$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json) Hash identifier: 2saP3pj1rDT/ImLZZj6PQAhhjFYSIhtvDIkLStPa5n8= Subject key identifier: 20:8B:F5:5E:D3:05:81:8C:88:F3:A0:8C:79:12:03:B9:78:A2:28:42 Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft Manifest number: 25 Signing time: Sun 05 Apr 2026 08:12:11 +0000 Manifest this update: Sun 05 Apr 2026 08:12:10 +0000 Manifest next update: Sun 12 Apr 2026 08:12:10 +0000 Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: uj2w141H/JlHBtYnjUbriJkP2hchQVPapnE5vp5w/uE=) 2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Validity Not Before: Apr 5 08:12:10 2026 GMT Not After : Apr 12 08:12:10 2026 GMT Subject: CN=69d2195b-87ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:96:2f:67:52:03:53:02:38:bd:6b:cf:32: ae:c5:a0:6f:74:2f:80:49:d3:b0:d3:6f:5b:bf:23: ac:bb:9b:cd:0e:1a:c2:fb:09:c5:86:7a:d5:c0:9f: 0f:99:79:6e:81:8a:22:3a:10:de:41:b3:a5:d5:32: cf:4b:cb:56:3c:a8:b6:33:b0:7a:3d:3f:01:fc:e2: 04:56:14:1c:c6:20:24:53:82:b6:33:03:cc:d3:8c: cf:1b:26:e4:02:06:38:36:63:1f:ec:2e:b7:1b:b4: 3b:ed:32:ce:06:ee:20:2d:a5:3f:d7:f0:0b:49:fc: 09:f9:eb:f0:48:ff:da:dc:66:6a:d3:75:6f:ff:a4: 80:7e:f5:28:8e:65:c1:86:dc:55:e8:0e:4d:51:5d: a4:f9:16:80:27:9e:ec:5b:cb:e6:ad:d0:8f:e6:45: 1e:3a:1e:90:cb:df:36:89:3d:dd:db:ee:c2:bc:6a: d0:69:db:39:fc:62:4a:da:1b:ec:a5:1f:82:5e:79: 43:8a:c0:3f:f1:a6:1c:2a:6c:1b:d5:a3:d5:43:4f: 33:9c:fe:ff:5f:be:2c:78:f8:5c:ad:2b:83:44:31: 60:1d:81:a6:17:c4:8c:c7:41:a4:f1:09:27:71:91: a6:9d:61:80:b4:9c:92:9d:1b:35:6c:ad:62:9a:90: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:F5:5E:D3:05:81:8C:88:F3:A0:8C:79:12:03:B9:78:A2:28:42 X509v3 Authority Key Identifier: keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:84:25:57:4a:fc:4f:dc:e6:da:49:de:0f:82:bb:ba:94: c0:6a:ad:0e:12:0c:3f:6a:48:e9:98:02:7b:80:ba:31:b5:91: 9f:f8:26:b7:d7:89:ee:02:0c:05:96:d5:6e:fe:ef:da:1c:ff: 45:b6:96:9c:43:f9:2d:8d:af:d7:ed:56:67:f4:4e:ca:eb:a8: 81:8c:77:4f:28:ba:61:47:72:2d:bf:90:ed:3b:7f:60:aa:85: 73:ed:46:14:ac:a8:ef:b8:3d:82:ca:4b:57:94:c8:6f:85:0c: 5b:db:2b:87:25:09:12:ac:8f:cc:96:6b:5e:94:86:2f:a8:17: 31:5f:12:a0:c1:64:c9:74:f0:f4:50:2f:1b:57:19:5e:af:da: 44:42:15:52:bc:c0:90:cc:9b:10:be:32:6f:80:cd:ce:86:7c: 8e:6b:91:69:eb:c6:4a:7f:5c:42:09:ca:b6:f8:0c:41:31:fb: 6d:a3:54:1d:bc:0f:30:61:1a:3d:df:89:54:a4:f5:72:be:2b: fa:5b:27:12:c6:21:8d:28:53:dc:ef:20:1c:87:03:f8:93:00: 92:b5:5d:f3:8b:bd:3a:d0:9a:25:f1:09:08:9d:d2:a0:b3:8e: 53:a4:c2:bc:91:3a:63:b8:74:45:99:55:58:81:d0:16:06:c8: 0f:ef:dd:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEVCOTExMC8GA1UEBRMoMkJCRjhFQUE4MUZCNkNCREJGRjBFMTU5REM3MkVDMUM5 M0UxRkY4MDAeFw0yNjA0MDUwODEyMTBaFw0yNjA0MTIwODEyMTBaMBgxFjAUBgNV BAMTDTY5ZDIxOTViLTg3ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYFJYvZ1IDUwI4vWvPMq7FoG90L4BJ07DTb1u/I6y7m80OGsL7CcWGetXAnw+Z eW6BiiI6EN5Bs6XVMs9Ly1Y8qLYzsHo9PwH84gRWFBzGICRTgrYzA8zTjM8bJuQC Bjg2Yx/sLrcbtDvtMs4G7iAtpT/X8AtJ/An56/BI/9rcZmrTdW//pIB+9SiOZcGG 3FXoDk1RXaT5FoAnnuxby+at0I/mRR46HpDL3zaJPd3b7sK8atBp2zn8YkraG+yl H4JeeUOKwD/xphwqbBvVo9VDTzOc/v9fvix4+FytK4NEMWAdgaYXxIzHQaTxCSdx kaadYYC0nJKdGzVsrWKakFfRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIIv1XtMF gYyI86CMeRIDuXiiKEIwHwYDVR0jBBgwFoAUK7+OqoH7bL2/8OFZ3HLsHJPh/4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0RUI5L0VBMDQ2ODE0MDIy QzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3YkwyXzhPRlozSExzSEpQaF80 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzctT3FvSDdiTDJfOE9GWjNITHNISlBoXzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 RUI5L0VBMDQ2ODE0MDIyQzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3Ykwy XzhPRlozSExzSEpQaF80QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+Z4QlV0r8T9zm2kneD4K7upTAaq0OEgw/akjpmAJ7gLoxtZGf+Ca314nuAgwF ltVu/u/aHP9FtpacQ/ktja/X7VZn9E7K66iBjHdPKLphR3Itv5DtO39gqoVz7UYU rKjvuD2CyktXlMhvhQxb2yuHJQkSrI/MlmtelIYvqBcxXxKgwWTJdPD0UC8bVxle r9pEQhVSvMCQzJsQvjJvgM3OhnyOa5Fp68ZKf1xCCcq2+AxBMftto1QdvA8wYRo9 34lUpPVyviv6WycSxiGNKFPc7yAchwP4kwCStV3zi7060Jol8QkIndKgs45TpMK8 kTpjuHRFmVVYgdAWBsgP792o -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:55 2026 by rpki-client