$ rpki-client -vvf rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft File: mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft (raw, json) Hash identifier: i7kzDKjrHk8rtqqNa6TcIStPGUw5IAMOnxHZ1h3Ye9I= Subject key identifier: B3:77:B2:10:A3:AE:7D:AB:02:29:45:21:6C:3C:72:F3:CF:D8:CC:B8 Authority key identifier: 99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B Certificate issuer: /CN=A9192122/serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft Manifest number: 33 Signing time: Wed 15 Apr 2026 08:14:36 +0000 Manifest this update: Wed 15 Apr 2026 08:14:35 +0000 Manifest next update: Wed 22 Apr 2026 08:14:35 +0000 Files and hashes: 1: mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl (hash: zXGcebawlJLNfwKsmhGd07Sgvr0naOqXXDLtuLqpcGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192122, serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B Validity Not Before: Apr 15 08:14:35 2026 GMT Not After : Apr 22 08:14:35 2026 GMT Subject: CN=69df48ec-9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:6f:7a:f4:49:3f:d8:df:a7:66:3b:c5:74: 05:7f:3e:a5:5c:de:27:8d:76:64:7c:f9:0b:13:55: 3c:67:9b:b9:e4:46:0d:90:d7:e9:6a:83:69:32:c6: 08:04:69:a6:d7:15:b7:b7:b8:5a:f3:d5:c1:d0:cf: fb:90:19:13:34:c5:ee:ae:7e:1f:ef:36:87:0a:30: 29:23:df:78:53:b4:7f:7b:54:46:fc:02:27:cf:0f: 8b:ed:48:21:4d:27:0c:2d:1a:c1:13:a9:e1:5e:2a: b1:55:dd:31:45:97:b4:db:28:8b:3b:e8:3f:aa:5c: dc:e3:41:02:d2:05:65:f2:63:3f:be:2c:35:07:04: b9:38:3f:ef:59:5f:84:d9:19:42:c8:68:41:09:f9: 6d:2d:1b:f1:a5:55:28:77:43:64:a2:76:ba:66:63: 0b:f1:2f:6e:23:af:60:56:b8:9f:05:d6:e8:41:a7: c4:63:51:c6:e4:d4:ec:f7:9c:e2:58:cd:b4:b2:39: c7:58:5a:14:01:fb:58:69:42:af:f4:08:2f:9c:ca: 24:fc:35:2a:6e:bf:b2:4d:55:38:c5:bc:69:31:51: 08:47:a2:ab:c0:8d:76:e0:95:65:88:d0:e3:24:69: 78:39:c6:1f:6d:49:f4:b7:f7:1e:72:84:cf:e0:9f: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:77:B2:10:A3:AE:7D:AB:02:29:45:21:6C:3C:72:F3:CF:D8:CC:B8 X509v3 Authority Key Identifier: keyid:99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:03:7c:ad:0b:f2:49:3b:29:1b:c3:36:40:0d:d7:d5:ea:3e: 5a:5e:db:a1:5e:34:31:b6:e9:92:d8:de:90:ad:ef:7d:37:d1: 66:4c:1b:14:1f:9b:f2:de:4b:09:9f:06:85:76:bf:cb:90:62: c4:83:e5:86:72:fd:b1:68:35:a7:89:e4:e1:93:f1:dc:8b:57: c1:a3:fa:cd:a5:cd:39:2c:73:8c:e7:8b:93:19:87:2d:6f:85: a1:fc:5a:bd:c0:52:ba:51:e1:2c:8f:eb:a8:11:86:7e:7c:3e: 1d:6b:8b:0f:05:24:58:8e:90:15:a5:29:d9:95:a3:4a:56:04: 66:01:60:95:29:e1:b0:4a:b5:df:55:62:64:53:b2:0e:c3:59: d5:8a:b9:41:97:6a:9a:8d:de:93:de:ec:06:98:5f:26:99:5d: d5:d8:e7:41:c6:7b:fa:47:91:99:f9:91:d7:df:89:48:f6:8c: af:c9:ac:6e:67:97:c2:30:4c:b8:cf:d3:10:8c:da:e0:21:c8: c0:de:4c:12:b0:be:0b:b3:af:ed:7a:90:5a:19:c8:04:bb:14: 15:f7:33:89:48:73:42:14:84:5e:89:a6:78:44:17:d5:61:e9: 73:a3:5e:cd:fc:f3:7a:10:30:ce:01:07:ee:67:6c:c5:f4:7a: 21:f2:49:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjEyMjExMC8GA1UEBRMoOTk0QjE5RUNEM0EzRDUzQTY3OTU0NjM5Njk4RjVDREY4 OThGOTUyQjAeFw0yNjA0MTUwODE0MzVaFw0yNjA0MjIwODE0MzVaMBgxFjAUBgNV BAMTDTY5ZGY0OGVjLTllM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnq2969Ek/2N+nZjvFdAV/PqVc3ieNdmR8+QsTVTxnm7nkRg2Q1+lqg2kyxggE aabXFbe3uFrz1cHQz/uQGRM0xe6ufh/vNocKMCkj33hTtH97VEb8AifPD4vtSCFN JwwtGsETqeFeKrFV3TFFl7TbKIs76D+qXNzjQQLSBWXyYz++LDUHBLk4P+9ZX4TZ GULIaEEJ+W0tG/GlVSh3Q2SidrpmYwvxL24jr2BWuJ8F1uhBp8RjUcbk1Oz3nOJY zbSyOcdYWhQB+1hpQq/0CC+cyiT8NSpuv7JNVTjFvGkxUQhHoqvAjXbglWWI0OMk aXg5xh9tSfS39x5yhM/gn4HXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs3eyEKOu fasCKUUhbDxy88/YzLgwHwYDVR0jBBgwFoAUmUsZ7NOj1TpnlUY5aY9c34mPlSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMTIyLzZGRDVFQzNFRjNB RTExRjBCNkRENkQ5QzNBNkY1NkJDL21Vc1o3Tk9qMVRwbmxVWTVhWTljMzRtUGxT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbVVzWjdOT2oxVHBubFVZNWFZOWMzNG1QbFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MTIyLzZGRDVFQzNFRjNBRTExRjBCNkRENkQ5QzNBNkY1NkJDL21Vc1o3Tk9qMVRw bmxVWTVhWTljMzRtUGxTcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoA3ytC/JJOykbwzZADdfV6j5aXtuhXjQxtumS2N6Qre99N9FmTBsUH5vy3ksJ nwaFdr/LkGLEg+WGcv2xaDWnieThk/Hci1fBo/rNpc05LHOM54uTGYctb4Wh/Fq9 wFK6UeEsj+uoEYZ+fD4da4sPBSRYjpAVpSnZlaNKVgRmAWCVKeGwSrXfVWJkU7IO w1nVirlBl2qajd6T3uwGmF8mmV3V2OdBxnv6R5GZ+ZHX34lI9oyvyaxuZ5fCMEy4 z9MQjNrgIcjA3kwSsL4Ls6/tepBaGcgEuxQV9zOJSHNCFIReiaZ4RBfVYelzo17N /PN6EDDOAQfuZ2zF9Hoh8kny -----END CERTIFICATE-----Generated at Fri Apr 17 07:23:13 2026 by rpki-client