$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: Es8db1q3BAZZK8ROhBdGBRl5hcOC8bQ772L+Nk9QMCk= Subject key identifier: 4B:A8:68:89:34:79:99:51:1C:2A:1E:64:7E:7B:F2:FD:46:2C:04:51 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 02FF Signing time: Sun 01 Mar 2026 02:06:04 +0000 Manifest this update: Sun 01 Mar 2026 02:06:03 +0000 Manifest next update: Sun 08 Mar 2026 02:06:03 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: PZMwDduAuPQlbaHG2XP8h71R8FPOkT3FWpUeMJmBKK8=) 2: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: zVP6Lu1oo3kp6gcWozNx0s9g3feGp/J0qR06fS1o9cs=) 3: B502B0AE799311EE87452E15C4F9AE02.roa (hash: Af+2fxsg1OVRliv2YbtkhhRaDDPkEDX9Fcaj9HwzrTs=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: +LEU78x/LWwi5ap6sqbnvORUUGIW3bkmD1+ul2+yf4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Mar 1 02:06:03 2026 GMT Not After : Mar 8 02:06:03 2026 GMT Subject: CN=69a39f0b-2f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:71:5c:ff:42:a4:61:fe:1f:87:be:c7:bc: 88:18:96:8c:9f:f7:46:ed:08:ce:fa:97:e6:5b:e9: e7:6e:f7:39:4c:69:be:23:94:74:e7:0f:9b:03:8a: d0:fd:20:1d:c8:8a:b5:77:b7:c9:bf:ea:09:18:c6: 57:6e:58:1f:63:ab:b7:26:92:f8:11:c9:09:9b:6f: 50:ac:70:3b:21:99:c4:20:8c:95:72:5a:aa:da:43: ea:f3:1e:f3:fb:02:80:98:ef:c2:87:aa:4e:4a:a1: 7f:28:3e:d5:51:25:30:24:78:e0:5a:b5:70:5f:0d: 63:b1:2b:3a:4d:b5:ad:f3:96:b8:0c:38:07:06:8a: 35:a4:e4:16:56:34:39:ff:77:1a:76:27:5d:5f:4c: eb:b5:65:dc:c8:7f:75:10:b5:97:e9:d5:5e:ae:d7: fc:1a:ff:2f:f5:df:f1:ae:fe:64:67:c6:63:c8:71: a9:df:ac:d9:47:ed:0d:07:08:dc:0d:a6:a7:01:c8: 9d:a0:19:d0:06:cb:37:5f:d6:3c:32:ea:d4:f0:f1: a6:95:5d:2b:09:1c:a8:61:2b:cc:f1:c3:a6:6d:08: 56:fc:b4:da:75:9b:81:f2:df:69:bd:fb:2f:a5:b2: 98:ad:85:43:37:9e:0e:7e:ed:26:28:06:de:8d:15: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A8:68:89:34:79:99:51:1C:2A:1E:64:7E:7B:F2:FD:46:2C:04:51 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:fc:79:49:77:eb:78:db:a7:43:78:ef:f9:57:37:89:15:e4: 35:c6:5b:5b:9c:8d:8b:1b:9b:f0:4c:65:37:43:1d:a0:4e:16: 87:94:20:9e:ae:15:ec:df:ac:10:f2:eb:e7:45:ed:c3:d3:65: f9:8b:c4:bf:e2:a3:76:66:83:21:c9:64:ec:1b:a8:17:e5:c5: 17:0f:01:5e:23:a9:ee:98:37:ba:70:77:cc:85:8e:c1:96:73: 89:9c:15:c6:42:64:18:6c:a1:52:34:90:1b:3e:8b:8b:6f:09: 69:84:e8:1c:c7:0c:26:96:74:10:47:50:a8:d8:10:11:1f:40: 5f:1a:4c:98:cc:4e:40:ac:66:5f:87:45:57:3a:a1:ad:fc:b0: 8d:5a:8d:60:10:0c:54:ce:1b:54:1b:33:bf:ee:b7:d1:8f:f3: 93:89:50:16:49:04:24:18:a1:44:08:26:78:b2:ac:8d:70:85: b5:0f:07:21:75:09:e6:d7:21:1d:3b:0e:ca:4e:3c:e2:3c:4a: 0c:4b:79:6a:b3:15:ac:24:e1:1e:5f:16:1e:3e:cb:91:01:34: 73:27:df:c1:af:d6:f4:f6:82:5b:de:07:d8:7c:40:11:60:e6: a0:ea:13:df:44:5e:d7:24:f3:cd:c0:4c:ee:7d:75:1e:73:78: c7:89:58:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjYwMzAxMDIwNjAzWhcNMjYwMzA4MDIwNjAzWjAYMRYwFAYD VQQDDA02OWEzOWYwYi0yZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAigNxXP9CpGH+H4e+x7yIGJaMn/dG7QjO+pfmW+nnbvc5TGm+I5R05w+bA4rQ /SAdyIq1d7fJv+oJGMZXblgfY6u3JpL4EckJm29QrHA7IZnEIIyVclqq2kPq8x7z +wKAmO/Ch6pOSqF/KD7VUSUwJHjgWrVwXw1jsSs6TbWt85a4DDgHBoo1pOQWVjQ5 /3cadiddX0zrtWXcyH91ELWX6dVertf8Gv8v9d/xrv5kZ8ZjyHGp36zZR+0NBwjc DaanAcidoBnQBss3X9Y8MurU8PGmlV0rCRyoYSvM8cOmbQhW/LTadZuB8t9pvfsv pbKYrYVDN54Ofu0mKAbejRUx/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuoaIk0 eZlRHCoeZH578v1GLARRMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFPx5SXfreNunQ3jv+Vc3iRXkNcZbW5yNixub8ExlN0MdoE4Wh5Qgnq4V7N+s EPLr50Xtw9Nl+YvEv+KjdmaDIclk7BuoF+XFFw8BXiOp7pg3unB3zIWOwZZziZwV xkJkGGyhUjSQGz6Li28JaYToHMcMJpZ0EEdQqNgQER9AXxpMmMxOQKxmX4dFVzqh rfywjVqNYBAMVM4bVBszv+630Y/zk4lQFkkEJBihRAgmeLKsjXCFtQ8HIXUJ5tch HTsOyk484jxKDEt5arMVrCThHl8WHj7LkQE0cyffwa/W9PaCW94H2HxAEWDmoOoT 30Re1yTzzcBM7n11HnN4x4lYig== -----END CERTIFICATE-----Generated at Sun Mar 1 23:08:24 2026 by rpki-client