$ rpki-client -vvf rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft File: mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft (raw, json) Hash identifier: mjE9uR3aVIpWV6o8RRICjfNuRgmoq2xS0/5ojLPFvUM= Subject key identifier: DF:18:C4:31:B8:41:24:3E:E1:43:3B:42:BE:4D:8F:1E:EF:8B:07:AC Authority key identifier: 99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B Certificate issuer: /CN=A9192122/serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft Manifest number: 28 Signing time: Wed 25 Mar 2026 07:59:30 +0000 Manifest this update: Wed 25 Mar 2026 07:59:30 +0000 Manifest next update: Wed 01 Apr 2026 07:59:30 +0000 Files and hashes: 1: mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl (hash: m2785XV4TSAZC1jKhcFOoas70OifyKZFmaVUDC/W6xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192122, serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B Validity Not Before: Mar 25 07:59:30 2026 GMT Not After : Apr 1 07:59:30 2026 GMT Subject: CN=69c395e2-1497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:aa:6d:81:7a:ed:4a:74:11:eb:32:3a:0d: e0:21:fd:4b:99:c7:d1:2a:dd:df:64:7c:b3:c7:aa: 06:c1:c7:32:c8:ad:e3:81:23:c7:74:5c:18:d8:e5: e1:96:e5:d6:77:4f:50:e3:d3:39:13:1e:38:a2:9a: 66:07:53:87:a6:66:d8:1a:23:1d:71:57:6a:8b:26: 0a:d4:12:71:ff:2c:a6:95:38:51:d4:48:5c:27:6c: 49:ac:25:bc:3f:40:32:2f:7e:0c:1e:d6:65:c0:fe: 46:b3:f6:33:fe:05:48:e6:62:72:98:c0:32:e6:b3: 81:6d:5c:df:5d:cf:a1:71:1d:4a:c1:64:84:e6:e7: 12:f5:57:d8:b4:da:9c:a7:92:88:d0:c6:6b:18:77: 53:95:06:7c:47:d4:61:de:5d:8a:82:ce:b6:f4:8f: ff:4c:ba:17:2c:8d:fa:87:f3:99:0e:79:5e:76:ad: f8:07:90:36:4e:e2:6b:df:99:ec:58:8f:1c:60:58: bc:59:19:9d:24:1b:ba:ab:c2:52:f0:fb:48:b8:14: 11:aa:7a:88:50:61:7c:41:d2:cd:2b:db:bc:e5:ee: e6:91:c9:42:e2:e9:54:d2:77:a3:ad:e7:dd:53:86: f7:e8:55:eb:84:1c:ea:26:52:89:58:6c:3d:df:44: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:C4:31:B8:41:24:3E:E1:43:3B:42:BE:4D:8F:1E:EF:8B:07:AC X509v3 Authority Key Identifier: keyid:99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1b:83:e5:55:a3:3a:a4:24:a7:23:57:fb:a6:20:bc:1b:63: 51:fd:9b:d9:50:d9:9f:a8:97:9d:3b:51:b5:de:6d:5b:3b:8c: aa:e4:1a:7e:be:b5:89:58:a5:3d:20:a3:8b:65:1e:1a:59:f7: f8:70:73:07:48:23:ee:9c:49:20:30:2d:d7:69:58:b4:c6:d0: 41:c0:5f:69:32:d6:8f:ca:c3:86:2c:7a:a8:7c:5c:c6:1a:d1: 43:f6:4f:98:d4:50:6a:02:5b:af:d7:1b:d6:c4:76:8d:c0:b4: 1e:32:c7:63:0c:5f:ba:98:a2:30:01:12:ab:a4:3f:13:78:c4: ff:9d:24:c1:d0:26:62:7d:90:e5:39:57:62:6e:61:ef:fe:be: d6:64:ee:27:8f:d5:a9:bf:3d:07:8a:bb:90:f7:1c:fe:64:19: c5:21:b6:87:ed:96:1b:e1:b9:5d:80:74:a9:c0:1c:8c:4e:9a: e6:2a:07:0f:e1:a4:23:55:0a:2b:b1:c7:a3:92:4f:81:00:a9: 14:10:b0:84:4a:54:5e:7f:4a:ec:90:40:a7:2d:02:71:ab:5a: 08:1a:ab:be:ec:2c:39:fb:db:bf:36:f3:e4:cd:5c:ee:df:2f: 63:d8:93:ae:43:00:e2:13:50:08:f0:f3:5d:2c:05:55:cb:6f: c2:4a:2d:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjEyMjExMC8GA1UEBRMoOTk0QjE5RUNEM0EzRDUzQTY3OTU0NjM5Njk4RjVDREY4 OThGOTUyQjAeFw0yNjAzMjUwNzU5MzBaFw0yNjA0MDEwNzU5MzBaMBgxFjAUBgNV BAMTDTY5YzM5NWUyLTE0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHJ6ptgXrtSnQR6zI6DeAh/UuZx9Eq3d9kfLPHqgbBxzLIreOBI8d0XBjY5eGW 5dZ3T1Dj0zkTHjiimmYHU4emZtgaIx1xV2qLJgrUEnH/LKaVOFHUSFwnbEmsJbw/ QDIvfgwe1mXA/kaz9jP+BUjmYnKYwDLms4FtXN9dz6FxHUrBZITm5xL1V9i02pyn kojQxmsYd1OVBnxH1GHeXYqCzrb0j/9MuhcsjfqH85kOeV52rfgHkDZO4mvfmexY jxxgWLxZGZ0kG7qrwlLw+0i4FBGqeohQYXxB0s0r27zl7uaRyULi6VTSd6Ot591T hvfoVeuEHOomUolYbD3fRIeRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3xjEMbhB JD7hQztCvk2PHu+LB6wwHwYDVR0jBBgwFoAUmUsZ7NOj1TpnlUY5aY9c34mPlSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMTIyLzZGRDVFQzNFRjNB RTExRjBCNkRENkQ5QzNBNkY1NkJDL21Vc1o3Tk9qMVRwbmxVWTVhWTljMzRtUGxT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbVVzWjdOT2oxVHBubFVZNWFZOWMzNG1QbFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MTIyLzZGRDVFQzNFRjNBRTExRjBCNkRENkQ5QzNBNkY1NkJDL21Vc1o3Tk9qMVRw bmxVWTVhWTljMzRtUGxTcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvG4PlVaM6pCSnI1f7piC8G2NR/ZvZUNmfqJedO1G13m1bO4yq5Bp+vrWJWKU9 IKOLZR4aWff4cHMHSCPunEkgMC3XaVi0xtBBwF9pMtaPysOGLHqofFzGGtFD9k+Y 1FBqAluv1xvWxHaNwLQeMsdjDF+6mKIwARKrpD8TeMT/nSTB0CZifZDlOVdibmHv /r7WZO4nj9Wpvz0HiruQ9xz+ZBnFIbaH7ZYb4bldgHSpwByMTprmKgcP4aQjVQor scejkk+BAKkUELCESlRef0rskECnLQJxq1oIGqu+7Cw5+9u/NvPkzVzu3y9j2JOu QwDiE1AI8PNdLAVVy2/CSi1W -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:23 2026 by rpki-client