$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: +pm7Ic1g0+eNlSCGbPfSRlbJeSqIgVCUCSF+7MotZPY= Subject key identifier: 10:28:9C:24:6B:18:F8:66:1C:7A:ED:C0:E9:D0:CA:2F:33:69:DA:71 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07F9 Signing time: Sat 28 Feb 2026 21:40:18 +0000 Manifest this update: Sat 28 Feb 2026 21:40:18 +0000 Manifest next update: Sat 07 Mar 2026 21:40:18 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: ioyFzTdO2AebIe64yPr9Jj+ZeqpvLjwEy4q+nJALS/w=) 2: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: tssbpuMz4UnGl5ZUZZNAipCgCcF0+IC5VMdBfX3KMcw=) 5: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Feb 28 21:40:18 2026 GMT Not After : Mar 7 21:40:18 2026 GMT Subject: CN=69a360c2-229f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:d6:54:2b:c8:fb:c4:8f:89:76:91:58:9a: 0c:3a:b4:57:26:2b:f4:81:2a:aa:5e:20:53:4b:f7: ea:da:1c:2b:ed:c4:49:70:ee:aa:fc:7e:f9:e4:b4: 5e:b9:c8:28:fa:de:80:38:55:24:b3:77:74:f7:aa: 24:17:eb:52:5f:fd:2a:64:9b:ce:14:5d:b1:78:6e: 24:24:20:e8:31:71:f7:3c:57:67:ab:ec:79:a1:24: 6e:2d:69:a2:6d:f6:6c:67:f0:03:79:fe:ad:e9:61: 6a:55:60:c7:5e:95:ac:ec:84:4e:70:fd:48:2c:68: 3d:14:8a:84:34:f8:c9:b7:eb:7e:b4:1d:64:f1:54: ea:22:9c:1a:92:0c:29:60:1d:28:c1:54:e0:f1:bc: 9a:1b:f2:38:6c:e0:42:bf:d6:37:96:27:2e:ec:d0: 00:bd:16:29:0d:5f:89:c0:6f:b4:ad:98:b0:18:8e: 16:72:fc:33:ca:65:c8:89:5e:08:30:4e:ce:de:f2: b8:3d:ef:26:eb:f3:4e:d9:ab:30:f8:de:4e:44:21: ae:5c:e3:7e:9a:4d:e0:fb:5e:0f:d2:a4:85:d5:e9: b4:24:c9:07:ef:36:54:2c:9b:64:09:70:c7:b3:1e: 19:9f:58:8d:8b:7c:ab:3f:fc:55:9a:49:5e:f7:f9: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:9C:24:6B:18:F8:66:1C:7A:ED:C0:E9:D0:CA:2F:33:69:DA:71 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3e:47:f5:c2:7a:e5:23:a7:5f:a7:da:7c:cd:9f:4e:6b:9b: d2:2f:3d:65:71:18:4b:fb:36:6f:f6:5c:4d:4a:e8:a2:81:bd: 66:21:5b:16:78:41:86:d4:6e:b0:45:b7:22:e4:93:99:a5:86: fa:8a:d2:f9:af:40:ee:92:bc:f7:5b:c3:e4:8c:cd:d4:95:80: fb:8d:b4:48:95:5b:ab:bf:55:7e:be:14:ba:43:a1:a3:d6:a7: 43:8c:42:bb:c1:a9:c9:2e:fe:7a:55:ab:73:f9:ed:f5:dc:a7: b0:fe:e9:89:d0:4c:5e:eb:23:2f:97:9a:2d:6d:32:c3:0c:11: 78:37:fd:18:73:ed:95:9b:2b:cf:4b:a0:53:04:bb:a3:04:0d: 37:a9:52:ac:58:5e:47:01:44:bd:6d:3f:c0:db:72:37:60:fb: 9a:fa:63:7a:9d:fb:fe:c1:8b:94:79:9f:98:08:9e:da:58:c1: 11:c2:b7:7f:32:b4:3b:4e:f7:bc:1d:65:85:18:cd:3e:bd:b4: 48:33:29:9d:13:ed:e8:96:b3:4c:84:d3:e8:7b:62:17:d5:a5: 82:76:bb:e4:0f:86:6d:26:36:8c:f3:f3:8b:72:2a:75:c2:98: 32:a8:02:de:3b:61:07:40:32:04:08:64:09:d4:85:9e:f5:9b: 44:3f:be:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYwMjI4MjE0MDE4WhcNMjYwMzA3MjE0MDE4WjAYMRYwFAYD VQQDDA02OWEzNjBjMi0yMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TPWVCvI+8SPiXaRWJoMOrRXJiv0gSqqXiBTS/fq2hwr7cRJcO6q/H755LRe ucgo+t6AOFUks3d096okF+tSX/0qZJvOFF2xeG4kJCDoMXH3PFdnq+x5oSRuLWmi bfZsZ/ADef6t6WFqVWDHXpWs7IROcP1ILGg9FIqENPjJt+t+tB1k8VTqIpwakgwp YB0owVTg8byaG/I4bOBCv9Y3licu7NAAvRYpDV+JwG+0rZiwGI4WcvwzymXIiV4I ME7O3vK4Pe8m6/NO2asw+N5ORCGuXON+mk3g+14P0qSF1em0JMkH7zZULJtkCXDH sx4Zn1iNi3yrP/xVmkle9/mCEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAonCRr GPhmHHrtwOnQyi8zadpxMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqT5H9cJ65SOnX6fafM2fTmub0i89ZXEYS/s2b/ZcTUroooG9ZiFbFnhBhtRu sEW3IuSTmaWG+orS+a9A7pK891vD5IzN1JWA+420SJVbq79Vfr4UukOho9anQ4xC u8GpyS7+elWrc/nt9dynsP7pidBMXusjL5eaLW0ywwwReDf9GHPtlZsrz0ugUwS7 owQNN6lSrFheRwFEvW0/wNtyN2D7mvpjep37/sGLlHmfmAie2ljBEcK3fzK0O073 vB1lhRjNPr20SDMpnRPt6JazTITT6HtiF9Wlgna75A+GbSY2jPPzi3IqdcKYMqgC 3jthB0AyBAhkCdSFnvWbRD++dw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:22 2026 by rpki-client