$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft File: k7syr5RSXBgud_LY1OlpfwxV878.mft (raw, json) Hash identifier: GQQz3BRZBfB5sjTEveiB/wNvfRFdw36Wpm7LCVaAIjY= Subject key identifier: 1E:4D:95:94:AE:BD:B3:CE:D9:78:CC:89:A6:E3:BD:5D:52:56:14:38 Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF Certificate issuer: /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft Manifest number: 0B Signing time: Sun 05 Apr 2026 08:30:10 +0000 Manifest this update: Sun 05 Apr 2026 08:30:10 +0000 Manifest next update: Sun 12 Apr 2026 08:30:10 +0000 Files and hashes: 1: k7syr5RSXBgud_LY1OlpfwxV878.crl (hash: yeCNqNV9cVnpro/W3TkxifRfJCgcZ64KLOdznHf+giI=) 2: 23C2AF26267111F19CC61B4CAD833773.roa (hash: eoaJU5L5AWETQbh5tzlz1LYyadz6jGwQzQ6i9ICSO+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF Validity Not Before: Apr 5 08:30:10 2026 GMT Not After : Apr 12 08:30:10 2026 GMT Subject: CN=69d21d92-1ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:ef:39:a7:3b:e4:96:d0:f7:8e:f0:90:b1: c7:f2:a0:88:65:8c:dd:17:e8:21:3d:e5:0a:e2:9c: 1a:af:9d:ca:4f:f8:14:1c:0f:c0:3f:07:3a:5c:2d: 6f:b3:a8:86:66:45:7f:73:6e:b0:c5:11:80:d0:55: f5:39:d9:19:cf:9b:99:f9:4e:c1:9c:9d:82:d5:ea: f9:e6:f3:83:72:5f:6f:ba:15:50:8c:b1:b7:ad:93: 22:0c:13:10:48:97:7e:3a:0b:86:fc:5f:9f:f4:71: 21:ca:a1:b9:81:b5:c5:7c:e3:97:38:87:a1:bd:c3: 45:a6:b0:a5:e8:6d:5f:1a:67:1f:ac:67:47:a8:79: 6c:3b:9c:13:a2:a9:51:87:3b:f7:36:34:0e:07:ba: 4a:5d:86:91:f5:80:6d:2a:1b:ee:08:f3:a9:5c:4c: 2e:4a:67:9b:e7:da:c1:77:b2:df:ed:9f:71:c1:3b: e3:86:c1:fb:bc:12:67:6c:1d:c5:99:db:a8:fa:c7: 48:3d:26:d7:63:0d:14:4b:58:24:94:e8:40:62:8b: 42:91:93:ba:20:b4:76:2e:14:89:73:3e:75:7f:37: 9b:59:85:ef:53:01:45:5c:ac:6e:83:a8:da:42:84: 4f:a8:f9:d6:0d:63:50:f6:d2:cb:41:9c:60:cb:f9: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:95:94:AE:BD:B3:CE:D9:78:CC:89:A6:E3:BD:5D:52:56:14:38 X509v3 Authority Key Identifier: keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b7:f5:00:2c:94:25:74:2a:8d:a7:2d:93:48:dc:99:62:27: 31:5e:68:2e:43:38:73:a4:7d:03:e0:3b:5b:e6:4a:7a:9d:92: 67:1c:55:fe:49:94:35:2c:3d:7c:f2:4e:57:39:d3:1d:6a:c7: 19:db:e1:89:36:e2:17:a5:0f:bb:c0:d9:3b:57:40:99:d0:3c: 8c:7f:b5:ab:f7:5e:98:05:a0:bd:a2:f3:39:71:29:ec:65:8f: 9f:5b:df:f4:fb:bd:99:f7:b3:2b:37:d8:8a:7a:82:fa:05:ea: cd:87:7f:a9:ee:3b:f9:41:0f:65:00:b2:24:9b:43:84:93:d8: 88:27:46:d6:a0:9a:43:92:25:59:0e:1c:8c:8a:05:5a:1f:d0: 6c:02:b3:eb:54:da:be:3d:ad:e2:f7:fb:91:2f:d9:19:bc:3f: 6f:47:02:2a:de:ef:4a:f3:da:f7:03:c9:bf:26:8c:69:43:7e: 06:4b:78:73:1c:4d:01:83:02:44:7d:a1:c6:e8:fb:fd:4b:9b: 0f:c4:d0:c3:10:1c:0f:ab:99:4d:cd:9f:f2:cd:12:9f:3c:ef: 71:ef:0f:57:56:7f:2c:b7:af:7e:6d:e9:7a:a7:fc:fe:23:b7: 38:a1:45:93:b9:9e:a8:c4:61:f7:7e:2c:9f:5c:3e:96:59:b8: c5:2d:20:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTlBODExMC8GA1UEBRMoOTNCQjMyQUY5NDUyNUMxODJFNzdGMkQ4RDRFOTY5N0Yw QzU1RjNCRjAeFw0yNjA0MDUwODMwMTBaFw0yNjA0MTIwODMwMTBaMBgxFjAUBgNV BAMTDTY5ZDIxZDkyLTFiYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjvO85pzvkltD3jvCQscfyoIhljN0X6CE95QrinBqvncpP+BQcD8A/BzpcLW+z qIZmRX9zbrDFEYDQVfU52RnPm5n5TsGcnYLV6vnm84NyX2+6FVCMsbetkyIMExBI l346C4b8X5/0cSHKobmBtcV845c4h6G9w0WmsKXobV8aZx+sZ0eoeWw7nBOiqVGH O/c2NA4HukpdhpH1gG0qG+4I86lcTC5KZ5vn2sF3st/tn3HBO+OGwfu8EmdsHcWZ 26j6x0g9JtdjDRRLWCSU6EBii0KRk7ogtHYuFIlzPnV/N5tZhe9TAUVcrG6DqNpC hE+o+dYNY1D20stBnGDL+Zd5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHk2VlK69 s87ZeMyJpuO9XVJWFDgwHwYDVR0jBBgwFoAUk7syr5RSXBgud/LY1OlpfwxV878w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOUE4L0RDQzA5MDY2MjY3 MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJndWRfTFkxT2xwZnd4Vjg3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvazdzeXI1UlNYQmd1ZF9MWTFPbHBmd3hWODc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF OUE4L0RDQzA5MDY2MjY3MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJn dWRfTFkxT2xwZnd4Vjg3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCvt/UALJQldCqNpy2TSNyZYicxXmguQzhzpH0D4Dtb5kp6nZJnHFX+SZQ1LD18 8k5XOdMdascZ2+GJNuIXpQ+7wNk7V0CZ0DyMf7Wr916YBaC9ovM5cSnsZY+fW9/0 +72Z97MrN9iKeoL6BerNh3+p7jv5QQ9lALIkm0OEk9iIJ0bWoJpDkiVZDhyMigVa H9BsArPrVNq+Pa3i9/uRL9kZvD9vRwIq3u9K89r3A8m/JoxpQ34GS3hzHE0BgwJE faHG6Pv9S5sPxNDDEBwPq5lNzZ/yzRKfPO9x7w9XVn8st69+bel6p/z+I7c4oUWT uZ6oxGH3fiyfXD6WWbjFLSBF -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:10 2026 by rpki-client