$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: 6I8wksYf4/iNgC3TcwvgwVV5FHDG/1aAfEdU5hoKj1k= Subject key identifier: 88:2D:E4:A1:1E:3D:84:28:33:84:95:1E:49:01:62:6B:33:54:23:E8 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 2023 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1FCF Signing time: Mon 02 Mar 2026 16:04:38 +0000 Manifest this update: Mon 02 Mar 2026 16:04:37 +0000 Manifest next update: Mon 09 Mar 2026 16:04:37 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: 3iyR9uzo2k2ePWfvfA5OVRTyVc9nUpzAkJTqlLdGF2I=) 2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ZyrkgOdS2CMVpPMVwiikQSmBmkf/Q62a7PKdJPSjlLw=) 3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: j6Fn0yl9QruB/L8VIjM7Cvrv8dXDeLRII1Kg9BFfdqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8227 (0x2023) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Mar 2 16:04:37 2026 GMT Not After : Mar 9 16:04:37 2026 GMT Subject: CN=69a5b515-81ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8e:64:31:89:5c:60:e9:60:5f:44:46:a6:9f: 9c:bb:77:61:2a:e3:37:ee:0c:cd:e1:b4:4d:da:3e: 72:10:df:c6:64:28:e0:30:c0:d4:9e:30:98:3b:8a: ba:51:0f:b7:27:c1:ae:7c:2f:d9:3b:db:28:04:24: e1:ce:36:cf:3e:5a:2d:6e:1b:d2:99:1c:a4:e8:c3: e8:bb:09:d0:77:f4:81:02:92:06:dd:28:10:cb:28: 5a:71:f6:a6:80:9e:6c:d5:37:46:03:ee:a8:9d:25: 44:40:f2:13:9d:f7:88:42:c5:82:05:bd:e9:57:30: 46:ab:72:b6:ae:ea:61:a1:34:2d:58:2e:57:fb:51: 11:a2:7a:93:e1:a4:f9:b0:2c:8b:ea:d5:cc:8b:00: 8d:e2:66:60:24:bb:eb:50:af:c3:e8:9f:5c:2b:0e: ad:38:00:e1:e8:09:84:e8:98:04:4e:30:63:88:bf: 3c:35:03:5b:06:14:f7:9e:ea:8e:e2:2d:4a:bc:e9: 7a:86:86:06:0f:d6:3b:22:53:b0:0d:86:63:a2:76: 99:76:93:b8:e0:6d:f6:42:e7:c8:50:89:af:0d:c1: 31:15:99:38:9f:39:12:49:a6:e9:1a:db:5f:eb:b5: d6:c7:67:16:c1:06:b8:98:f9:cf:13:f3:14:27:75: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:E4:A1:1E:3D:84:28:33:84:95:1E:49:01:62:6B:33:54:23:E8 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:51:50:59:3c:1b:1d:61:31:ee:d9:2b:fc:ff:b0:ee:7c:23: 87:8a:3b:86:02:a4:70:43:61:11:8d:10:57:d9:47:a3:c6:65: 86:1c:c2:93:4a:fb:01:b0:f2:bf:ea:41:60:84:48:68:d9:29: 24:07:8d:88:db:f3:8c:2f:40:1a:1b:c8:d9:17:c5:e1:b3:90: 40:8d:c3:ac:0e:a5:89:39:cf:0e:fd:1a:54:4b:54:40:11:fd: 3b:c5:8c:64:78:b5:82:09:5e:fe:7f:57:e9:46:cd:78:70:57: fb:18:a4:00:20:e2:c7:36:75:8f:07:78:0c:78:50:17:b0:33: 9f:98:0e:a5:02:17:e3:11:33:a4:c2:f7:cf:0b:70:9a:28:14: 5e:04:dc:fc:e4:76:bd:18:6b:f6:c3:88:55:b7:b8:43:32:34: a5:6f:35:6b:b8:62:7c:26:65:fb:4d:3f:4d:c0:25:67:39:55: f3:5c:ab:c0:73:ab:a0:1a:b6:2a:11:0b:6f:12:8b:35:d3:43: ee:5f:d1:8c:9c:5f:e0:4c:1a:ed:f3:2d:6b:50:92:a3:73:b9: 0e:97:64:b3:f9:09:78:cc:99:9d:da:47:70:4b:89:79:93:40: 2b:63:ec:5a:b0:94:eb:f7:dc:10:61:04:f4:25:5a:6f:cb:f1: a7:5b:18:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICICMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjYwMzAyMTYwNDM3WhcNMjYwMzA5MTYwNDM3WjAYMRYwFAYD VQQDEw02OWE1YjUxNS04MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5o5kMYlcYOlgX0RGpp+cu3dhKuM37gzN4bRN2j5yEN/GZCjgMMDUnjCYO4q6 UQ+3J8GufC/ZO9soBCThzjbPPlotbhvSmRyk6MPouwnQd/SBApIG3SgQyyhacfam gJ5s1TdGA+6onSVEQPITnfeIQsWCBb3pVzBGq3K2ruphoTQtWC5X+1ERonqT4aT5 sCyL6tXMiwCN4mZgJLvrUK/D6J9cKw6tOADh6AmE6JgETjBjiL88NQNbBhT3nuqO 4i1KvOl6hoYGD9Y7IlOwDYZjonaZdpO44G32QufIUImvDcExFZk4nzkSSabpGttf 67XWx2cWwQa4mPnPE/MUJ3VENwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgt5KEe PYQoM4SVHkkBYmszVCPoMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALVFQWTwbHWEx7tkr/P+w7nwjh4o7hgKkcENhEY0QV9lHo8ZlhhzCk0r7AbDy v+pBYIRIaNkpJAeNiNvzjC9AGhvI2RfF4bOQQI3DrA6liTnPDv0aVEtUQBH9O8WM ZHi1ggle/n9X6UbNeHBX+xikACDixzZ1jwd4DHhQF7Azn5gOpQIX4xEzpML3zwtw migUXgTc/OR2vRhr9sOIVbe4QzI0pW81a7hifCZl+00/TcAlZzlV81yrwHOroBq2 KhELbxKLNdND7l/RjJxf4Ewa7fMta1CSo3O5Dpdks/kJeMyZndpHcEuJeZNAK2Ps WrCU6/fcEGEE9CVab8vxp1sY7Q== -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:58 2026 by rpki-client