$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft File: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json) Hash identifier: wjKkjsJ46SbL8ROZoOqzdZaWvZgLKBzM1cctu1s9Mrw= Subject key identifier: 30:8D:23:17:3E:51:96:BA:18:AD:4D:B1:88:5C:4E:7F:10:8E:68:5B Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7 Certificate issuer: /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft Manifest number: 21 Signing time: Mon 11 May 2026 09:08:06 +0000 Manifest this update: Mon 11 May 2026 09:08:06 +0000 Manifest next update: Mon 18 May 2026 09:08:06 +0000 Files and hashes: 1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: YYDSWUolo0F40b7riJukVC6HJbSGbbr1aK33DgM4Uqk=) 2: 192C64F2252311F18B88524DC4833773.roa (hash: hVhdvs7GH6X86vaiCeryWerFVJfvpNrRVfFuhErwgtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7 Validity Not Before: May 11 09:08:06 2026 GMT Not After : May 18 09:08:06 2026 GMT Subject: CN=6a019c76-e18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:19:68:7e:53:5d:dc:98:55:20:88:d3:b4: ec:db:73:d2:1e:e6:d2:99:e8:76:61:d6:9b:e7:e3: 84:cd:7d:7c:0e:b0:91:84:87:43:da:c3:56:c5:96: 8a:3a:da:21:b2:74:9d:a2:bc:8b:60:1e:b3:42:ac: 85:4a:89:2f:f6:10:5c:48:a7:b4:b8:49:f6:b3:53: bb:0a:1d:d5:1b:e0:f2:06:aa:9b:a0:45:a5:f4:8f: 31:80:8b:b1:b6:c8:e8:5d:b1:53:56:f6:a1:da:3b: ca:0a:2e:c5:a8:24:e5:df:03:a9:c7:bc:f5:d2:3b: 1d:b5:91:8f:f8:df:bf:a9:83:62:09:8d:98:02:53: 6c:e5:35:0a:b1:b1:3c:6b:27:8d:fb:7e:0a:c0:84: fd:33:e0:f4:c9:19:2a:23:72:ee:20:44:eb:99:45: 7c:3a:77:b7:e6:f1:fe:f2:4f:0e:08:8a:d8:57:1f: 9a:be:83:41:1f:cc:9d:7f:91:85:30:7d:1f:3e:b7: fe:db:88:63:f5:09:6a:d6:5f:0e:b6:c1:5a:ea:2a: 8c:37:16:1e:4f:3d:b2:c4:1b:67:92:fa:8b:98:f0: 76:7a:52:ec:30:d5:7b:ce:c3:78:a0:3b:10:46:1b: 65:20:c4:4e:5f:23:35:dc:a0:ae:10:32:99:cb:e7: e2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:23:17:3E:51:96:BA:18:AD:4D:B1:88:5C:4E:7F:10:8E:68:5B X509v3 Authority Key Identifier: keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ed:16:9a:b6:eb:f4:89:1e:5a:1c:99:59:8b:be:b1:ef:17: b6:1c:f7:6c:b6:de:7b:87:73:af:d9:c2:56:bd:00:d0:84:b7: 4a:39:31:dd:67:99:f8:61:2a:ea:2c:ec:a4:48:0f:e8:11:07: 91:26:79:0e:65:38:65:64:fd:8e:95:21:50:16:c4:26:fc:86: 71:7e:ed:a2:64:72:6e:a6:b1:95:86:59:5f:7c:e5:9a:52:d1: 7d:d0:8a:09:a2:bf:46:33:a4:7c:6c:3f:79:6d:e3:65:bb:f5: 30:05:83:be:da:c3:c7:38:f8:d4:cd:3c:18:e0:ea:28:4d:5c: 6c:95:46:ac:a1:bd:bc:19:30:1f:85:ff:52:91:b5:2b:f6:67: 12:12:de:c5:f0:9c:b4:5c:4b:87:e5:82:90:33:db:0a:6d:66: c5:21:2e:e2:c2:5a:8d:10:a0:1a:c9:a1:71:38:e1:ca:96:1a: 67:b7:ec:b8:59:c0:77:1b:7e:ba:c7:8a:dd:8c:f6:8f:22:83: b5:e8:2a:c0:94:a7:6c:7d:ac:53:ad:d3:21:a2:da:46:00:4f: 35:40:a6:3d:a4:ca:14:f2:1a:43:ad:40:e4:40:f5:7d:85:d9: 43:16:6f:21:27:cc:90:70:40:f2:4a:b6:cc:4f:f6:fe:dd:cd: e9:6c:1c:31 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ3OTExMC8GA1UEBRMoRTBFRTVGNUI0Q0NFNzJDMDJDQjFCMTY1REQ4RDZEMDNF MTE4MTVDNzAeFw0yNjA1MTEwOTA4MDZaFw0yNjA1MTgwOTA4MDZaMBgxFjAUBgNV BAMTDTZhMDE5Yzc2LWUxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7WRloflNd3JhVIIjTtOzbc9Ie5tKZ6HZh1pvn44TNfXwOsJGEh0Paw1bFloo6 2iGydJ2ivItgHrNCrIVKiS/2EFxIp7S4SfazU7sKHdUb4PIGqpugRaX0jzGAi7G2 yOhdsVNW9qHaO8oKLsWoJOXfA6nHvPXSOx21kY/437+pg2IJjZgCU2zlNQqxsTxr J437fgrAhP0z4PTJGSojcu4gROuZRXw6d7fm8f7yTw4IithXH5q+g0EfzJ1/kYUw fR8+t/7biGP1CWrWXw62wVrqKow3Fh5PPbLEG2eS+ouY8HZ6Uuww1XvOw3igOxBG G2UgxE5fIzXcoK4QMpnL5+LRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMI0jFz5R lroYrU2xiFxOfxCOaFswHwYDVR0jBBgwFoAU4O5fW0zOcsAssbFl3Y1tA+EYFccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzQzQzJBNjkyMjRE QjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NBc3NiRmwzWTF0QS1FWUZj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNE81Zlcwek9jc0Fzc2JGbDNZMXRBLUVZRmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDc5LzQzQzJBNjkyMjREQjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NB c3NiRmwzWTF0QS1FWUZjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAT7Raatuv0iR5aHJlZi76x7xe2HPdstt57h3Ov2cJWvQDQhLdKOTHdZ5n4YSrq LOykSA/oEQeRJnkOZThlZP2OlSFQFsQm/IZxfu2iZHJuprGVhllffOWaUtF90IoJ or9GM6R8bD95beNlu/UwBYO+2sPHOPjUzTwY4OooTVxslUasob28GTAfhf9SkbUr 9mcSEt7F8Jy0XEuH5YKQM9sKbWbFIS7iwlqNEKAayaFxOOHKlhpnt+y4WcB3G366 x4rdjPaPIoO16CrAlKdsfaxTrdMhotpGAE81QKY9pMoU8hpDrUDkQPV9hdlDFm8h J8yQcEDySrbMT/b+3c3pbBwx -----END CERTIFICATE-----Generated at Wed May 13 01:09:44 2026 by rpki-client