$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: Ga5n+ipE0G1UeIWSD+zB1LGL3z+V8JcSKgMXd66aqIc= Subject key identifier: 09:BD:19:DF:BB:08:7B:51:A7:B1:98:0F:70:61:77:B2:55:78:74:5A Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 0281 Signing time: Mon 02 Mar 2026 01:00:03 +0000 Manifest this update: Mon 02 Mar 2026 01:00:01 +0000 Manifest next update: Mon 09 Mar 2026 01:00:01 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: x2kUwavSHoDIKjC7IiY09iVAr4k393NV56jBB512zmA=) 2: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=) 3: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=) 4: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Mar 2 01:00:01 2026 GMT Not After : Mar 9 01:00:01 2026 GMT Subject: CN=69a4e113-5d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a6:e5:75:4d:f7:ae:1e:3c:fc:cd:b8:f2:f3: 25:d2:4c:08:56:7d:11:de:ce:3f:0a:bd:1a:74:f9: f6:5a:ea:3a:5f:3f:3e:54:5d:39:f2:6e:bb:96:11: 45:74:eb:11:a6:4c:9e:e8:6a:3f:01:da:44:49:51: 60:88:3c:50:da:b0:b2:06:2d:9d:0d:5a:41:22:6e: 04:a6:67:00:5c:9b:43:c1:7e:c5:bd:c6:1e:e1:49: 79:42:db:fa:dc:af:20:1b:54:d4:4a:f7:48:5f:53: df:a7:eb:b0:36:fe:46:6d:b5:62:32:ae:fd:39:09: cb:03:ba:b7:ca:5b:93:56:44:e2:ad:26:5f:c4:dd: a6:ad:52:71:87:50:b3:9f:62:f7:89:fa:5d:76:ed: 18:7d:43:00:76:e9:85:ed:76:fe:6c:c5:68:84:5c: 8e:8b:8b:75:b5:4a:bc:87:67:02:a4:8c:bc:da:ca: dd:97:81:32:66:e2:7e:90:9d:55:db:9b:a3:20:1a: 6f:cd:e6:97:c0:e8:b2:2f:0c:0f:30:9d:e3:d3:f4: 84:cc:2f:8b:ab:f2:e8:20:36:0a:3d:9d:78:8d:fe: 5e:28:5d:3b:b4:8a:99:80:24:93:80:8c:ef:9a:79: b3:4b:df:95:43:ba:93:87:85:1c:05:c8:c2:2c:ff: 72:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BD:19:DF:BB:08:7B:51:A7:B1:98:0F:70:61:77:B2:55:78:74:5A X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:70:b2:35:52:09:26:bc:9a:21:1f:82:17:70:a6:fc:33:7f: 39:c4:9b:b4:0f:28:49:82:a0:c9:47:f9:d8:2a:9a:fa:9e:73: c6:5a:eb:87:a5:af:4e:73:dc:1e:3c:1e:38:07:04:17:6a:e5: 94:a2:19:aa:55:d9:9b:a8:e8:24:e0:a0:d7:08:ef:cc:11:05: 37:8a:4d:69:ff:47:52:af:cb:39:7d:20:e9:da:90:f2:1b:b6: ce:1f:1a:57:3c:66:0d:fe:dd:fb:fa:4d:fc:75:85:72:e6:f4: bb:c8:d4:94:01:4b:7c:7d:08:eb:a3:2e:85:aa:c5:a3:d1:44: c3:ea:68:fe:f9:c6:5f:87:de:7d:df:e3:31:fa:45:88:89:69: f3:6e:02:7a:f4:c4:a7:eb:43:b3:d1:29:56:93:2d:4c:a7:f2: 73:9b:5a:db:13:88:20:bc:e4:f1:20:cc:a1:ee:9f:d7:3c:d3: 55:51:07:64:24:3d:e0:f1:19:28:02:e1:59:19:37:cf:f9:0d: b8:d4:28:28:73:5f:22:95:72:3d:37:24:e6:38:40:58:2f:1b: 3b:2d:cb:13:d5:c1:23:84:f4:1e:6c:a1:86:0e:50:05:5e:2b: bc:54:1b:bb:78:c8:24:4d:62:cb:02:f2:54:e3:5f:f4:34:28: 14:53:ed:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjYwMzAyMDEwMDAxWhcNMjYwMzA5MDEwMDAxWjAYMRYwFAYD VQQDEw02OWE0ZTExMy01ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KbldU33rh48/M248vMl0kwIVn0R3s4/Cr0adPn2Wuo6Xz8+VF058m67lhFF dOsRpkye6Go/AdpESVFgiDxQ2rCyBi2dDVpBIm4EpmcAXJtDwX7FvcYe4Ul5Qtv6 3K8gG1TUSvdIX1Pfp+uwNv5GbbViMq79OQnLA7q3yluTVkTirSZfxN2mrVJxh1Cz n2L3ifpddu0YfUMAdumF7Xb+bMVohFyOi4t1tUq8h2cCpIy82srdl4EyZuJ+kJ1V 25ujIBpvzeaXwOiyLwwPMJ3j0/SEzC+Lq/LoIDYKPZ14jf5eKF07tIqZgCSTgIzv mnmzS9+VQ7qTh4UcBcjCLP9y2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAm9Gd+7 CHtRp7GYD3Bhd7JVeHRaMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGnCyNVIJJryaIR+CF3Cm/DN/OcSbtA8oSYKgyUf52Cqa+p5zxlrrh6WvTnPc HjweOAcEF2rllKIZqlXZm6joJOCg1wjvzBEFN4pNaf9HUq/LOX0g6dqQ8hu2zh8a VzxmDf7d+/pN/HWFcub0u8jUlAFLfH0I66MuharFo9FEw+po/vnGX4fefd/jMfpF iIlp824CevTEp+tDs9EpVpMtTKfyc5ta2xOIILzk8SDMoe6f1zzTVVEHZCQ94PEZ KALhWRk3z/kNuNQoKHNfIpVyPTck5jhAWC8bOy3LE9XBI4T0Hmyhhg5QBV4rvFQb u3jIJE1iywLyVONf9DQoFFPtGA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:41 2026 by rpki-client