa:b5:ba:d3:c0:e0:95:85:08:7c: f3:2a:66:d3:6b:9e:be:9d:85:40:80:22:a9:fc:13: b0:c8:08:b2:ed:df:b6:30:1d:c6:03:ea:b2:86:f8: 7e:19:27:9a:ec:d7:40:a8:de:4e:c2:08:5b:ab:85: ee:1f:0a:97:51:2e:5b:04:81:1c:08:9f:94:c5:6d: e0:aa:b0:a5:22:22:61:dc:6f:53:c0:93:2c:0b:c1: a2:47:67:9e:8f:2d:3f:13:69:a9:65:50:ae:01:d1: 0e:94:b5:fc:6f:8b:7e:d2:65:dd:13:0c:28:ba:fd: 4d:4b:8c:44:e7:ec:31:18:b0:72:33:c0:df:8a:00: de:49:08:1a:0e:8f:02:53:19:5a:e3:8d:93:31:dd: 52:59:35:4f:6e:73:b1:c6:6a:fe:55:35:92:90:09: 46:cc:0a:5a:f9:1b:d4:1b:a5:ea:c1:2d:d9:42:d9: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6B:3B:30:BA:BD:D8:C2:C5:81:64:87:24:4F:78:C6:8E:AB:A6:9C X509v3 Authority Key Identifier: keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:82:17:40:77:3e:87:f9:f2:31:f1:69:a5:f0:70:8d:06:b4: 86:cb:c6:3d:b3:c7:ab:87:4f:0a:24:7a:de:83:a6:37:2b:5f: a6:74:0a:95:29:68:ce:4e:a5:d1:d8:48:fa:3c:77:7e:c5:a0: ff:ff:7e:4e:dc:c9:31:6f:17:ed:c2:fc:e0:e0:05:1d:97:0e: b8:a7:35:f9:54:11:57:04:49:78:0c:53:b0:84:49:6e:b8:b6: 5f:4c:50:66:13:8e:ea:f1:0c:f3:f6:8a:c8:f8:0e:f4:f1:de: 69:83:10:49:56:38:29:0b:16:bb:53:b8:30:0f:5b:df:11:5a: 64:a3:4b:52:d8:54:58:7d:1c:a2:f3:8e:c1:be:d1:17:95:c9: 61:b4:64:42:78:65:62:a0:ea:70:a7:72:9e:d8:c8:0c:78:33: cd:4b:49:12:dd:3d:a6:91:d2:6b:26:94:f8:59:6f:1f:28:22: 54:e0:42:c6:97:2e:66:de:16:d8:43:0a:53:dc:c5:1b:ec:c9: 6f:41:6d:05:58:93:d5:e3:87:6a:ef:0a:05:f9:50:b3:de:de: e8:71:a5:f7:40:44:3d:7f:a5:b2:e9:31:78:c4:89:90:c8:22: fb:01:69:ec:48:63:37:38:88:94:a1:23:1b:85:b4:93:8c:f9: b9:dc:cc:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1 NTYwMjhFNTMwHhcNMjYwMzAxMDIyODEwWhcNMjYwMzA4MDIyODEwWjAYMRYwFAYD VQQDDA02OWEzYTQzYS0yYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPCs3Esi9ybvLZd7vIHMteIm1rxnS5jO3wPV1pD1LvShn5jK+GxlEew08Xgj SH0DmDsMYB1diYPm0r+P5YCt4VN/gXDWNKbEjHIMYUVPofq1utPA4JWFCHzzKmbT a56+nYVAgCKp/BOwyAiy7d+2MB3GA+qyhvh+GSea7NdAqN5Owghbq4XuHwqXUS5b BIEcCJ+UxW3gqrClIiJh3G9TwJMsC8GiR2eejy0/E2mpZVCuAdEOlLX8b4t+0mXd Ewwouv1NS4xE5+wxGLByM8DfigDeSQgaDo8CUxla442TMd1SWTVPbnOxxmr+VTWS kAlGzApa+RvUG6XqwS3ZQtn6CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNrOzC6 vdjCxYFkhyRPeMaOq6acMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2MS9CMkMyMDZFMDRBMUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0 ZGpCMGRUUXFrdUZWWUNqbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdoIXQHc+h/nyMfFppfBwjQa0hsvGPbPHq4dPCiR63oOmNytfpnQKlSlozk6l 0dhI+jx3fsWg//9+TtzJMW8X7cL84OAFHZcOuKc1+VQRVwRJeAxTsIRJbri2X0xQ ZhOO6vEM8/aKyPgO9PHeaYMQSVY4KQsWu1O4MA9b3xFaZKNLUthUWH0covOOwb7R F5XJYbRkQnhlYqDqcKdyntjIDHgzzUtJEt09ppHSayaU+FlvHygiVOBCxpcuZt4W 2EMKU9zFG+zJb0FtBViT1eOHau8KBflQs97e6HGl90BEPX+lsukxeMSJkMgi+wFp 7EhjNziIlKEjG4W0k4z5udzMSw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:45 2026 by rpki-client