$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft File: MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json) Hash identifier: p6zHiFqH9WiMRyPfAvVCyF7U9EudENI5MB8m2B8Z/ws= Subject key identifier: C9:D6:37:32:A7:BE:91:88:4F:93:0F:A0:43:08:E8:77:9F:EA:52:62 Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30 Certificate issuer: /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft Manifest number: 20 Signing time: Tue 03 Mar 2026 08:30:49 +0000 Manifest this update: Tue 03 Mar 2026 08:30:49 +0000 Manifest next update: Tue 10 Mar 2026 08:30:49 +0000 Files and hashes: 1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: iAP+Z4NCQQ3CjQwk0UMdZHtYD8ic1txKXr6yIQ2Z50M=) 2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30 Validity Not Before: Mar 3 08:30:49 2026 GMT Not After : Mar 10 08:30:49 2026 GMT Subject: CN=69a69c39-60ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:b5:b4:b0:ac:57:1c:10:e3:6b:3e:b5:ec: bd:40:7e:f9:d4:cd:0d:8c:92:8f:68:8b:ab:c2:5d: fc:2e:80:8c:ac:dc:9c:d3:62:76:85:7f:56:08:d8: cc:3e:68:9d:18:28:6e:cb:a7:c1:b6:22:6a:92:f3: 9e:80:23:11:26:3c:44:ae:fc:70:b6:3c:17:85:06: 8c:72:26:05:87:18:e3:2e:c9:45:35:4f:4d:91:4b: b1:07:ac:91:04:16:7c:4c:95:23:7f:2d:7a:b9:52: 04:38:df:c2:b1:01:86:2c:73:ef:d6:47:2f:5f:a3: 46:80:82:da:37:58:7b:48:f9:e3:14:61:a8:c7:be: 7c:d9:e1:e1:3e:91:22:c2:2c:cf:4c:c2:7c:a3:4b: 0c:dd:34:01:f1:49:05:14:26:e3:8d:ff:51:b7:90: ea:55:7c:fa:88:19:dc:47:fd:8b:22:40:97:f8:18: 3a:04:17:18:45:da:dc:c7:06:a8:de:d3:2a:b8:c9: 0f:cc:d3:64:e8:81:54:b8:49:bd:c9:c2:4f:b8:eb: 5f:dc:11:37:1b:05:74:14:fd:c7:05:41:98:8b:5d: 2e:75:c7:7e:7f:e2:b0:87:f0:8e:dc:85:ba:20:04: 81:eb:eb:c5:f5:27:ed:f4:9a:f8:3d:37:47:45:67: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D6:37:32:A7:BE:91:88:4F:93:0F:A0:43:08:E8:77:9F:EA:52:62 X509v3 Authority Key Identifier: keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:18:9c:24:fe:7d:ab:6c:4a:59:24:54:48:13:0e:fb:37:70: cd:97:de:c4:77:aa:e7:81:65:49:cd:50:e6:5b:c9:96:13:48: e1:4d:68:fb:9c:4d:e0:ae:7d:54:59:49:bb:9b:7b:96:58:75: 3b:66:0f:a3:a7:8f:c7:1a:91:25:a2:1a:59:fb:a5:6b:0e:23: f8:00:a9:3f:21:69:fc:b3:58:71:8e:f9:d8:2e:b8:4e:b5:bd: 47:ca:23:23:5f:f9:95:af:53:62:5c:eb:ad:b0:4a:a0:3f:44: f1:ed:0e:b7:d3:ff:1d:06:da:eb:9d:ca:d4:0f:8b:2a:97:21: 88:0c:60:a9:3e:e4:56:2d:ad:a1:2b:7c:37:5d:0d:a8:3e:78: 77:09:ef:39:ca:df:28:19:63:ae:ff:21:3c:77:ff:e8:ab:28: fd:07:33:df:f3:1f:2d:a6:0b:0e:9c:23:03:2b:a8:8e:cc:71: 72:da:8c:83:78:04:e8:20:bf:af:e1:bd:08:74:db:7e:09:f9: 30:38:e6:50:ef:68:de:dc:37:71:3d:58:62:c7:a4:4b:28:45: 0b:eb:ff:ba:fb:cf:45:1f:68:82:a6:bb:ca:35:5c:a9:32:dd: d0:70:ca:25:d4:13:52:f5:43:b2:05:76:65:4c:e0:c7:4a:3f: f0:5f:17:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTYwNjExMC8GA1UEBRMoMzJDOThFRDhENEZDNzMwODFBRkVFNTUyMjFDNDQyNDc1 QzREQ0MzMDAeFw0yNjAzMDMwODMwNDlaFw0yNjAzMTAwODMwNDlaMBgxFjAUBgNV BAMTDTY5YTY5YzM5LTYwY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLIrW0sKxXHBDjaz617L1AfvnUzQ2Mko9oi6vCXfwugIys3JzTYnaFf1YI2Mw+ aJ0YKG7Lp8G2ImqS856AIxEmPESu/HC2PBeFBoxyJgWHGOMuyUU1T02RS7EHrJEE FnxMlSN/LXq5UgQ438KxAYYsc+/WRy9fo0aAgto3WHtI+eMUYajHvnzZ4eE+kSLC LM9MwnyjSwzdNAHxSQUUJuON/1G3kOpVfPqIGdxH/YsiQJf4GDoEFxhF2tzHBqje 0yq4yQ/M02TogVS4Sb3Jwk+461/cETcbBXQU/ccFQZiLXS51x35/4rCH8I7chbog BIHr68X1J+30mvg9N0dFZzyrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUydY3Mqe+ kYhPkw+gQwjod5/qUmIwHwYDVR0jBBgwFoAUMsmO2NT8cwga/uVSIcRCR1xNzDAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjA2L0Y3NzgyNDc4RUJC MDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4Y3dnYV91VlNJY1JDUjF4TnpE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTXNtTzJOVDhjd2dhX3VWU0ljUkNSMXhOekRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NjA2L0Y3NzgyNDc4RUJCMDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4Y3dn YV91VlNJY1JDUjF4TnpEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeGJwk/n2rbEpZJFRIEw77N3DNl97Ed6rngWVJzVDmW8mWE0jhTWj7nE3grn1U WUm7m3uWWHU7Zg+jp4/HGpElohpZ+6VrDiP4AKk/IWn8s1hxjvnYLrhOtb1HyiMj X/mVr1NiXOutsEqgP0Tx7Q630/8dBtrrncrUD4sqlyGIDGCpPuRWLa2hK3w3XQ2o Pnh3Ce85yt8oGWOu/yE8d//oqyj9BzPf8x8tpgsOnCMDK6iOzHFy2oyDeAToIL+v 4b0IdNt+CfkwOOZQ72je3DdxPVhix6RLKEUL6/+6+89FH2iCprvKNVypMt3QcMol 1BNS9UOyBXZlTODHSj/wXxeR -----END CERTIFICATE-----Generated at Wed Mar 4 08:36:18 2026 by rpki-client