$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: Ln9/93jGNLacDpO4udCN68s/l/TvbAi4L11xPMiuSWo= Subject key identifier: 02:F7:27:33:C7:35:87:FE:43:38:AA:C1:CE:8D:B8:26:CD:01:C1:A9 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 176E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 1742 Signing time: Fri 06 Mar 2026 16:29:01 +0000 Manifest this update: Fri 06 Mar 2026 16:29:01 +0000 Manifest next update: Fri 13 Mar 2026 16:29:01 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: jnLkb7PMg5BEj9Cmi6PnfG1xtgd7+4CjklqFR2zBbVM=) 2: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=) 3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=) 4: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 16:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5998 (0x176e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Mar 6 16:29:01 2026 GMT Not After : Mar 13 16:29:01 2026 GMT Subject: CN=69ab00cd-9707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:06:0c:ee:a3:81:83:af:fc:f1:85:a3:e0: 3e:ad:9c:3a:77:c2:9d:18:05:14:01:de:6c:78:6a: 62:7f:a0:b9:39:b0:2f:14:e9:8a:b9:54:f5:9c:12: 2c:78:dd:d6:61:10:07:69:0f:d4:a6:13:2b:a2:1c: de:8d:d9:e4:7a:72:3d:92:24:b6:38:87:5f:f8:27: e2:23:43:30:49:e0:46:6c:2b:95:14:ec:78:50:f5: 50:df:29:0c:b8:95:a8:7c:c0:ff:2e:75:fa:d4:f5: 91:e6:67:17:23:70:2a:34:fd:5e:68:75:ae:cb:b0: 75:25:bf:1e:58:a9:8d:01:5e:f5:ed:58:5c:f2:f2: e7:2a:59:48:16:35:17:31:28:ca:ec:db:0e:11:73: a7:11:45:32:0c:06:aa:8a:47:bd:35:ec:48:d4:d0: c8:92:1c:57:31:56:07:59:c6:df:d5:39:4c:ec:34: 1e:7c:f5:d0:67:c3:21:4a:2b:8d:96:a3:06:62:1a: a6:bd:dc:ee:8f:6a:13:28:c1:9d:c3:93:43:6b:c7: d5:66:54:75:d2:f0:f4:da:71:26:f9:c3:7e:f3:81: 8b:ac:7e:60:c3:2f:46:2f:21:e5:55:6b:01:47:3f: ca:1e:76:00:59:9d:1c:73:72:35:df:6c:86:e7:00: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:27:33:C7:35:87:FE:43:38:AA:C1:CE:8D:B8:26:CD:01:C1:A9 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b0:81:ca:41:a7:c9:bb:16:14:28:43:b5:af:e0:ad:52:fd: a6:7c:62:2e:ae:83:2c:7d:a3:c6:1c:77:26:b8:cc:ef:f7:fa: 49:41:cf:ad:ff:0b:1a:a1:a7:c3:79:16:45:87:d6:ef:42:57: 8a:bb:b8:35:1b:0c:8f:4c:95:dd:1b:23:07:a0:52:ae:ca:d9: 54:de:85:ae:84:4d:c6:44:1a:02:be:2b:1d:ef:50:aa:bb:bd: 37:74:3e:49:b8:8f:83:ef:7a:88:33:ab:06:1f:d9:9b:c3:de: 75:11:1b:2f:b1:f8:de:4a:6a:b7:22:1f:49:09:d7:07:85:7d: f9:52:17:d5:b3:d5:95:cf:77:69:c4:5f:4c:8e:58:fe:f2:37: c0:25:d7:78:71:16:04:7d:47:a1:99:34:63:b8:dd:17:19:cd: 2e:33:22:75:1f:df:c9:6b:af:79:2a:8c:01:41:73:2c:e5:76: 0c:e7:0a:89:d6:97:6e:09:76:52:c8:83:79:47:ea:57:d7:c8: ca:d4:61:a6:c7:5d:ee:35:29:e6:66:4f:d0:42:3c:42:08:73: 27:67:ed:34:84:a1:42:85:e7:19:8d:aa:b0:98:a8:4e:c0:8f: 57:17:5f:b0:cb:87:19:a5:48:58:34:2e:d6:51:8f:f8:31:58: 6f:b6:3c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjYwMzA2MTYyOTAxWhcNMjYwMzEzMTYyOTAxWjAYMRYwFAYD VQQDEw02OWFiMDBjZC05NzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17cGDO6jgYOv/PGFo+A+rZw6d8KdGAUUAd5seGpif6C5ObAvFOmKuVT1nBIs eN3WYRAHaQ/UphMrohzejdnkenI9kiS2OIdf+CfiI0MwSeBGbCuVFOx4UPVQ3ykM uJWofMD/LnX61PWR5mcXI3AqNP1eaHWuy7B1Jb8eWKmNAV717Vhc8vLnKllIFjUX MSjK7NsOEXOnEUUyDAaqike9NexI1NDIkhxXMVYHWcbf1TlM7DQefPXQZ8MhSiuN lqMGYhqmvdzuj2oTKMGdw5NDa8fVZlR10vD02nEm+cN+84GLrH5gwy9GLyHlVWsB Rz/KHnYAWZ0cc3I132yG5wA4yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL3JzPH NYf+Qziqwc6NuCbNAcGpMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYrCBykGnybsWFChDta/grVL9pnxiLq6DLH2jxhx3JrjM7/f6SUHPrf8LGqGn w3kWRYfW70JXiru4NRsMj0yV3RsjB6BSrsrZVN6FroRNxkQaAr4rHe9Qqru9N3Q+ SbiPg+96iDOrBh/Zm8PedREbL7H43kpqtyIfSQnXB4V9+VIX1bPVlc93acRfTI5Y /vI3wCXXeHEWBH1HoZk0Y7jdFxnNLjMidR/fyWuveSqMAUFzLOV2DOcKidaXbgl2 UsiDeUfqV9fIytRhpsdd7jUp5mZP0EI8QghzJ2ftNIShQoXnGY2qsJioTsCPVxdf sMuHGaVIWDQu1lGP+DFYb7Y8mQ== -----END CERTIFICATE-----Generated at Sun Mar 8 08:24:19 2026 by rpki-client