$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft File: MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json) Hash identifier: y4jXsgJO2lSeomKgKiVbylYQOc+SHyTpjOKkzt/EXYw= Subject key identifier: 10:0A:8C:0F:0E:94:04:17:3E:2C:CC:B5:93:F8:85:0E:03:4D:4E:9C Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30 Certificate issuer: /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft Manifest number: 43 Signing time: Mon 11 May 2026 08:34:47 +0000 Manifest this update: Mon 11 May 2026 08:34:47 +0000 Manifest next update: Mon 18 May 2026 08:34:47 +0000 Files and hashes: 1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: 0td9Vrc91rPjv2YNQEoBwSERti6HN88i1Ru4yXa9ze0=) 2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30 Validity Not Before: May 11 08:34:47 2026 GMT Not After : May 18 08:34:47 2026 GMT Subject: CN=6a0194a7-7987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:a3:68:9f:ca:bb:89:5a:b2:50:dd:89:f4: f9:3b:65:26:8c:91:fb:e2:a8:14:b5:57:f6:52:fe: c2:ca:34:6b:ac:16:e6:ba:63:71:f0:1c:83:17:88: 5f:22:9a:74:71:f2:94:96:98:9b:28:c1:56:46:84: e0:f9:e2:4d:01:b7:cf:45:00:c8:47:a0:8b:95:54: bc:ae:59:e5:85:b7:77:fd:9e:1f:f2:f9:41:a2:19: ff:4c:33:7b:b3:54:1f:d3:c8:44:db:f1:67:f6:54: 1f:2d:a9:9d:d7:05:34:9e:1f:42:f8:86:d5:63:4a: 2f:24:60:3a:56:ab:94:94:1a:9f:6e:81:69:73:fb: d2:8a:43:f7:aa:5e:70:bd:d6:6d:a3:8f:32:9e:4b: cf:e7:33:28:01:af:e9:a9:2c:fd:05:be:ee:bc:7e: 21:4d:5e:23:31:29:88:d7:b8:db:20:44:0e:d4:01: c6:a6:50:e2:22:45:a2:10:35:15:aa:b1:15:e6:79: 98:64:74:e0:50:bd:28:ba:f3:18:9d:13:f2:7a:d4: 03:db:66:a4:98:55:ae:da:ad:29:37:da:48:32:42: 76:c5:82:05:bf:83:e0:cf:20:4f:8c:22:6b:90:28: b2:77:e7:93:8e:6f:e4:98:e9:fc:5c:0f:45:68:70: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:8C:0F:0E:94:04:17:3E:2C:CC:B5:93:F8:85:0E:03:4D:4E:9C X509v3 Authority Key Identifier: keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:42:72:09:f2:02:ad:39:6f:17:0f:b4:c8:62:11:2c:4f: fa:f7:f3:58:d8:53:5d:6a:46:c6:e4:53:80:b8:d0:61:ec:d6: 07:9e:53:08:55:80:36:c4:58:a5:ad:cb:f3:1c:5c:4b:98:16: 6a:27:e2:ed:15:83:8f:ea:69:68:65:7f:46:c1:14:cf:66:02: 7f:3b:90:38:2e:d0:f5:75:63:49:31:70:3b:f2:29:bb:66:2a: a4:2b:aa:3a:c7:44:39:78:38:ac:0b:88:a0:37:5c:18:49:af: f1:67:ef:af:bc:c4:8b:7f:f5:d0:37:22:43:d7:92:be:81:18: 8a:cf:d5:d9:07:8a:a8:4a:5e:8a:8a:11:5b:54:29:07:d4:3a: 89:1c:a5:7e:7c:6f:5c:ef:46:ce:80:34:49:fd:bf:4e:4c:a1: 0f:b0:80:73:4e:5b:37:c6:0f:0a:8f:e8:49:cc:7a:8d:7d:0d: 97:86:36:60:1e:3e:84:da:a3:16:cb:02:de:59:f5:fc:47:f8: 4f:bc:85:93:7f:20:8a:09:67:0f:30:34:6e:af:21:7f:5f:bf: 14:63:8b:2b:af:4b:0a:00:93:37:a7:ef:3c:fd:af:f6:86:59: 10:20:db:c7:1e:cf:40:ed:93:26:f8:ae:fc:c3:0c:d7:8c:97: 3f:d7:0f:a6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTYwNjExMC8GA1UEBRMoMzJDOThFRDhENEZDNzMwODFBRkVFNTUyMjFDNDQyNDc1 QzREQ0MzMDAeFw0yNjA1MTEwODM0NDdaFw0yNjA1MTgwODM0NDdaMBgxFjAUBgNV BAMTDTZhMDE5NGE3LTc5ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXAqNon8q7iVqyUN2J9Pk7ZSaMkfviqBS1V/ZS/sLKNGusFua6Y3HwHIMXiF8i mnRx8pSWmJsowVZGhOD54k0Bt89FAMhHoIuVVLyuWeWFt3f9nh/y+UGiGf9MM3uz VB/TyETb8Wf2VB8tqZ3XBTSeH0L4htVjSi8kYDpWq5SUGp9ugWlz+9KKQ/eqXnC9 1m2jjzKeS8/nMygBr+mpLP0Fvu68fiFNXiMxKYjXuNsgRA7UAcamUOIiRaIQNRWq sRXmeZhkdOBQvSi68xidE/J61APbZqSYVa7arSk32kgyQnbFggW/g+DPIE+MImuQ KLJ355OOb+SY6fxcD0VocCxnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEAqMDw6U BBc+LMy1k/iFDgNNTpwwHwYDVR0jBBgwFoAUMsmO2NT8cwga/uVSIcRCR1xNzDAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjA2L0Y3NzgyNDc4RUJC MDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4Y3dnYV91VlNJY1JDUjF4TnpE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTXNtTzJOVDhjd2dhX3VWU0ljUkNSMXhOekRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NjA2L0Y3NzgyNDc4RUJCMDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4Y3dn YV91VlNJY1JDUjF4TnpEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPi0JyCfICrTlvFw+0yGIRLE/69/NY2FNdakbG5FOAuNBh7NYHnlMIVYA2xFil rcvzHFxLmBZqJ+LtFYOP6mloZX9GwRTPZgJ/O5A4LtD1dWNJMXA78im7ZiqkK6o6 x0Q5eDisC4igN1wYSa/xZ++vvMSLf/XQNyJD15K+gRiKz9XZB4qoSl6KihFbVCkH 1DqJHKV+fG9c70bOgDRJ/b9OTKEPsIBzTls3xg8Kj+hJzHqNfQ2XhjZgHj6E2qMW ywLeWfX8R/hPvIWTfyCKCWcPMDRuryF/X78UY4srr0sKAJM3p+88/a/2hlkQINvH Hs9A7ZMm+K78wwzXjJc/1w+m -----END CERTIFICATE-----Generated at Wed May 13 03:26:27 2026 by rpki-client