$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft File: k7syr5RSXBgud_LY1OlpfwxV878.mft (raw, json) Hash identifier: 6Sh4t60jQtn1Dok4OsePHWMca+AQP6kHJLCB1jqWlic= Subject key identifier: 86:F3:9F:FF:EC:B2:97:86:00:CC:C5:CA:66:E9:DA:F7:82:40:D9:63 Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF Certificate issuer: /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft Manifest number: 05 Signing time: Wed 25 Mar 2026 08:26:21 +0000 Manifest this update: Wed 25 Mar 2026 08:26:21 +0000 Manifest next update: Wed 01 Apr 2026 08:26:21 +0000 Files and hashes: 1: k7syr5RSXBgud_LY1OlpfwxV878.crl (hash: p7H+tUR1jfZ74T53SiQw9jyabDsvS0ZUl8NiEhIiyL4=) 2: 23C2AF26267111F19CC61B4CAD833773.roa (hash: eoaJU5L5AWETQbh5tzlz1LYyadz6jGwQzQ6i9ICSO+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF Validity Not Before: Mar 25 08:26:21 2026 GMT Not After : Apr 1 08:26:21 2026 GMT Subject: CN=69c39c2d-3479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:cf:8f:3d:5d:64:d4:2e:9d:9c:7b:d7:c0: 89:e3:f5:eb:4a:16:a2:d8:c8:87:74:8a:c4:b8:04: 61:bf:d4:cd:a4:6e:ef:f9:14:c9:2d:ed:9d:18:17: 91:55:39:09:3b:6e:47:1c:d9:89:30:61:38:a1:ce: 75:25:33:5e:77:43:1b:f7:ff:90:74:cf:25:50:94: 9e:47:e9:a4:e3:df:e7:96:a9:0f:30:43:28:f0:6c: cd:90:ef:58:cb:d0:ee:7a:49:21:2f:5c:92:68:8a: 7d:8d:0a:61:71:8d:8a:5b:f8:b9:94:47:07:43:e0: bf:09:b6:d4:10:76:4e:13:d8:3d:55:70:04:60:03: 34:34:7e:9d:de:02:70:9d:21:6c:be:b6:b4:cf:2e: 8a:f1:55:ef:5f:a5:26:b0:94:9c:ac:ec:11:fc:09: 85:27:a2:5c:15:7d:d5:9c:3d:c4:ce:16:b3:f4:4b: f6:0b:bb:0a:bc:f9:42:d7:44:d3:0c:fa:86:a6:d3: 47:8e:eb:62:96:0e:e3:b1:fa:ae:31:7b:07:6d:26: 4f:f0:1b:66:74:d8:ff:46:31:84:b3:09:6a:00:87: 2a:2e:5d:0a:c1:f5:3a:f1:6e:bf:18:d4:8c:dc:18: 5f:72:c8:30:8c:70:ed:31:c6:3f:81:a4:6b:8d:c3: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F3:9F:FF:EC:B2:97:86:00:CC:C5:CA:66:E9:DA:F7:82:40:D9:63 X509v3 Authority Key Identifier: keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ee:d3:ce:b4:5e:d8:41:06:e6:b2:57:da:45:c0:b6:da:fd: 5a:7a:e0:14:01:65:38:ba:da:ce:d9:7d:25:82:33:5b:cf:1b: 23:78:ee:33:df:28:91:93:ae:cd:bf:e9:30:aa:cf:6a:bd:41: 3f:e2:49:c4:9e:c9:61:03:22:e3:89:55:c8:a4:66:92:cc:a2: d9:dd:e0:e3:ad:7d:d4:8c:6f:d5:6d:5a:a5:fb:27:74:c2:b8: db:b5:2c:1e:5d:c8:67:cc:21:35:7d:da:a6:b2:ce:fd:00:35: bf:b9:1b:c1:7d:71:b9:52:c2:da:17:ba:55:ac:cb:33:cd:f9: e7:f4:1b:24:d5:ee:f4:ca:b5:26:9d:d0:0b:96:96:4a:35:d8: 91:f1:1d:e0:bd:af:23:65:5a:91:5e:9d:d0:c0:a7:1d:b0:78: a6:e5:db:4d:ed:42:90:50:70:ab:a5:b0:10:57:3d:85:9d:38: 01:57:6d:e6:e0:07:c5:80:92:c8:28:ca:e2:89:28:f7:ce:ac: ac:ee:55:41:94:3f:e8:1d:41:48:f4:be:48:7c:ee:b9:24:03: ce:a8:80:eb:3d:3a:45:0a:8c:e7:96:c8:4b:0b:d8:b2:da:c3: 0d:0b:d8:28:9e:27:44:05:34:ce:b5:12:33:c1:03:28:a7:b8: 1c:3e:fd:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTlBODExMC8GA1UEBRMoOTNCQjMyQUY5NDUyNUMxODJFNzdGMkQ4RDRFOTY5N0Yw QzU1RjNCRjAeFw0yNjAzMjUwODI2MjFaFw0yNjA0MDEwODI2MjFaMBgxFjAUBgNV BAMTDTY5YzM5YzJkLTM0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcIs+PPV1k1C6dnHvXwInj9etKFqLYyId0isS4BGG/1M2kbu/5FMkt7Z0YF5FV OQk7bkcc2YkwYTihznUlM153Qxv3/5B0zyVQlJ5H6aTj3+eWqQ8wQyjwbM2Q71jL 0O56SSEvXJJoin2NCmFxjYpb+LmURwdD4L8JttQQdk4T2D1VcARgAzQ0fp3eAnCd IWy+trTPLorxVe9fpSawlJys7BH8CYUnolwVfdWcPcTOFrP0S/YLuwq8+ULXRNMM +oam00eO62KWDuOx+q4xewdtJk/wG2Z02P9GMYSzCWoAhyouXQrB9Trxbr8Y1Izc GF9yyDCMcO0xxj+BpGuNw3aNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhvOf/+yy l4YAzMXKZuna94JA2WMwHwYDVR0jBBgwFoAUk7syr5RSXBgud/LY1OlpfwxV878w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOUE4L0RDQzA5MDY2MjY3 MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJndWRfTFkxT2xwZnd4Vjg3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvazdzeXI1UlNYQmd1ZF9MWTFPbHBmd3hWODc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF OUE4L0RDQzA5MDY2MjY3MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJn dWRfTFkxT2xwZnd4Vjg3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAT7tPOtF7YQQbmslfaRcC22v1aeuAUAWU4utrO2X0lgjNbzxsjeO4z3yiRk67N v+kwqs9qvUE/4knEnslhAyLjiVXIpGaSzKLZ3eDjrX3UjG/VbVql+yd0wrjbtSwe XchnzCE1fdqmss79ADW/uRvBfXG5UsLaF7pVrMszzfnn9Bsk1e70yrUmndALlpZK NdiR8R3gva8jZVqRXp3QwKcdsHim5dtN7UKQUHCrpbAQVz2FnTgBV23m4AfFgJLI KMriiSj3zqys7lVBlD/oHUFI9L5IfO65JAPOqIDrPTpFCoznlshLC9iy2sMNC9go nidEBTTOtRIzwQMop7gcPv1K -----END CERTIFICATE-----Generated at Thu Mar 26 23:35:53 2026 by rpki-client