$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json) Hash identifier: ELBDK6AOgOvM3gmxNwze/mazpLON4R7FBg1Jhun5Oz0= Subject key identifier: D4:B6:0F:C2:AB:EE:04:3D:AA:08:43:E9:53:C5:15:1F:0B:92:24:CF Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft Manifest number: 7A Signing time: Mon 21 Sep 2026 07:50:21 +0000 Manifest this update: Mon 21 Sep 2026 07:50:20 +0000 Manifest next update: Mon 28 Sep 2026 07:50:20 +0000 Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: Xo11PMn9nsrWL6WftcB7p2qBPqn8YwC7G9oKT5rps9Q=) 2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80 Validity Not Before: Sep 21 07:50:20 2026 GMT Not After : Sep 28 07:50:20 2026 GMT Subject: CN=6ab0e1bd-249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:f8:87:ed:98:44:42:86:44:28:40:b7:d0: 99:ec:a5:fa:21:87:1d:aa:73:34:9e:4a:78:a7:44: 11:88:ec:9b:5e:ca:29:eb:5c:27:e8:57:99:75:a2: 0f:69:5f:8f:7a:97:38:dd:c9:96:d6:92:c5:66:b8: 07:94:42:18:f0:4a:72:e3:d7:0c:30:3d:0f:74:71: 43:82:dc:5d:fa:0d:eb:34:c6:f7:ff:ec:16:1f:83: c4:d1:02:0c:5b:b5:68:aa:ed:39:56:50:d4:97:cd: d9:6e:0f:67:c4:7f:68:b5:55:a5:be:60:c9:1f:63: 2c:1e:9c:20:12:56:dc:78:c3:73:75:01:87:ac:17: 99:07:92:6a:e3:8d:4a:00:f2:1d:e1:15:2e:13:0b: 4e:15:e7:f5:e4:08:44:34:70:a8:44:6d:17:41:25: 89:71:47:8f:eb:1a:2c:2b:ff:47:bd:63:2f:c8:b6: 26:51:84:55:3c:b9:4d:9a:8d:94:84:28:21:51:b6: 1b:86:c4:84:8d:18:a1:63:2b:0d:39:8d:63:62:0d: 03:02:f6:0c:46:14:e4:8b:40:cc:31:4e:3f:9a:5b: 43:8a:21:4c:82:ac:51:d6:04:4b:54:7f:74:3f:3c: d4:c5:61:4f:42:cb:11:ac:54:84:52:57:64:5f:b6: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B6:0F:C2:AB:EE:04:3D:AA:08:43:E9:53:C5:15:1F:0B:92:24:CF X509v3 Authority Key Identifier: keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:87:09:6b:63:45:85:60:84:df:de:ce:cc:10:7e:8f:86:81: c9:ad:26:1d:39:47:65:16:78:52:0c:61:be:a8:cf:3d:2e:9b: 64:66:c9:68:ae:0e:aa:70:3d:f8:43:2b:df:f2:b7:3f:4c:88: b8:00:62:e2:74:13:6c:cb:83:99:d7:fc:bc:a1:28:4a:ad:61: c2:5f:2d:8a:bf:dc:e0:96:55:7f:6c:0a:f1:5b:22:76:b3:3f: fc:ab:f4:23:47:44:7d:ba:50:d7:25:8c:04:f2:27:78:40:0e: 7a:3e:e0:e6:30:f7:5c:02:ea:87:fd:64:e8:bc:45:a6:3d:d9: b1:48:ab:ac:a3:b3:9a:39:bd:7e:aa:e6:92:e4:f3:c2:10:2b: d1:fa:16:5d:77:1e:7d:af:43:fb:df:fb:75:2e:3e:94:60:04: 57:cc:ce:f2:b5:a3:4e:e2:89:39:17:6e:41:fa:99:f4:f3:81: 6f:de:57:9d:7b:f5:5f:2f:be:a1:cb:6a:58:61:fc:55:6f:11: 51:76:25:ae:2d:09:85:b9:64:2b:4f:15:8e:59:e7:69:4b:14: c5:b5:2a:cb:43:58:9e:1e:eb:ba:0c:56:9e:e6:5c:2c:a7:9e: d1:46:25:b6:fb:6c:b6:40:56:f8:d2:89:92:93:67:01:eb:3b: 6e:2a:2d:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEVCOTExMC8GA1UEBRMoMkJCRjhFQUE4MUZCNkNCREJGRjBFMTU5REM3MkVDMUM5 M0UxRkY4MDAeFw0yNjA5MjEwNzUwMjBaFw0yNjA5MjgwNzUwMjBaMBgxFjAUBgNV BAMTDTZhYjBlMWJkLTI0OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNffiH7ZhEQoZEKEC30Jnspfohhx2qczSeSninRBGI7JteyinrXCfoV5l1og9p X496lzjdyZbWksVmuAeUQhjwSnLj1wwwPQ90cUOC3F36Des0xvf/7BYfg8TRAgxb tWiq7TlWUNSXzdluD2fEf2i1VaW+YMkfYywenCASVtx4w3N1AYesF5kHkmrjjUoA 8h3hFS4TC04V5/XkCEQ0cKhEbRdBJYlxR4/rGiwr/0e9Yy/ItiZRhFU8uU2ajZSE KCFRthuGxISNGKFjKw05jWNiDQMC9gxGFOSLQMwxTj+aW0OKIUyCrFHWBEtUf3Q/ PNTFYU9CyxGsVIRSV2RftiI/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1LYPwqvu BD2qCEPpU8UVHwuSJM8wHwYDVR0jBBgwFoAUK7+OqoH7bL2/8OFZ3HLsHJPh/4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0RUI5L0VBMDQ2ODE0MDIy QzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3YkwyXzhPRlozSExzSEpQaF80 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzctT3FvSDdiTDJfOE9GWjNITHNISlBoXzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 RUI5L0VBMDQ2ODE0MDIyQzExRjE5RDNEMDE0MTE5M0Q4QzY3L0s3LU9xb0g3Ykwy XzhPRlozSExzSEpQaF80QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBrhwlrY0WFYITf3s7MEH6PhoHJrSYdOUdlFnhSDGG+qM89LptkZslorg6qcD34 Qyvf8rc/TIi4AGLidBNsy4OZ1/y8oShKrWHCXy2Kv9zgllV/bArxWyJ2sz/8q/Qj R0R9ulDXJYwE8id4QA56PuDmMPdcAuqH/WTovEWmPdmxSKuso7OaOb1+quaS5PPC ECvR+hZddx59r0P73/t1Lj6UYARXzM7ytaNO4ok5F25B+pn084Fv3lede/VfL76h y2pYYfxVbxFRdiWuLQmFuWQrTxWOWedpSxTFtSrLQ1ieHuu6DFae5lwsp57RRiW2 +2y2QFb40omSk2cB6ztuKi1T -----END CERTIFICATE-----Generated at Tue Sep 22 18:46:05 2026 by rpki-client