$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: H3DnPIT2XLcgsbtzuy4ZpBunn8Xk+xpXX/+ml9DkIts= Subject key identifier: 9A:D0:FA:AE:A2:79:D7:24:67:D0:6F:E9:E7:80:B8:57:F8:CA:1A:EC Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 27 Signing time: Tue 03 Mar 2026 08:27:52 +0000 Manifest this update: Tue 03 Mar 2026 08:27:51 +0000 Manifest next update: Tue 10 Mar 2026 08:27:51 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: z7mXZF8gDd34+6JXsgFbS+26ezm5FycGbHa5B7Wp3jI=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Mar 3 08:27:51 2026 GMT Not After : Mar 10 08:27:51 2026 GMT Subject: CN=69a69b87-aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:33:1c:eb:ff:07:b4:91:f5:aa:a9:0f:d4: 46:39:22:93:89:9e:d2:6a:39:d4:ad:d6:0e:c1:3d: b0:c4:fd:ef:c8:15:85:e2:2b:25:10:82:14:91:40: 8d:07:d2:c5:82:59:33:4f:20:cf:49:8a:69:e6:08: c8:81:ff:8a:61:3b:6c:15:35:15:e5:c5:ac:5d:40: 95:75:ff:6e:a9:97:93:77:48:fa:2e:c4:36:8d:22: f7:48:90:a7:41:10:63:fa:43:68:bd:49:3c:2e:28: db:b3:eb:0b:c0:cc:41:a6:13:16:44:99:5e:b1:c4: 04:d1:7d:22:18:da:4b:b2:b8:6f:94:f1:0d:75:f7: b2:6a:26:b2:f0:3a:8d:e4:bb:ae:9b:6f:49:f1:1e: 7c:d3:35:52:a5:86:d3:23:59:eb:44:d7:78:36:a2: 98:29:d9:91:c0:26:e8:6a:34:36:51:2f:8d:78:ce: 31:25:83:77:e5:2f:27:c5:fd:c3:c5:27:32:df:4c: bb:6e:68:cb:70:c2:e2:c6:0e:87:a7:55:1f:02:5f: 34:d1:37:ae:21:8d:ec:32:1a:c4:c6:d2:68:9c:93: 76:13:9d:68:ae:52:a6:ff:02:ae:8d:29:ea:06:0b: 12:05:a7:91:54:c1:c1:55:ed:c9:e4:56:8b:40:9a: 3f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D0:FA:AE:A2:79:D7:24:67:D0:6F:E9:E7:80:B8:57:F8:CA:1A:EC X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:45:f9:59:22:e0:22:fb:0b:de:7c:6b:2c:e0:37:9b:c7:9c: fe:e0:90:a1:07:d7:46:f5:2e:b0:bb:1a:e9:85:99:23:de:83: c1:9b:49:d8:22:68:46:61:17:bb:d8:60:de:58:51:2c:65:57: fe:30:e1:e4:6e:83:50:96:e3:97:77:f9:61:de:ff:3c:26:ab: 43:93:e1:e5:19:8e:21:1c:07:f8:80:96:8d:b9:c3:c0:51:e7: f6:20:e7:c1:db:8c:7d:f7:8e:5b:64:dd:c3:60:87:2e:b7:d2: 13:62:c9:f5:a0:c1:71:c8:5c:05:46:95:48:d6:0f:93:a2:fb: cb:08:1d:1c:cb:03:98:00:60:c2:a4:0c:1c:1c:88:c3:12:17: 26:9a:2d:5a:33:5f:86:fa:5e:c6:19:51:86:0a:e8:b8:e5:b0: 8e:d5:2f:29:b2:31:b3:8f:af:ac:1d:42:0a:ab:2b:16:73:52: b5:5a:ab:e3:66:7a:42:ef:a2:06:eb:36:c6:6e:50:73:40:ac: a4:ff:7c:06:9b:0f:a3:dd:59:c8:31:f9:63:61:f4:8b:8a:4c: da:e0:3f:b8:ad:90:bf:5f:c2:c9:da:ac:43:cd:aa:4c:bf:78: 45:7f:1d:2c:06:dc:1d:b5:d8:06:65:2a:4b:34:2f:a0:25:f2: 70:99:10:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB NjcyMDg1RTAeFw0yNjAzMDMwODI3NTFaFw0yNjAzMTAwODI3NTFaMBgxFjAUBgNV BAMTDTY5YTY5Yjg3LWFhYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzeDMc6/8HtJH1qqkP1EY5IpOJntJqOdSt1g7BPbDE/e/IFYXiKyUQghSRQI0H 0sWCWTNPIM9JimnmCMiB/4phO2wVNRXlxaxdQJV1/26pl5N3SPouxDaNIvdIkKdB EGP6Q2i9STwuKNuz6wvAzEGmExZEmV6xxATRfSIY2kuyuG+U8Q1197JqJrLwOo3k u66bb0nxHnzTNVKlhtMjWetE13g2opgp2ZHAJuhqNDZRL414zjElg3flLyfF/cPF JzLfTLtuaMtwwuLGDoenVR8CXzTRN64hjewyGsTG0mick3YTnWiuUqb/Aq6NKeoG CxIFp5FUwcFV7cnkVotAmj9jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmtD6rqJ5 1yRn0G/p54C4V/jKGuwwHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRI RkVkMGlMVkdGdjZaeUNGNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBzRflZIuAi+wvefGss4Debx5z+4JChB9dG9S6wuxrphZkj3oPBm0nYImhGYRe7 2GDeWFEsZVf+MOHkboNQluOXd/lh3v88JqtDk+HlGY4hHAf4gJaNucPAUef2IOfB 24x9945bZN3DYIcut9ITYsn1oMFxyFwFRpVI1g+TovvLCB0cywOYAGDCpAwcHIjD Ehcmmi1aM1+G+l7GGVGGCui45bCO1S8psjGzj6+sHUIKqysWc1K1WqvjZnpC76IG 6zbGblBzQKyk/3wGmw+j3VnIMfljYfSLikza4D+4rZC/X8LJ2qxDzapMv3hFfx0s BtwdtdgGZSpLNC+gJfJwmRDV -----END CERTIFICATE-----Generated at Wed Mar 4 08:24:08 2026 by rpki-client