$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft File: juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json) Hash identifier: EujnCyUnTDSYf47hiLWoqcXcH9kG99F7VjLO2Z3hx20= Subject key identifier: 8A:45:BA:B3:E7:21:DC:93:39:33:65:B5:59:7F:54:47:48:71:FE:C8 Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 Certificate issuer: /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft Manifest number: 23 Signing time: Mon 02 Mar 2026 19:41:10 +0000 Manifest this update: Mon 02 Mar 2026 19:41:10 +0000 Manifest next update: Mon 09 Mar 2026 19:41:10 +0000 Files and hashes: 1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: s+2LoQkQ5LattpuJkql3b2VM7UomPNmWm/7SM+wQ++8=) 2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 19:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Validity Not Before: Mar 2 19:41:10 2026 GMT Not After : Mar 9 19:41:10 2026 GMT Subject: CN=69a5e7d6-3df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:2d:f4:b5:d9:84:bd:3c:56:21:3c:14:e1: a0:00:c0:60:cf:9a:74:a1:1d:75:b1:50:84:95:6c: 2d:e2:94:00:3a:11:9c:23:b7:63:a4:11:a1:39:62: 4b:eb:d4:98:3c:0c:77:10:68:4f:31:ba:b3:cb:94: 9e:b9:03:54:dc:e4:b5:07:06:77:45:aa:a0:18:9a: e5:f4:8f:68:3e:85:45:d1:d4:e1:80:04:77:28:7c: ff:ed:58:7d:00:b3:e7:1b:ef:06:3b:69:81:c0:54: d3:b4:fb:29:d9:c7:df:94:c7:fa:b2:6d:f9:16:0d: a8:81:14:08:81:46:3e:d3:0c:6c:b0:30:51:3b:11: 8e:91:27:2a:98:a6:02:6d:0e:a0:41:0a:a2:bf:f5: 84:9d:73:1b:85:7a:c1:fd:b1:cb:6a:f3:e0:dc:d0: a8:41:ab:b9:af:d5:35:fc:1f:1b:e6:04:da:d9:a7: 9d:e6:14:0c:7a:85:21:f8:39:e7:a1:38:6f:d2:e6: 37:ee:55:78:a9:8c:7e:5c:88:82:e9:96:d8:1b:d8: 65:07:1d:40:0b:0e:3e:d8:e3:f7:26:74:c4:d3:79: 4b:ef:95:2f:d0:b2:5a:92:fe:18:03:0c:04:cc:e6: 1b:c2:05:56:8f:be:54:ae:32:5e:51:70:50:05:ce: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:45:BA:B3:E7:21:DC:93:39:33:65:B5:59:7F:54:47:48:71:FE:C8 X509v3 Authority Key Identifier: keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:76:f9:4a:a1:6f:03:90:cb:d3:51:46:42:1e:0b:7b:65:76: 04:e3:18:09:38:41:1b:5a:9f:6c:db:f6:16:8e:55:7a:dc:33: c3:1b:75:2b:9f:83:79:29:83:8d:af:87:17:db:de:03:ea:df: 00:61:2e:94:3f:b5:d2:d2:eb:ba:46:0e:08:52:15:a2:f1:3d: 3b:d1:66:35:c2:8d:37:8e:57:af:91:17:7a:09:b0:62:10:ad: 6d:62:61:b4:92:14:44:37:33:64:ac:f3:12:b5:b9:ea:c5:99: a7:7c:1c:e7:53:41:34:14:88:f2:55:c3:4d:96:df:6a:6a:37: d1:5f:82:f6:a5:06:92:8c:d3:c7:80:7a:8a:61:89:b0:3a:52: ad:6c:b8:c5:33:e5:ce:d6:17:83:b5:d5:c9:11:aa:94:e1:b9: df:04:83:ff:00:63:b8:1f:32:e6:fe:50:27:d7:e4:c2:75:21: d6:b7:64:9a:8e:1b:f7:df:60:0e:26:1c:df:76:1e:ad:b8:fc: da:cf:ff:08:e7:d2:bf:f6:14:4e:75:64:94:c9:be:fb:f0:95: 01:c2:30:38:6e:36:37:13:a4:be:7f:ba:11:13:fb:2c:4a:13: 2d:af:41:c3:10:49:f8:f7:ec:8f:00:d1:6c:e0:43:d7:33:84: 3e:93:f6:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MURFMDExMC8GA1UEBRMoOEVFQ0IxMTk4MEVEMTE1MzRGNDE5MkY0REUwOEQxQjJD REI5MTZDODAeFw0yNjAzMDIxOTQxMTBaFw0yNjAzMDkxOTQxMTBaMBgxFjAUBgNV BAMTDTY5YTVlN2Q2LTNkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX+C30tdmEvTxWITwU4aAAwGDPmnShHXWxUISVbC3ilAA6EZwjt2OkEaE5Ykvr 1Jg8DHcQaE8xurPLlJ65A1Tc5LUHBndFqqAYmuX0j2g+hUXR1OGABHcofP/tWH0A s+cb7wY7aYHAVNO0+ynZx9+Ux/qybfkWDaiBFAiBRj7TDGywMFE7EY6RJyqYpgJt DqBBCqK/9YSdcxuFesH9sctq8+Dc0KhBq7mv1TX8HxvmBNrZp53mFAx6hSH4Oeeh OG/S5jfuVXipjH5ciILpltgb2GUHHUALDj7Y4/cmdMTTeUvvlS/QslqS/hgDDATM 5hvCBVaPvlSuMl5RcFAFzjZxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUikW6s+ch 3JM5M2W1WX9UR0hx/sgwHwYDVR0jBBgwFoAUjuyxGYDtEVNPQZL03gjRss25Fsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxREUwL0VCQTk4REY0RUMy MjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZOUFFaTDAzZ2pSc3MyNUZz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvanV5eEdZRHRFVk5QUVpMMDNnalJzczI1RnNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx REUwL0VCQTk4REY0RUMyMjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZO UFFaTDAzZ2pSc3MyNUZzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAodvlKoW8DkMvTUUZCHgt7ZXYE4xgJOEEbWp9s2/YWjlV63DPDG3Urn4N5KYON r4cX294D6t8AYS6UP7XS0uu6Rg4IUhWi8T070WY1wo03jlevkRd6CbBiEK1tYmG0 khRENzNkrPMStbnqxZmnfBznU0E0FIjyVcNNlt9qajfRX4L2pQaSjNPHgHqKYYmw OlKtbLjFM+XO1heDtdXJEaqU4bnfBIP/AGO4HzLm/lAn1+TCdSHWt2Sajhv332AO Jhzfdh6tuPzaz/8I59K/9hROdWSUyb778JUBwjA4bjY3E6S+f7oRE/ssShMtr0HD EEn49+yPANFs4EPXM4Q+k/Yp -----END CERTIFICATE-----Generated at Wed Mar 4 08:22:23 2026 by rpki-client