$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: Z8EHtpQOq6u+baZPVT72wDLl3x/uNiK4MbP4EkQvZu0= Subject key identifier: BD:3F:F2:71:E6:8A:E1:81:47:B2:D3:6E:70:9F:FC:16:86:C9:9D:80 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 024B Signing time: Tue 31 Mar 2026 02:04:05 +0000 Manifest this update: Tue 31 Mar 2026 02:04:04 +0000 Manifest next update: Tue 07 Apr 2026 02:04:04 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: vqp1pFhIClOl9MefQi44+IHlZEUN9G17nTP4VP04tEM=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: iSo5vuWbG03RQHVz/yWnx8Hzh3kOIF3ZXYUxF1Dp2jI=) 3: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: 5QEuxCPhlNT5MkVim+JlJUzX9cGTTGSeehOabrAMH3w=) 4: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: u9cehntkmN+Per/glhjpUt2xiu+ij4ZxhwGHfN+ijAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Mar 31 02:04:04 2026 GMT Not After : Apr 7 02:04:04 2026 GMT Subject: CN=69cb2b95-8889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:a2:fb:f9:ba:5f:97:25:7a:85:b4:00:ba: 30:7f:a2:45:a2:d0:9b:b7:c8:07:69:fa:84:9b:14: 1f:c7:33:35:ab:e7:a8:74:8d:c3:34:b8:f2:02:aa: d6:4f:19:20:ad:ad:b9:2a:0c:69:20:81:ee:21:ed: d7:4e:6d:b1:2a:72:1b:91:c3:df:d3:23:0c:cf:49: 88:42:41:fb:c3:a3:24:f9:17:cc:48:60:54:2d:b7: 62:22:23:b3:05:19:81:be:bb:72:d9:9e:e5:80:9c: c3:1d:22:1b:51:d2:49:57:19:3b:d4:66:8b:75:1f: 8d:d8:41:f6:d5:1f:32:38:24:2a:9c:a5:7f:bf:3f: 05:ac:5a:8f:61:23:4a:4c:bb:1e:ea:f3:c3:10:39: 64:b6:9e:1e:17:c8:2a:53:4d:b6:e8:72:2c:d3:76: 45:10:9e:75:f0:bd:89:90:15:aa:f2:1f:fe:cf:54: 96:a7:ff:d8:ff:0a:e0:e8:64:e7:87:9d:1d:f4:9d: 45:b0:c5:22:3e:d7:6a:7f:88:b7:1e:94:b2:de:15: ea:a2:d8:99:ca:cd:56:da:41:f2:21:8d:ca:6e:46: 50:0c:86:b6:91:26:3f:1c:15:d7:9a:74:ed:4e:09: 64:06:61:9e:94:e4:7b:ac:e0:6b:10:d4:b9:78:97: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:F2:71:E6:8A:E1:81:47:B2:D3:6E:70:9F:FC:16:86:C9:9D:80 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e6:2d:5f:72:01:fe:83:4b:9d:0b:5a:4f:bf:84:b6:56:08: 0e:db:fe:fa:13:e7:d5:6d:5d:2a:0e:04:71:63:73:0f:9e:e1: fb:f8:95:fe:23:80:26:f1:4c:e4:4d:d0:8c:ce:84:b0:2a:53: f0:c6:06:f3:88:4e:44:89:d0:68:74:15:f5:1e:fa:a7:9c:d6: fe:52:ba:7f:6f:4d:23:9f:3b:7d:4e:f1:ca:1e:d7:02:d8:49: 6b:0b:5f:a9:1f:26:ca:46:12:92:0f:86:90:da:64:b2:55:e5: a3:1a:e0:81:a2:00:4a:81:6e:7b:91:b0:9e:e4:7e:2f:54:53: 3f:74:4d:13:5a:e8:93:ca:d4:67:d0:4c:91:18:63:b4:06:6f: 40:01:66:e5:a2:d2:d0:70:e9:0b:dc:93:cd:dc:d8:f1:1a:a7: 8a:d1:24:bf:fc:7c:d5:d5:0b:b9:59:db:fe:7d:d6:cc:19:28: 0f:93:ef:3d:40:b5:b4:52:63:38:16:76:97:27:3a:74:b0:f2: 5f:ee:b9:ad:0c:c2:0c:64:ca:e9:26:61:a8:58:55:11:21:1b: af:3e:68:00:f2:72:94:10:3b:33:2b:85:c4:01:4a:d8:5c:d1: 59:a0:46:ca:e5:d5:1d:1b:44:58:5d:26:da:fd:44:a5:7e:98: 46:ab:f5:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwMzMxMDIwNDA0WhcNMjYwNDA3MDIwNDA0WjAYMRYwFAYD VQQDEw02OWNiMmI5NS04ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xSi+/m6X5cleoW0ALowf6JFotCbt8gHafqEmxQfxzM1q+eodI3DNLjyAqrW Txkgra25KgxpIIHuIe3XTm2xKnIbkcPf0yMMz0mIQkH7w6Mk+RfMSGBULbdiIiOz BRmBvrty2Z7lgJzDHSIbUdJJVxk71GaLdR+N2EH21R8yOCQqnKV/vz8FrFqPYSNK TLse6vPDEDlktp4eF8gqU0226HIs03ZFEJ518L2JkBWq8h/+z1SWp//Y/wrg6GTn h50d9J1FsMUiPtdqf4i3HpSy3hXqotiZys1W2kHyIY3KbkZQDIa2kSY/HBXXmnTt TglkBmGelOR7rOBrENS5eJcHrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0/8nHm iuGBR7LTbnCf/BaGyZ2AMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd+YtX3IB/oNLnQtaT7+EtlYIDtv++hPn1W1dKg4EcWNzD57h+/iV/iOAJvFM 5E3QjM6EsCpT8MYG84hORInQaHQV9R76p5zW/lK6f29NI587fU7xyh7XAthJawtf qR8mykYSkg+GkNpkslXloxrggaIASoFue5GwnuR+L1RTP3RNE1rok8rUZ9BMkRhj tAZvQAFm5aLS0HDpC9yTzdzY8RqnitEkv/x81dULuVnb/n3WzBkoD5PvPUC1tFJj OBZ2lyc6dLDyX+65rQzCDGTK6SZhqFhVESEbrz5oAPJylBA7MyuFxAFK2FzRWaBG yuXVHRtEWF0m2v1EpX6YRqv1ZA== -----END CERTIFICATE-----Generated at Tue Mar 31 04:24:28 2026 by rpki-client