$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: Uxgdkolzl1bxNcQwG1qqaAYhCLDLzlCBYiXIo8KEc3g= Subject key identifier: D4:76:41:78:C6:60:C4:1D:98:93:C7:B9:C0:27:30:83:0A:00:59:2B Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 3542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 352D Signing time: Mon 16 Mar 2026 15:13:16 +0000 Manifest this update: Mon 16 Mar 2026 15:13:15 +0000 Manifest next update: Mon 23 Mar 2026 15:13:15 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: wv7HqZmVFm9GabIcvQnMvFIDkBOD4yfrBUl4Vdrj4QE=) 2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ofcFpR0dG4lGMFPSarAEqgGjniCtEUFFNDbSn2FRdQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 15:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13634 (0x3542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Mar 16 15:13:15 2026 GMT Not After : Mar 23 15:13:15 2026 GMT Subject: CN=69b81e0c-4506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:6f:12:42:e7:68:67:72:e3:c8:d8:63:55: 98:42:0a:03:db:14:e6:15:a9:d4:ef:c0:aa:97:42: dd:63:ef:0c:06:dc:c4:84:fc:40:55:83:49:bc:cf: a6:ba:98:a2:5d:eb:86:07:7d:cf:3c:48:61:81:5d: 26:e4:1f:f5:56:ef:ef:d0:49:ad:d0:df:ed:f5:9f: 13:35:8d:86:72:d5:df:e8:aa:68:a6:b8:cb:4e:fb: 73:12:1a:4f:ed:8b:8c:8a:b3:96:7e:72:ab:b7:f1: 61:75:b8:1d:a9:53:96:74:87:d2:83:7f:ed:a1:dc: 21:e5:e7:87:b4:62:4e:61:1a:fa:f5:fe:2c:63:e3: 41:a4:b5:95:c5:e5:11:12:89:02:ad:aa:4f:e3:50: 9b:d4:f0:50:81:bf:bc:43:2e:f2:f0:b2:3b:22:ca: ad:02:e3:bc:de:2f:a1:23:f5:c9:aa:bb:18:e3:51: d1:aa:97:e4:d9:3c:81:fa:55:f8:fc:b0:80:62:7e: aa:59:cc:5c:99:77:b9:d9:6d:07:92:d1:05:0a:1d: 44:51:38:03:13:d2:55:98:96:32:e5:92:03:06:a6: fe:03:2b:af:a8:af:07:87:22:87:b4:b0:ef:25:42: 18:a4:b1:58:9f:ef:d1:a7:f8:67:27:d6:9a:8c:27: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:41:78:C6:60:C4:1D:98:93:C7:B9:C0:27:30:83:0A:00:59:2B X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d9:1e:9d:ed:15:e0:10:15:92:85:97:1c:50:e2:3e:e9:d6: a8:fc:4b:69:8a:37:27:3c:48:af:0c:b3:b5:79:b4:87:53:db: 61:07:b8:8e:25:09:96:e2:b8:9c:5f:55:ce:f4:56:6b:90:3d: 19:db:f2:e9:c4:f3:8a:48:9c:89:38:97:d2:1d:bf:14:b3:48: c5:ff:96:2a:ac:96:73:14:4b:54:69:c0:ce:e0:d8:c8:fc:b5: 3b:8a:2c:9d:13:d8:d1:3a:ee:a3:af:dd:58:6c:7d:9f:f6:8a: a8:dd:6b:27:09:cb:39:50:74:61:ce:17:cd:33:dc:56:11:34: 2b:1e:bb:47:11:1a:99:8f:ee:a3:b4:9d:43:8b:f1:4b:a0:6b: 23:1a:48:c0:44:cf:d8:41:ba:12:3c:6b:b1:00:8f:6d:b1:93: 28:68:cd:bc:35:64:f9:bb:65:60:ac:c4:91:82:53:5d:1c:0d: 6e:72:40:02:01:c6:ef:b5:ef:26:1a:3e:ef:e7:b5:73:4c:46: 28:c1:8e:b2:5b:96:1c:5b:19:fa:87:e3:e3:d8:d3:63:d3:74: bb:c7:3f:f3:97:bf:00:6d:0a:2e:7e:7e:74:17:b5:fb:15:53: 0d:6e:8a:cf:15:b7:45:ed:92:6a:ae:f5:fc:1c:8d:ca:df:12: fd:13:52:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjYwMzE2MTUxMzE1WhcNMjYwMzIzMTUxMzE1WjAYMRYwFAYD VQQDEw02OWI4MWUwYy00NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1FvEkLnaGdy48jYY1WYQgoD2xTmFanU78Cql0LdY+8MBtzEhPxAVYNJvM+m upiiXeuGB33PPEhhgV0m5B/1Vu/v0Emt0N/t9Z8TNY2GctXf6KpoprjLTvtzEhpP 7YuMirOWfnKrt/FhdbgdqVOWdIfSg3/todwh5eeHtGJOYRr69f4sY+NBpLWVxeUR EokCrapP41Cb1PBQgb+8Qy7y8LI7IsqtAuO83i+hI/XJqrsY41HRqpfk2TyB+lX4 /LCAYn6qWcxcmXe52W0HktEFCh1EUTgDE9JVmJYy5ZIDBqb+AyuvqK8HhyKHtLDv JUIYpLFYn+/Rp/hnJ9aajCdmhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNR2QXjG YMQdmJPHucAnMIMKAFkrMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMNkene0V4BAVkoWXHFDiPunWqPxLaYo3JzxIrwyztXm0h1PbYQe4jiUJluK4 nF9VzvRWa5A9Gdvy6cTzikiciTiX0h2/FLNIxf+WKqyWcxRLVGnAzuDYyPy1O4os nRPY0Truo6/dWGx9n/aKqN1rJwnLOVB0Yc4XzTPcVhE0Kx67RxEamY/uo7SdQ4vx S6BrIxpIwETP2EG6EjxrsQCPbbGTKGjNvDVk+btlYKzEkYJTXRwNbnJAAgHG77Xv Jho+7+e1c0xGKMGOsluWHFsZ+ofj49jTY9N0u8c/85e/AG0KLn5+dBe1+xVTDW6K zxW3Re2Saq71/ByNyt8S/RNSPg== -----END CERTIFICATE-----Generated at Tue Mar 17 11:33:04 2026 by rpki-client