$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft File: MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json) Hash identifier: r/joecgzrLPI7Xpr+fLg54Q7oRUxL3ArRv3yg//Iggw= Subject key identifier: 63:6E:86:C6:AC:BC:A1:13:90:67:58:D8:7A:52:AD:74:89:71:44:D9 Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 07:34:08 +0000 Manifest this update: Wed 25 Mar 2026 07:34:08 +0000 Manifest next update: Wed 01 Apr 2026 07:34:08 +0000 Files and hashes: 1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: 3/7zvK5Rn22NhPrfpfL0IXDFDqgdtXs7nVlUezVEcCA=) 2: 127C35B4C52511F09456F21BC4F9AE02.roa (hash: wyxXuyIC5WUaxAyzD2PyMOcBQ4OB6Gp2VhwVjUIddbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Validity Not Before: Mar 25 07:34:08 2026 GMT Not After : Apr 1 07:34:08 2026 GMT Subject: CN=69c38ff0-007d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:97:96:72:66:0f:8f:e2:6a:79:d2:a9:bc: a8:c5:82:6a:bd:13:fa:d8:79:f7:01:89:a6:69:11: 74:ec:cc:37:b0:a9:eb:e0:94:3b:14:4c:5c:86:27: b5:51:43:91:ae:91:df:42:7f:77:93:64:56:e8:03: 61:84:e3:53:a5:54:77:05:ba:3d:f2:86:94:18:00: b5:6e:d3:ff:ec:ea:c7:dd:e8:e7:b3:09:a2:bf:b9: 89:c1:cd:3f:f3:bb:45:76:d3:5d:38:11:e4:c8:04: 75:2d:19:4c:dc:38:47:4d:e2:91:53:5d:0b:bf:06: 94:81:37:75:7d:09:3f:26:06:73:87:39:cd:f4:f3: 84:39:38:3b:bb:5f:c1:5d:23:ab:04:50:cc:2f:89: fa:cf:81:2c:94:cb:83:52:ce:88:9b:3a:68:78:ef: 72:3f:63:e4:2e:98:78:cb:5c:90:b0:a3:f0:0e:85: 56:c9:62:bb:56:db:82:7d:2f:c3:ee:b0:79:bc:4b: 17:63:ec:08:d0:bb:2e:61:de:a4:cb:92:de:86:eb: 1f:3b:2f:74:b6:d6:be:7b:0e:79:da:a9:2b:d1:ff: 8c:b8:45:3f:a1:43:10:c0:d0:bd:6b:fd:f8:e8:78: 2f:d7:a4:44:e1:d9:51:e7:d6:71:7d:7e:4d:bf:de: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6E:86:C6:AC:BC:A1:13:90:67:58:D8:7A:52:AD:74:89:71:44:D9 X509v3 Authority Key Identifier: keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7b:9a:5d:1f:3f:a6:39:cc:01:06:9d:a1:d2:e3:66:03:00: 41:6d:69:41:28:ef:02:de:f1:5e:1b:ef:a5:98:14:8f:89:de: 53:62:c5:fc:43:c1:33:41:e8:b9:00:9f:7e:1f:d9:b9:cb:46: 36:44:aa:93:00:41:92:40:37:7d:cb:9a:14:91:ec:34:d4:56: 04:16:b1:28:ab:41:cd:25:4f:bc:ea:a8:54:c1:d5:d1:c8:28: fe:b7:9a:bc:a0:27:ef:39:fe:52:f9:07:b2:47:c5:19:82:49: b8:1d:a9:6c:8c:1c:b1:ca:8f:06:d2:9e:77:c7:fe:40:4a:e9: cd:e3:67:21:26:3b:04:12:ae:10:b0:a0:b1:e3:89:79:5d:12: fa:4b:ef:93:c0:99:92:4c:1c:7d:d8:85:bf:aa:29:df:c9:9f: cc:89:d7:01:06:4a:dc:fd:9a:1a:68:bb:39:d5:e3:09:07:a1: fd:82:80:90:57:5e:6f:86:a4:9d:9b:b2:90:3e:73:f0:d7:39: dd:c9:f7:d7:7e:49:09:89:60:61:d4:9b:94:31:3d:d0:00:3b: 1a:74:14:a5:3e:80:e5:e5:58:7c:e8:7b:32:5b:f1:88:dc:26: ce:f4:7a:fe:62:34:c6:af:60:1d:61:e8:88:cf:b8:94:c2:09: 57:dd:d0:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoMzEyNTc1REU0RDQ2NDNGQURGQUU0ODg3NkRGNDU2N0Q3 RDdDNjg1NjAeFw0yNjAzMjUwNzM0MDhaFw0yNjA0MDEwNzM0MDhaMBgxFjAUBgNV BAMTDTY5YzM4ZmYwLTAwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+u5eWcmYPj+JqedKpvKjFgmq9E/rYefcBiaZpEXTszDewqevglDsUTFyGJ7VR Q5Gukd9Cf3eTZFboA2GE41OlVHcFuj3yhpQYALVu0//s6sfd6OezCaK/uYnBzT/z u0V20104EeTIBHUtGUzcOEdN4pFTXQu/BpSBN3V9CT8mBnOHOc3084Q5ODu7X8Fd I6sEUMwvifrPgSyUy4NSzoibOmh473I/Y+QumHjLXJCwo/AOhVbJYrtW24J9L8Pu sHm8Sxdj7AjQuy5h3qTLkt6G6x87L3S21r57DnnaqSvR/4y4RT+hQxDA0L1r/fjo eC/XpETh2VHn1nF9fk2/3oyPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY26Gxqy8 oROQZ1jYelKtdIlxRNkwHwYDVR0jBBgwFoAUMSV13k1GQ/rfrkiHbfRWfX18aFYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzg2MUIxMTEyQzUy NDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9yZnJraUhiZlJXZlgxOGFG WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVNWMTNrMUdRX3JmcmtpSGJmUldmWDE4YUZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE N0EzLzg2MUIxMTEyQzUyNDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9y ZnJraUhiZlJXZlgxOGFGWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDe5pdHz+mOcwBBp2h0uNmAwBBbWlBKO8C3vFeG++lmBSPid5TYsX8Q8EzQei5 AJ9+H9m5y0Y2RKqTAEGSQDd9y5oUkew01FYEFrEoq0HNJU+86qhUwdXRyCj+t5q8 oCfvOf5S+QeyR8UZgkm4HalsjByxyo8G0p53x/5ASunN42chJjsEEq4QsKCx44l5 XRL6S++TwJmSTBx92IW/qinfyZ/MidcBBkrc/ZoaaLs51eMJB6H9goCQV15vhqSd m7KQPnPw1zndyffXfkkJiWBh1JuUMT3QADsadBSlPoDl5Vh86HsyW/GI3CbO9Hr+ YjTGr2AdYeiIz7iUwglX3dCM -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:15 2026 by rpki-client