$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json) Hash identifier: kN0agxpHK1jnDIIO2frFNWjvH/dpe6UAwys++WdzFak= Subject key identifier: 75:87:4D:7C:ED:D0:64:9A:BD:AF:B5:6F:1D:6A:19:68:28:99:AA:3A Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft Manifest number: 1D Signing time: Wed 25 Mar 2026 08:07:45 +0000 Manifest this update: Wed 25 Mar 2026 08:07:45 +0000 Manifest next update: Wed 01 Apr 2026 08:07:45 +0000 Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: O+bzME+AiFH4tLzOCs4oTzAYVLZ40U+dI/4Mn0API6c=) 2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: fUHogMZz4tdUvZu8KePo12NLDRRZoGN3PVp3/Klsp1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Validity Not Before: Mar 25 08:07:45 2026 GMT Not After : Apr 1 08:07:45 2026 GMT Subject: CN=69c397d1-529d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:d6:44:8e:63:ee:53:8a:84:f0:0c:2a:23: 56:a9:95:81:25:40:70:8e:3e:ca:d5:b4:5d:9a:c4: c5:dc:59:1f:aa:4d:f5:ba:1e:11:88:32:f9:96:39: 80:cc:fd:26:d9:3d:21:be:a4:0d:04:c6:f0:8c:63: c2:c4:83:d4:49:14:ef:a2:8c:78:55:dc:d6:4e:26: 6b:41:f4:d6:5c:a1:f2:e3:2e:53:b0:bc:1f:63:1e: 69:d6:14:11:eb:30:aa:89:ab:4e:98:93:ce:16:2c: 33:90:bb:24:1e:9a:7e:3f:3d:9c:8c:38:0f:d0:3b: b4:ca:8e:58:5c:8e:ae:c0:b1:97:19:27:e8:03:d5: 31:69:63:ab:16:eb:89:ca:3b:de:cf:32:5d:a7:47: 61:8d:c3:7c:74:d3:b0:83:37:6e:66:ad:cc:e7:67: 66:65:82:ba:3e:ab:05:6b:98:62:a9:50:48:11:6a: 80:68:c2:7e:1a:7e:4f:e3:bd:9c:74:da:b1:e6:3a: ee:aa:2b:78:f4:8b:30:cd:25:df:87:06:dd:e8:62: 55:8e:23:dc:03:8e:99:e6:82:26:97:20:af:d9:e4: 74:05:0a:44:b9:15:b1:35:d1:d6:6b:a6:d7:06:69: 0e:40:77:6c:ec:09:38:2c:59:42:ee:bf:9a:bc:07: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:4D:7C:ED:D0:64:9A:BD:AF:B5:6F:1D:6A:19:68:28:99:AA:3A X509v3 Authority Key Identifier: keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:04:4a:00:2f:d8:6b:e7:e0:46:f8:31:e2:76:a0:83:2f:e9: e5:4a:9b:59:74:54:af:83:39:5b:b0:7c:b9:b8:47:86:4e:56: 36:5a:b8:e6:da:71:44:48:9b:ce:4a:7b:7b:4a:83:90:ed:b8: f6:99:e2:c7:8c:4c:e2:47:3a:f6:f2:d9:30:0c:bb:c6:69:2e: fb:0c:e1:2a:cb:f6:ec:3c:6d:8a:f1:53:19:ba:01:22:68:8c: 90:06:dd:51:16:b0:25:66:84:81:4f:4c:44:a2:de:c4:f0:56: 69:b2:14:ec:6f:26:60:9b:5b:d4:74:37:be:23:86:ea:3d:f5: 1f:dd:d6:ac:ad:1c:f0:e5:82:89:8b:26:fa:3c:81:69:84:59: 14:c2:47:43:cb:51:a4:7e:1f:76:8e:6e:74:e2:66:ac:60:63: 07:ce:4b:2c:d6:39:54:52:81:86:85:3e:93:72:c3:81:a2:6c: 67:f6:80:02:71:49:6a:e9:d0:a3:40:c2:e2:75:9e:59:c3:1a: 1b:02:f0:59:28:ee:18:14:90:9e:6b:cf:d2:d5:4a:74:b7:ab: ac:e2:15:6d:b7:8e:1a:2c:a3:ee:25:95:4a:13:76:82:28:d1: 8f:95:c2:17:10:3b:ad:f6:6b:0c:1a:cb:c4:5d:d8:b7:64:d6: 59:54:85:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEVCOTExMC8GA1UEBRMoMkJCRjhFQUE4MUZCNkNCREJGRjBFMTU5REM3MkVDMUM5 M0UxRkY4MDAeFw0yNjAzMjUwODA3NDVaFw0yNjA0MDEwODA3NDVaMBgxFjAUBgNV BAMTDTY5YzM5N2QxLTUyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFadZEjmPuU4qE8AwqI1aplYElQHCOPsrVtF2axMXcWR+qTfW6HhGIMvmWOYDM /SbZPSG+pA0ExvCMY8LEg9RJFO+ijHhV3NZOJmtB9NZcofLjLlOwvB9jHmnWFBHr MKqJq06Yk84WLDOQuyQemn4/PZyMOA/QO7TKjlhcjq7AsZcZJ+gD1TFpY6sW64nK O97PMl2nR2GNw3x007CDN25mrcznZ2Zlgro+qwVrmGKpUEgRaoBown4afk/jvZx0 2rHmOu6qK3j0izDNJd+HBt3oYlWOI9wDjpnmgiaXIK/Z5HQFCkS5FbE10dZrptcG aQ5Ad2zsCTgsWULuv5q8ByWHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdYdNfO3Q ZJq9r7VvHWoZaCiZqjowHwYDVR0jBBgwFoAUK7+OqoH7bL2/8OFZ3HLsHJPh/4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0RUI5L0VBMDQ2ODE0MDIy QzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3YkwyXzhPRlozSExzSEpQaF80 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzctT3FvSDdiTDJfOE9GWjNITHNISlBoXzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 RUI5L0VBMDQ2ODE0MDIyQzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3Ykwy XzhPRlozSExzSEpQaF80QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqBEoAL9hr5+BG+DHidqCDL+nlSptZdFSvgzlbsHy5uEeGTlY2Wrjm2nFESJvO Snt7SoOQ7bj2meLHjEziRzr28tkwDLvGaS77DOEqy/bsPG2K8VMZugEiaIyQBt1R FrAlZoSBT0xEot7E8FZpshTsbyZgm1vUdDe+I4bqPfUf3dasrRzw5YKJiyb6PIFp hFkUwkdDy1Gkfh92jm504masYGMHzkss1jlUUoGGhT6TcsOBomxn9oACcUlq6dCj QMLidZ5ZwxobAvBZKO4YFJCea8/S1Up0t6us4hVtt44aLKPuJZVKE3aCKNGPlcIX EDut9msMGsvEXdi3ZNZZVIUt -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:54 2026 by rpki-client