$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft File: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json) Hash identifier: 3YRs9YqrYuWo/1nDO8DD0R9Ah8Hhay6N8JZO7NBN25w= Subject key identifier: D8:EA:5D:83:6D:EA:D4:B1:3C:55:69:1D:03:44:C3:E1:51:2A:CA:65 Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7 Certificate issuer: /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft Manifest number: 27 Signing time: Tue 19 May 2026 08:46:16 +0000 Manifest this update: Tue 19 May 2026 08:46:15 +0000 Manifest next update: Tue 26 May 2026 08:46:15 +0000 Files and hashes: 1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: jzWvScOoxIrp4mFVjofb/c4vct/gC+ex1kh2fkafvpw=) 2: 192C64F2252311F18B88524DC4833773.roa (hash: 7vrnXHB3qUyKbQqkedi+hisuqsIblcG1yBKlH+P3Y3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7 Validity Not Before: May 19 08:46:15 2026 GMT Not After : May 26 08:46:15 2026 GMT Subject: CN=6a0c2358-654b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:27:28:f2:f2:62:11:a2:ec:6f:07:5b:aa: 51:cc:d1:9c:1c:fd:2d:5f:a3:3e:7a:8e:e1:47:9b: 38:3b:09:41:9c:82:49:50:05:25:8b:9c:f4:e9:8d: be:c3:4b:fe:05:b0:41:ba:52:5c:6a:d7:ba:ad:aa: bf:af:37:a0:38:26:77:87:92:b4:ea:c2:5c:29:73: 98:e5:4d:7f:1f:81:a7:da:36:c2:eb:a4:6f:73:0c: 0b:cb:53:b0:3f:f2:67:61:ef:c5:8f:f8:e4:a6:e0: 62:80:70:8d:70:4e:6c:03:96:70:33:3a:a9:b6:d9: 7e:ec:6f:7b:d6:cd:f2:86:a2:c8:1f:d4:d3:1d:80: c6:79:e5:01:3e:b0:05:62:fc:4d:a1:c0:3b:d9:6a: d4:cb:da:df:f3:f6:99:f6:66:ba:bd:dc:00:a6:f0: d3:7f:72:0c:34:b2:1e:db:13:62:4b:22:4f:3d:a5: ed:ff:3e:57:8c:ec:af:3f:00:d3:b8:09:05:73:ab: bd:db:90:ea:bb:cd:ad:91:29:16:bd:5a:2b:2d:27: 32:8b:21:8d:04:c3:f9:4e:a8:0a:96:27:60:47:f9: b3:4b:43:10:78:33:7e:4d:a2:8b:80:3c:a5:53:ad: 20:c3:5d:f0:e7:12:73:4c:38:27:bd:fe:b6:56:7d: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EA:5D:83:6D:EA:D4:B1:3C:55:69:1D:03:44:C3:E1:51:2A:CA:65 X509v3 Authority Key Identifier: keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:61:bf:fb:7b:1b:06:78:36:a5:43:99:07:68:48:a6:82:0f: a5:8a:71:6d:a0:d9:8f:18:0c:98:c7:c0:ad:92:83:34:64:79: b7:b6:87:1b:87:cc:90:4c:e4:d0:24:3b:06:92:5e:be:4e:57: 53:28:ed:08:2c:f6:e9:ca:6a:1e:5d:0e:f7:5b:31:78:34:d6: bf:64:35:7c:47:81:23:75:71:b1:fb:57:e7:c8:75:f7:8e:44: 90:ed:64:54:fb:cf:e9:d4:a5:57:7f:64:83:c3:a5:c1:3f:cc: f2:e9:71:f2:45:56:9f:e7:c4:df:85:ab:2e:a0:54:05:7a:d1: 44:17:82:17:4d:3e:d8:cf:8e:24:f4:1d:1b:73:7a:66:bf:f2: 36:18:78:a0:db:14:49:6e:fc:ca:9d:c8:80:48:e6:62:b7:fd: 84:f2:02:e2:98:cc:14:49:8b:1e:a9:a7:88:21:af:56:4a:1a: 2f:82:8c:65:51:b2:00:d1:5e:72:bd:4d:31:5b:15:96:90:35: 22:e6:e2:98:bd:0a:82:22:6d:e9:2e:5d:28:b4:7a:1a:4b:53: 9f:8a:e6:10:c6:2c:c3:84:d0:2d:b5:fd:4e:0f:dd:ff:01:0b: fb:81:83:b6:3f:6a:75:e0:a3:5a:4f:0d:d3:2e:7f:7e:9e:0a: 0f:2d:00:8e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ3OTExMC8GA1UEBRMoRTBFRTVGNUI0Q0NFNzJDMDJDQjFCMTY1REQ4RDZEMDNF MTE4MTVDNzAeFw0yNjA1MTkwODQ2MTVaFw0yNjA1MjYwODQ2MTVaMBgxFjAUBgNV BAMTDTZhMGMyMzU4LTY1NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaBico8vJiEaLsbwdbqlHM0Zwc/S1foz56juFHmzg7CUGcgklQBSWLnPTpjb7D S/4FsEG6Ulxq17qtqr+vN6A4JneHkrTqwlwpc5jlTX8fgafaNsLrpG9zDAvLU7A/ 8mdh78WP+OSm4GKAcI1wTmwDlnAzOqm22X7sb3vWzfKGosgf1NMdgMZ55QE+sAVi /E2hwDvZatTL2t/z9pn2Zrq93ACm8NN/cgw0sh7bE2JLIk89pe3/PleM7K8/ANO4 CQVzq73bkOq7za2RKRa9WistJzKLIY0Ew/lOqAqWJ2BH+bNLQxB4M35NoouAPKVT rSDDXfDnEnNMOCe9/rZWfVNLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2Opdg23q 1LE8VWkdA0TD4VEqymUwHwYDVR0jBBgwFoAU4O5fW0zOcsAssbFl3Y1tA+EYFccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzQzQzJBNjkyMjRE QjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NBc3NiRmwzWTF0QS1FWUZj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNE81Zlcwek9jc0Fzc2JGbDNZMXRBLUVZRmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDc5LzQzQzJBNjkyMjREQjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NB c3NiRmwzWTF0QS1FWUZjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2Yb/7exsGeDalQ5kHaEimgg+linFtoNmPGAyYx8CtkoM0ZHm3tocbh8yQTOTQ JDsGkl6+TldTKO0ILPbpymoeXQ73WzF4NNa/ZDV8R4EjdXGx+1fnyHX3jkSQ7WRU +8/p1KVXf2SDw6XBP8zy6XHyRVaf58TfhasuoFQFetFEF4IXTT7Yz44k9B0bc3pm v/I2GHig2xRJbvzKnciASOZit/2E8gLimMwUSYseqaeIIa9WShovgoxlUbIA0V5y vU0xWxWWkDUi5uKYvQqCIm3pLl0otHoaS1OfiuYQxizDhNAttf1OD93/AQv7gYO2 P2p14KNaTw3TLn9+ngoPLQCO -----END CERTIFICATE-----Generated at Thu May 21 09:36:32 2026 by rpki-client