$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json) Hash identifier: 0bw0KlMiSDpuodlCiw+WFDs2ysB7SVmy7OAn+mKwRtQ= Subject key identifier: F7:35:A7:0A:FA:A9:0B:52:95:60:4A:AD:A4:56:FA:64:80:64:B3:3C Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 19E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft Manifest number: 19A0 Signing time: Thu 14 May 2026 16:24:45 +0000 Manifest this update: Thu 14 May 2026 16:24:45 +0000 Manifest next update: Thu 21 May 2026 16:24:45 +0000 Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: IfcBD8dHeuAp/r13ADKA2OZV4un5r1p0n5089IAdr5g=) 2: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=) 3: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=) 4: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 16:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6627 (0x19e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: May 14 16:24:45 2026 GMT Not After : May 21 16:24:45 2026 GMT Subject: CN=6a05f74d-e7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6f:4a:92:a1:98:45:4a:a5:da:7b:01:52:cb: f0:4c:d7:a9:01:73:04:52:75:aa:d8:fb:63:08:68: 9c:20:b1:d6:20:72:fb:7c:5b:e5:cb:ac:0f:92:51: e0:cf:35:ba:26:93:2b:6f:f6:e7:ac:de:2b:3c:90: cb:4f:8c:7f:58:42:11:a3:46:12:ab:8c:27:74:ca: 77:62:7b:f8:b8:f9:c1:34:14:ce:38:2b:26:22:36: 1c:0a:75:02:eb:7f:af:4b:b4:a0:51:b7:44:82:12: 3d:bd:8d:6c:23:1c:02:26:5b:1a:e4:a0:d9:d0:9d: c8:02:2b:05:0a:18:7e:94:e0:17:d1:1e:0d:31:b2: 5b:01:48:1a:1c:d8:0d:64:71:55:70:3a:b4:2b:38: f9:fd:f4:90:09:48:f3:fb:5e:fe:f0:d6:94:34:6a: c8:3c:d3:ea:3f:41:4d:9e:5a:ab:d5:ed:ae:dd:23: f2:1b:19:57:c3:46:c8:de:23:a1:61:c5:31:98:7b: bb:6f:98:e9:39:34:3c:e2:1f:ab:4d:2e:b6:85:e4: c0:4f:e2:f5:78:a4:05:de:36:bb:5c:d9:3f:29:33: c3:81:af:73:89:2b:1c:61:e2:1d:08:8f:a8:f4:12: 01:f7:44:8f:7d:8e:7d:f2:1a:97:99:58:fc:29:6f: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:35:A7:0A:FA:A9:0B:52:95:60:4A:AD:A4:56:FA:64:80:64:B3:3C X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5a:b6:fb:e6:60:ba:ef:88:64:3d:7e:64:b1:1e:1b:71:83: 04:fe:a0:75:89:0e:04:e0:a8:9a:86:24:6b:ae:b6:32:54:3b: 54:f1:78:3f:a8:7e:a9:79:19:52:07:92:ef:86:db:25:dd:78: cb:97:2d:3b:d9:dc:5d:40:38:16:76:39:1b:3b:8c:22:6f:30: 25:e8:db:6f:30:47:2f:19:d7:b6:5c:a6:d8:d9:d9:19:2e:56: 27:b0:c6:e1:24:3c:a2:1c:43:84:24:39:c0:18:79:08:fb:c9: 60:00:01:2e:2d:6a:bb:fd:d5:82:c0:a8:99:68:d4:2f:86:5b: c6:74:ec:de:45:c9:4e:27:e5:0a:33:29:5a:1f:6d:32:cc:b3: 8d:2b:d4:11:50:d4:59:90:5e:d6:89:bc:b2:82:cd:d2:0d:e5: 21:87:40:e4:28:a8:a5:63:de:a0:5c:c6:f6:bf:a5:bd:7f:44: 9e:0d:25:02:0d:57:01:4f:43:7a:0d:3d:79:18:6e:a9:8e:ba: 32:f0:90:7e:30:5f:bb:b2:6e:5b:69:86:35:3a:ab:22:14:f2: 5c:3b:6e:37:55:a9:8b:58:ca:b4:ba:b3:cd:f4:c9:38:f4:da: f8:18:4f:c4:61:50:e7:b9:b4:a3:7e:02:cd:a6:a9:a6:ba:97: b7:62:f4:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjYwNTE0MTYyNDQ1WhcNMjYwNTIxMTYyNDQ1WjAYMRYwFAYD VQQDEw02YTA1Zjc0ZC1lN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5W9KkqGYRUql2nsBUsvwTNepAXMEUnWq2PtjCGicILHWIHL7fFvly6wPklHg zzW6JpMrb/bnrN4rPJDLT4x/WEIRo0YSq4wndMp3Ynv4uPnBNBTOOCsmIjYcCnUC 63+vS7SgUbdEghI9vY1sIxwCJlsa5KDZ0J3IAisFChh+lOAX0R4NMbJbAUgaHNgN ZHFVcDq0Kzj5/fSQCUjz+17+8NaUNGrIPNPqP0FNnlqr1e2u3SPyGxlXw0bI3iOh YcUxmHu7b5jpOTQ84h+rTS62heTAT+L1eKQF3ja7XNk/KTPDga9ziSscYeIdCI+o 9BIB90SPfY598hqXmVj8KW9A+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPc1pwr6 qQtSlWBKraRW+mSAZLM8MB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI d0lkWHplZnlIc1BQS2s1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFq2++Zguu+IZD1+ZLEeG3GDBP6gdYkOBOComoYka662MlQ7VPF4P6h+qXkZ UgeS74bbJd14y5ctO9ncXUA4FnY5GzuMIm8wJejbbzBHLxnXtlym2NnZGS5WJ7DG 4SQ8ohxDhCQ5wBh5CPvJYAABLi1qu/3VgsComWjUL4ZbxnTs3kXJTiflCjMpWh9t MsyzjSvUEVDUWZBe1om8soLN0g3lIYdA5CiopWPeoFzG9r+lvX9Eng0lAg1XAU9D eg09eRhuqY66MvCQfjBfu7JuW2mGNTqrIhTyXDtuN1Wpi1jKtLqzzfTJOPTa+BhP xGFQ57m0o34CzaapprqXt2L0tw== -----END CERTIFICATE-----Generated at Fri May 15 16:05:49 2026 by rpki-client