$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json) Hash identifier: janrPT7JysqfXNLDlimEvLFD+RVVm0AyvrqiRxJXefo= Subject key identifier: 61:56:D4:88:AA:A4:67:50:50:02:B1:B9:50:2B:52:EB:11:D5:D6:CF Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft Manifest number: 3C Signing time: Thu 21 May 2026 08:42:58 +0000 Manifest this update: Thu 21 May 2026 08:42:58 +0000 Manifest next update: Thu 28 May 2026 08:42:58 +0000 Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: 4TLdOtq8ULuqgwjmuVmThVt6l9LOCJzR4X43AwJa0MY=) 2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Validity Not Before: May 21 08:42:58 2026 GMT Not After : May 28 08:42:58 2026 GMT Subject: CN=6a0ec592-ae02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:ad:52:50:d3:e3:d6:e4:a9:31:8f:8c:a6: 8e:6a:44:87:4a:23:a1:6d:f8:a0:06:72:d6:63:f7: 6d:10:1b:0f:37:73:ac:25:fe:71:40:06:54:6e:8a: cf:0b:15:f9:b7:17:0c:8f:9e:90:fb:aa:64:83:f3: 0a:68:8e:25:57:6f:0f:6d:ef:97:d3:e1:86:98:a9: ee:81:37:4c:31:9f:84:7a:5e:2c:73:17:52:c9:b4: cc:64:3b:8a:34:36:6b:77:b6:0e:6b:bc:65:44:50: 33:ed:25:1f:b3:89:4f:c4:89:77:99:92:1f:17:fc: d8:46:28:46:36:1c:03:f4:7f:b6:d5:34:c1:9f:01: ec:df:9d:7d:76:60:f9:4f:08:25:d4:c3:ad:fb:91: b1:36:e7:df:c9:ff:c9:7c:3a:68:b9:67:d6:cd:db: bd:db:65:04:16:57:af:47:f6:ac:23:2b:25:a9:de: d4:48:ad:81:48:16:3e:13:95:c2:0b:49:06:45:64: 7f:a5:e5:8b:a2:b4:02:29:b7:0d:2d:ad:35:f0:a3: ee:b3:7e:a6:2b:4f:6c:af:35:e2:74:3b:2d:1f:a1: 3e:0d:1b:fb:fd:13:03:13:47:63:5d:3d:ff:57:27: 93:78:4f:b6:bf:42:68:c9:3a:e8:b9:2d:ea:07:c7: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:56:D4:88:AA:A4:67:50:50:02:B1:B9:50:2B:52:EB:11:D5:D6:CF X509v3 Authority Key Identifier: keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:75:93:df:67:60:3a:60:2e:9c:35:ee:0e:91:8e:0f:50:38: 19:58:41:96:7f:23:bf:c8:68:a7:3d:34:f4:c3:03:3a:7d:e0: 0a:73:8b:e8:c9:6d:0c:9d:4d:b1:12:5e:f7:32:a0:c6:23:06: 75:09:c4:c2:89:34:38:1b:c1:59:8f:7e:c7:d2:b3:a8:2f:c8: 15:84:df:5e:00:f3:1b:de:4f:45:41:bd:60:d2:fd:7c:c6:cd: 14:00:6d:2e:49:db:1b:8d:f4:3a:52:85:80:0f:94:33:74:3c: 8c:84:b4:cd:10:b2:97:a1:69:e1:b9:d7:fc:6d:8c:c3:8d:de: d6:ec:25:ea:db:7d:01:86:89:d1:32:e7:c6:13:66:40:3f:eb: ac:8e:44:f4:95:90:f9:aa:37:c3:ad:10:a5:74:4f:46:64:e8: 0f:28:1f:cf:07:ec:db:29:03:65:ca:d5:35:2d:53:f1:e7:a1: 4b:72:7b:75:b2:b9:fb:67:d8:43:2e:e4:ec:35:13:14:9c:87: 7d:6b:86:5d:42:9f:56:35:96:3c:4d:83:de:3d:d6:16:b1:cd: 57:4c:fe:b0:cf:c6:68:14:37:ff:3d:09:5b:fb:9b:74:4b:9e: bb:f2:b6:61:b6:0a:31:61:e0:75:53:6e:a0:47:23:d9:0f:70: f5:c4:5b:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEVCOTExMC8GA1UEBRMoMkJCRjhFQUE4MUZCNkNCREJGRjBFMTU5REM3MkVDMUM5 M0UxRkY4MDAeFw0yNjA1MjEwODQyNThaFw0yNjA1MjgwODQyNThaMBgxFjAUBgNV BAMTDTZhMGVjNTkyLWFlMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoN61SUNPj1uSpMY+Mpo5qRIdKI6Ft+KAGctZj920QGw83c6wl/nFABlRuis8L Ffm3FwyPnpD7qmSD8wpojiVXbw9t75fT4YaYqe6BN0wxn4R6XixzF1LJtMxkO4o0 Nmt3tg5rvGVEUDPtJR+ziU/EiXeZkh8X/NhGKEY2HAP0f7bVNMGfAezfnX12YPlP CCXUw637kbE259/J/8l8Omi5Z9bN273bZQQWV69H9qwjKyWp3tRIrYFIFj4TlcIL SQZFZH+l5YuitAIptw0trTXwo+6zfqYrT2yvNeJ0Oy0foT4NG/v9EwMTR2NdPf9X J5N4T7a/QmjJOui5LeoHxxoTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYVbUiKqk Z1BQArG5UCtS6xHV1s8wHwYDVR0jBBgwFoAUK7+OqoH7bL2/8OFZ3HLsHJPh/4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0RUI5L0VBMDQ2ODE0MDIy QzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3YkwyXzhPRlozSExzSEpQaF80 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzctT3FvSDdiTDJfOE9GWjNITHNISlBoXzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 RUI5L0VBMDQ2ODE0MDIyQzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3Ykwy XzhPRlozSExzSEpQaF80QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPdZPfZ2A6YC6cNe4OkY4PUDgZWEGWfyO/yGinPTT0wwM6feAKc4voyW0MnU2x El73MqDGIwZ1CcTCiTQ4G8FZj37H0rOoL8gVhN9eAPMb3k9FQb1g0v18xs0UAG0u SdsbjfQ6UoWAD5QzdDyMhLTNELKXoWnhudf8bYzDjd7W7CXq230BhonRMufGE2ZA P+usjkT0lZD5qjfDrRCldE9GZOgPKB/PB+zbKQNlytU1LVPx56FLcnt1srn7Z9hD LuTsNRMUnId9a4ZdQp9WNZY8TYPePdYWsc1XTP6wz8ZoFDf/PQlb+5t0S5678rZh tgoxYeB1U26gRyPZD3D1xFvE -----END CERTIFICATE-----Generated at Thu May 21 10:54:04 2026 by rpki-client