$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json) Hash identifier: J+26gwH94vPVDBoC0DvG0YbqmR+ghNhqzrsJ+sWpCz8= Subject key identifier: AE:37:63:BB:0D:9D:CC:71:2E:C0:06:67:04:5C:00:2C:37:29:B1:52 Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft Manifest number: 2B Signing time: Fri 17 Apr 2026 08:29:57 +0000 Manifest this update: Fri 17 Apr 2026 08:29:57 +0000 Manifest next update: Fri 24 Apr 2026 08:29:57 +0000 Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: DuqEaMtqULJ1Lc7jXg3HTM/zXocx97qB/B8qW8zYN7k=) 2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Validity Not Before: Apr 17 08:29:57 2026 GMT Not After : Apr 24 08:29:57 2026 GMT Subject: CN=69e1ef85-3947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:ca:4d:67:23:6d:54:a2:2d:ca:82:7e:d2: 20:4b:e4:46:88:44:c6:59:44:46:d3:3b:35:03:be: ed:da:4b:f8:58:58:ea:a9:9b:35:ad:10:be:a0:c3: 0b:e2:b2:d9:c3:3a:3f:e7:70:d3:23:85:3d:5a:89: 75:30:0e:e0:79:b6:da:20:e2:d8:0a:2d:2c:9d:dd: b2:94:ae:5a:98:81:fe:2f:7a:f4:c0:e2:77:da:8f: bb:fa:5b:38:5f:42:ac:be:3b:a2:26:87:fe:8f:02: b2:c6:40:7d:4b:70:a6:78:22:af:c1:a2:89:a8:46: 42:da:52:6e:87:af:e5:bf:b6:c9:5d:bd:57:a6:a7: be:97:26:53:21:b9:77:ab:d6:5d:ca:c8:da:34:c0: 4f:35:21:a4:5b:69:93:82:9b:d5:ac:09:7e:c7:09: f5:00:94:7b:a6:7b:e1:c7:8b:c1:0d:ae:72:e6:d2: 20:bc:e6:ee:0f:22:0c:46:92:f6:04:2e:6b:31:2e: 89:1e:3d:f8:4e:5c:ef:83:22:ba:94:f3:13:9e:0c: 29:d6:73:05:dd:ef:e7:5f:5b:77:73:bc:58:bf:32: f8:a0:97:1d:05:06:f8:6c:87:ff:88:3b:69:a9:58: 17:28:a6:54:6f:61:a6:5f:4f:b8:50:cc:be:c6:d4: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:37:63:BB:0D:9D:CC:71:2E:C0:06:67:04:5C:00:2C:37:29:B1:52 X509v3 Authority Key Identifier: keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:40:0b:50:d3:0f:ee:38:5d:db:9a:b5:3c:6e:f8:e0:86: dd:95:7e:30:9b:06:19:b1:6e:1d:87:c5:9e:c3:68:78:ec:91: ca:84:c9:3f:7b:02:20:9a:5d:cc:95:31:0e:9d:81:6e:5a:69: 90:05:85:e2:99:2f:f7:62:5e:61:ce:a0:ce:b8:ca:da:42:bc: 0c:14:3a:ea:8c:b4:c0:14:e9:5f:65:f3:df:12:93:e9:6e:cb: 67:d8:d2:ca:2d:b4:0e:31:8b:de:a6:ae:b7:5a:73:e0:f5:2c: f6:8a:23:ca:85:9e:0e:0b:2a:e1:62:3c:ea:f2:c0:2d:52:3a: 05:0d:7b:b5:4f:b9:4f:4f:f7:3c:53:1d:60:e8:f2:dd:dd:c1: 7a:45:6d:25:05:4a:40:f3:96:02:37:f3:6b:08:d8:af:46:6b: e5:b4:73:23:1e:96:f2:7a:00:7a:37:8a:36:c7:7a:3e:3b:5b: 8f:d6:a4:42:ed:37:6d:84:08:b0:d3:3d:69:fe:df:73:0c:c2: c1:4e:fd:6c:72:16:39:52:86:60:b1:bf:70:32:ce:28:6b:e2: bc:27:3f:05:32:94:7a:4b:c3:8e:02:7a:fa:90:fa:9d:d6:0f: e4:55:15:23:9f:81:3b:e4:5e:20:57:73:be:45:1f:3b:c9:fe: 1d:aa:86:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEVCOTExMC8GA1UEBRMoMkJCRjhFQUE4MUZCNkNCREJGRjBFMTU5REM3MkVDMUM5 M0UxRkY4MDAeFw0yNjA0MTcwODI5NTdaFw0yNjA0MjQwODI5NTdaMBgxFjAUBgNV BAMTDTY5ZTFlZjg1LTM5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnAcpNZyNtVKItyoJ+0iBL5EaIRMZZREbTOzUDvu3aS/hYWOqpmzWtEL6gwwvi stnDOj/ncNMjhT1aiXUwDuB5ttog4tgKLSyd3bKUrlqYgf4vevTA4nfaj7v6Wzhf Qqy+O6Imh/6PArLGQH1LcKZ4Iq/BoomoRkLaUm6Hr+W/tsldvVemp76XJlMhuXer 1l3KyNo0wE81IaRbaZOCm9WsCX7HCfUAlHume+HHi8ENrnLm0iC85u4PIgxGkvYE LmsxLokePfhOXO+DIrqU8xOeDCnWcwXd7+dfW3dzvFi/Mviglx0FBvhsh/+IO2mp WBcoplRvYaZfT7hQzL7G1FeLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrjdjuw2d zHEuwAZnBFwALDcpsVIwHwYDVR0jBBgwFoAUK7+OqoH7bL2/8OFZ3HLsHJPh/4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0RUI5L0VBMDQ2ODE0MDIy QzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3YkwyXzhPRlozSExzSEpQaF80 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzctT3FvSDdiTDJfOE9GWjNITHNISlBoXzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 RUI5L0VBMDQ2ODE0MDIyQzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3Ykwy XzhPRlozSExzSEpQaF80QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9Z0ALUNMP7jhd25q1PG744IbdlX4wmwYZsW4dh8Wew2h47JHKhMk/ewIgml3M lTEOnYFuWmmQBYXimS/3Yl5hzqDOuMraQrwMFDrqjLTAFOlfZfPfEpPpbstn2NLK LbQOMYvepq63WnPg9Sz2iiPKhZ4OCyrhYjzq8sAtUjoFDXu1T7lPT/c8Ux1g6PLd 3cF6RW0lBUpA85YCN/NrCNivRmvltHMjHpbyegB6N4o2x3o+O1uP1qRC7TdthAiw 0z1p/t9zDMLBTv1schY5UoZgsb9wMs4oa+K8Jz8FMpR6S8OOAnr6kPqd1g/kVRUj n4E75F4gV3O+RR87yf4dqoY9 -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:21 2026 by rpki-client