$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft File: k7syr5RSXBgud_LY1OlpfwxV878.mft (raw, json) Hash identifier: 6VKwXdvR/nV/wTyQ5hi9I6qIaPGU+m2u8b1mjyGXgPo= Subject key identifier: 5A:80:F0:EC:D9:04:45:60:97:5A:AF:E0:70:02:82:D0:EB:AB:7B:45 Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF Certificate issuer: /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft Manifest number: 29 Signing time: Tue 19 May 2026 08:47:17 +0000 Manifest this update: Tue 19 May 2026 08:47:17 +0000 Manifest next update: Tue 26 May 2026 08:47:17 +0000 Files and hashes: 1: k7syr5RSXBgud_LY1OlpfwxV878.crl (hash: VtWwlccCUQ3FD+PjZQZtiSP/FEAPmPFS8cpEt6bjYVs=) 2: F8CCE69E4AC211F1A90B2018BE833773.roa (hash: 4DxKCaJ8CY4O65jnGvaV5LdvnddW1zHd+lBcbMqPaYI=) 3: 23C2AF26267111F19CC61B4CAD833773.roa (hash: GpB5vbunY3S8gJD0IhPMfwl7e07/lo5WTBermhhz/bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF Validity Not Before: May 19 08:47:17 2026 GMT Not After : May 26 08:47:17 2026 GMT Subject: CN=6a0c2395-535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ed:6a:b2:43:ba:46:b3:ef:5f:28:0c:30:dd: 7d:46:8d:32:98:1a:78:8f:49:bf:bf:ab:ee:63:37: 8b:f2:d7:ef:6d:90:90:fa:3b:53:4a:00:77:3a:01: 28:a9:2d:5b:86:72:aa:09:1f:41:fa:90:e5:31:8c: 34:30:0a:82:c9:b0:89:25:5f:91:46:ab:90:c4:b1: 28:3b:a9:d4:3c:7a:99:6b:6e:1e:6a:31:64:2f:5f: ce:7f:02:66:0c:27:90:bf:d1:8f:68:b6:76:7a:a4: 81:f3:52:f5:98:0b:a0:4d:77:40:97:d1:84:b2:43: 71:2b:9f:ef:35:4c:73:bb:93:71:a0:3b:03:d7:2a: 05:ef:fd:a5:36:3f:28:84:46:8d:a3:45:1e:56:c9: b7:c4:39:3b:d7:9c:c7:87:08:4b:44:cb:33:b9:11: 25:d1:d8:0f:93:2c:d6:25:b6:b9:99:dc:0c:5f:16: 8a:b0:63:b9:af:93:56:d4:eb:ef:35:47:53:2a:1c: e6:f9:ac:ad:3b:51:5b:8f:db:82:e1:d7:d1:51:95: 8c:30:5f:ba:15:ba:e5:c3:27:cd:4c:bc:30:79:e0: 67:e6:8d:f6:59:e7:74:de:a5:3b:ee:11:36:d6:04: 1e:de:f6:02:80:6d:17:f2:27:5c:f1:04:9c:40:89: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:80:F0:EC:D9:04:45:60:97:5A:AF:E0:70:02:82:D0:EB:AB:7B:45 X509v3 Authority Key Identifier: keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:4a:28:fb:0f:0a:de:4c:f9:5b:6c:d8:b9:ca:b1:1b:8c:c8: 5b:f0:4c:04:b5:97:86:bd:36:91:95:56:c0:7c:dd:b3:67:85: 02:fb:2a:fd:cf:6b:ab:73:c6:41:f0:27:72:7e:b6:17:c0:9c: bd:4c:54:d2:f7:01:fc:49:fd:8d:5d:99:2e:82:ad:ad:04:31: 8f:9b:0b:64:03:74:23:2a:5e:1c:7f:89:3c:6c:7a:8a:e6:ba: be:bf:cd:57:f7:d9:74:b5:2b:c9:16:17:4d:b1:4c:30:26:2a: 1b:07:f7:01:ac:58:e1:82:f5:44:44:34:0d:f8:53:61:03:a8: 0c:59:01:63:d9:7c:03:00:bf:aa:cb:32:8a:58:77:c3:45:a4: ac:d5:eb:fa:a4:e9:2d:7a:df:56:bb:7c:65:56:21:7d:01:11: 15:9e:f7:ba:90:f8:ca:70:7f:ad:45:3b:45:cb:8c:53:6f:92: 49:ff:53:c3:cc:b1:37:f9:08:2e:28:f8:b0:64:59:8e:09:86: 57:c6:ed:2e:a8:83:ff:d6:91:8c:3b:7d:fb:59:6c:65:3d:ba: 9a:0d:61:67:44:d2:6a:31:1b:9c:2f:7e:8d:62:65:53:be:af: 67:35:63:87:75:1c:24:e6:10:aa:fc:aa:a6:50:f0:80:24:cc: d5:9c:4a:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTlBODExMC8GA1UEBRMoOTNCQjMyQUY5NDUyNUMxODJFNzdGMkQ4RDRFOTY5N0Yw QzU1RjNCRjAeFw0yNjA1MTkwODQ3MTdaFw0yNjA1MjYwODQ3MTdaMBgxFjAUBgNV BAMTDTZhMGMyMzk1LTUzNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu7WqyQ7pGs+9fKAww3X1GjTKYGniPSb+/q+5jN4vy1+9tkJD6O1NKAHc6ASip LVuGcqoJH0H6kOUxjDQwCoLJsIklX5FGq5DEsSg7qdQ8eplrbh5qMWQvX85/AmYM J5C/0Y9otnZ6pIHzUvWYC6BNd0CX0YSyQ3Ern+81THO7k3GgOwPXKgXv/aU2PyiE Ro2jRR5WybfEOTvXnMeHCEtEyzO5ESXR2A+TLNYltrmZ3AxfFoqwY7mvk1bU6+81 R1MqHOb5rK07UVuP24Lh19FRlYwwX7oVuuXDJ81MvDB54GfmjfZZ53TepTvuETbW BB7e9gKAbRfyJ1zxBJxAiQkJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWoDw7NkE RWCXWq/gcAKC0Oure0UwHwYDVR0jBBgwFoAUk7syr5RSXBgud/LY1OlpfwxV878w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOUE4L0RDQzA5MDY2MjY3 MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJndWRfTFkxT2xwZnd4Vjg3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvazdzeXI1UlNYQmd1ZF9MWTFPbHBmd3hWODc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF OUE4L0RDQzA5MDY2MjY3MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJn dWRfTFkxT2xwZnd4Vjg3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDTSij7DwreTPlbbNi5yrEbjMhb8EwEtZeGvTaRlVbAfN2zZ4UC+yr9z2urc8ZB 8CdyfrYXwJy9TFTS9wH8Sf2NXZkugq2tBDGPmwtkA3QjKl4cf4k8bHqK5rq+v81X 99l0tSvJFhdNsUwwJiobB/cBrFjhgvVERDQN+FNhA6gMWQFj2XwDAL+qyzKKWHfD RaSs1ev6pOktet9Wu3xlViF9AREVnve6kPjKcH+tRTtFy4xTb5JJ/1PDzLE3+Qgu KPiwZFmOCYZXxu0uqIP/1pGMO337WWxlPbqaDWFnRNJqMRucL36NYmVTvq9nNWOH dRwk5hCq/KqmUPCAJMzVnEpy -----END CERTIFICATE-----Generated at Thu May 21 10:39:56 2026 by rpki-client