$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: zSw6c37rqYb1RuOJ6o6/US4bN7beEmrv6ofKUNl7D5s= Subject key identifier: CA:39:0D:0D:80:56:9E:A9:D3:28:10:57:70:10:29:AB:8D:66:82:89 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 09AC Signing time: Mon 02 Mar 2026 03:03:23 +0000 Manifest this update: Mon 02 Mar 2026 03:03:20 +0000 Manifest next update: Mon 09 Mar 2026 03:03:20 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: kIHw5N+JEejZvizj6uoY2gFGi4CmvdbgCplIb9ZMThQ=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Mar 2 03:03:20 2026 GMT Not After : Mar 9 03:03:20 2026 GMT Subject: CN=69a4fdfa-d55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:95:b5:bd:08:6c:db:1f:69:77:ed:3f:c9: aa:18:83:cc:6d:0e:99:87:8c:e7:79:28:46:25:7f: 60:11:bf:b1:67:b9:14:9c:98:f8:8a:f0:12:ef:51: 0a:81:1f:34:68:11:08:fb:83:b9:1f:23:cf:79:7b: 69:35:15:4b:ea:27:aa:f7:6b:aa:ea:41:cb:c3:c6: 73:00:fd:5c:17:bc:34:6c:4f:be:bd:da:3a:14:37: 27:a8:fb:f1:35:9f:3b:04:97:a2:18:ba:cc:ba:c5: cc:45:58:da:be:da:05:f3:a6:48:f2:a6:ca:43:ba: 5a:92:9f:04:d8:03:a7:99:f7:82:6c:7b:62:09:12: 9d:6a:61:05:d3:cf:d7:b8:90:19:d9:8f:36:34:5d: 8d:5a:79:e2:ad:ab:8a:41:d2:f8:b1:4d:fb:5b:64: db:a6:2d:8d:e6:dc:39:90:2f:71:52:6b:ef:3a:16: b5:f3:05:88:f1:da:68:bc:0b:39:2c:9c:53:42:fb: ed:a8:90:d8:71:9e:f9:e6:2d:30:78:1e:b6:a6:80: ae:c8:0f:f9:29:d9:cb:26:f7:c2:54:37:54:18:7c: dc:eb:40:18:ec:60:d6:a2:58:17:47:55:93:08:21: 78:34:70:95:9c:d5:8f:7e:6f:f3:e2:ca:ff:0e:6e: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:39:0D:0D:80:56:9E:A9:D3:28:10:57:70:10:29:AB:8D:66:82:89 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:93:5b:89:b1:d3:13:f8:f5:be:3e:f3:b8:89:42:4a:fa:d1: 6b:8c:15:75:da:14:c2:d7:de:16:6c:4b:83:71:ec:d0:ce:d7: 22:02:23:f8:91:59:31:9c:a3:c4:b8:4a:36:c8:80:57:41:5d: be:8c:99:e0:f8:1d:17:0e:59:c0:64:0c:9a:b8:bd:6b:e4:33: 2e:9e:40:bf:bd:9c:c9:05:d8:dd:32:cb:a6:99:cd:e4:8e:77: 3b:7c:b3:a4:28:ca:81:9d:c0:86:d8:ba:03:36:bb:b6:2e:d8: f8:3d:2a:b8:38:f5:90:2b:4a:56:b5:bd:ec:39:2e:7b:f7:04: 23:b7:e8:46:c0:bd:45:0f:e6:bf:74:dc:dc:fb:f5:b4:13:c1: 00:c9:55:cd:ad:72:48:ad:4b:0f:e5:b0:73:e8:e6:5c:da:72: d4:ea:7a:0c:68:87:2e:2f:af:70:d8:62:a3:74:56:fe:32:78: 3a:87:1c:1f:d5:39:71:ed:22:d6:3a:aa:47:10:06:43:d7:5c: 75:19:7c:54:47:1f:67:bd:3a:0c:e9:0d:fb:6b:62:da:6d:61: 69:04:a4:da:a1:59:20:ff:26:4a:ca:6f:63:47:ab:0e:5f:1b: 0e:8d:fe:81:e1:29:c1:d4:03:98:8a:54:b9:60:6a:90:8d:23: e5:59:15:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjYwMzAyMDMwMzIwWhcNMjYwMzA5MDMwMzIwWjAYMRYwFAYD VQQDEw02OWE0ZmRmYS1kNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOOVtb0IbNsfaXftP8mqGIPMbQ6Zh4zneShGJX9gEb+xZ7kUnJj4ivAS71EK gR80aBEI+4O5HyPPeXtpNRVL6ieq92uq6kHLw8ZzAP1cF7w0bE++vdo6FDcnqPvx NZ87BJeiGLrMusXMRVjavtoF86ZI8qbKQ7pakp8E2AOnmfeCbHtiCRKdamEF08/X uJAZ2Y82NF2NWnnirauKQdL4sU37W2Tbpi2N5tw5kC9xUmvvOha18wWI8dpovAs5 LJxTQvvtqJDYcZ755i0weB62poCuyA/5KdnLJvfCVDdUGHzc60AY7GDWolgXR1WT CCF4NHCVnNWPfm/z4sr/Dm5v3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMo5DQ2A Vp6p0ygQV3AQKauNZoKJMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs5NbibHTE/j1vj7zuIlCSvrRa4wVddoUwtfeFmxLg3Hs0M7XIgIj+JFZMZyj xLhKNsiAV0FdvoyZ4PgdFw5ZwGQMmri9a+QzLp5Av72cyQXY3TLLppnN5I53O3yz pCjKgZ3Ahti6Aza7ti7Y+D0quDj1kCtKVrW97Dkue/cEI7foRsC9RQ/mv3Tc3Pv1 tBPBAMlVza1ySK1LD+Wwc+jmXNpy1Op6DGiHLi+vcNhio3RW/jJ4OoccH9U5ce0i 1jqqRxAGQ9dcdRl8VEcfZ706DOkN+2ti2m1haQSk2qFZIP8mSspvY0erDl8bDo3+ geEpwdQDmIpUuWBqkI0j5VkVaQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:26:22 2026 by rpki-client