$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: kviCP4v1yR/21x8S22ELOEqnz63t1kl2W/pA6dztL64= Subject key identifier: 16:25:2E:95:7D:C9:FF:C5:6E:5D:82:4B:FF:99:76:20:AC:B1:D5:CD Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 021A Signing time: Tue 11 Aug 2026 02:50:02 +0000 Manifest this update: Tue 11 Aug 2026 02:50:02 +0000 Manifest next update: Tue 18 Aug 2026 02:50:02 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: 8LhAKLHPkdQRySg3BPwOfwgdBQNb1gOEDTUHCTo07lg=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) 4: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Aug 2026 02:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Aug 11 02:50:02 2026 GMT Not After : Aug 18 02:50:02 2026 GMT Subject: CN=6a7a8dda-6415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:21:b1:47:ee:aa:57:7a:86:dc:b2:b6:c2: 76:aa:3a:30:1d:59:5f:92:10:6e:a0:0a:0a:f9:c0: 9c:b9:64:52:9f:63:d1:57:09:07:45:22:5d:e9:98: 95:32:18:ad:2c:80:17:96:cc:79:3d:89:05:4b:18: 60:5c:50:11:5b:3f:c7:69:c6:42:0f:e1:a0:17:8d: a6:13:d8:4a:92:4e:80:fb:10:0a:e4:ef:09:b7:fa: 79:f8:94:8a:90:84:0c:29:9c:a6:0d:fa:de:14:0c: a9:98:4b:3a:d9:19:92:89:b6:9c:2d:f8:3f:bc:79: 9e:bb:17:4b:48:fd:35:85:e8:83:b1:93:de:d0:7f: dd:9f:88:aa:78:be:79:bc:42:da:c7:65:c7:70:22: f2:aa:4b:b6:73:b5:a5:43:cf:f0:8f:1b:5c:f7:14: ea:f2:3f:79:fc:b8:46:35:6d:8b:b2:03:ed:08:e5: 28:73:34:3e:60:f6:ca:c7:d1:19:5c:e3:05:d4:d2: 0b:4c:b2:03:43:13:68:91:61:78:61:b0:42:8b:68: f9:cd:a6:f5:71:f1:0e:f5:fa:c0:e5:d8:a7:4f:e4: 80:26:b2:da:6e:a8:41:1e:7e:20:5c:d6:fb:e5:6b: 9d:e5:d4:f5:da:ed:21:df:4f:20:b2:d6:9e:57:82: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:2E:95:7D:C9:FF:C5:6E:5D:82:4B:FF:99:76:20:AC:B1:D5:CD X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c5:c8:d7:79:f2:05:ec:39:37:a9:5e:29:d2:91:83:91:e1: 97:3a:96:5b:2c:d5:56:a2:9b:88:fc:93:c3:8d:de:bf:7b:e2: 55:b8:a9:1b:64:ce:2b:f3:cc:ac:20:38:c0:df:42:64:70:a8: 76:86:dc:21:aa:d7:23:9a:2e:93:45:64:54:3a:46:ae:f6:cd: 63:bc:96:dd:e7:95:4a:89:f8:1d:6b:70:d0:af:d8:a6:a5:6d: c2:a0:2a:b8:d5:58:ef:47:23:5e:a2:c6:1a:dc:89:6c:24:b0: 6a:29:bc:68:fb:da:a3:a4:5a:3d:ca:c6:62:00:9f:57:70:c8: 43:3a:7f:b4:bc:d1:dd:b9:f8:81:ff:92:61:7c:fa:82:c1:6d: bc:05:6d:44:a5:22:c6:0f:50:c3:6e:e4:c2:e8:d0:22:4c:48: 09:22:91:aa:66:3e:c9:c3:74:a1:81:af:b2:63:97:ba:8f:6d: aa:23:5c:5f:43:df:d5:d4:90:b4:45:1b:51:b7:15:05:88:41: f5:aa:04:f0:fe:74:c6:44:0d:0d:03:9f:66:09:06:5a:a7:5f: 81:f1:ee:ec:43:b3:1b:e4:4b:ac:aa:70:12:6c:29:b3:a2:d5: e2:09:62:b7:bc:27:93:2e:58:dd:7c:a4:c5:d6:05:34:33:aa: 8a:67:43:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwODExMDI1MDAyWhcNMjYwODE4MDI1MDAyWjAYMRYwFAYD VQQDEw02YTdhOGRkYS02NDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn8hsUfuqld6htyytsJ2qjowHVlfkhBuoAoK+cCcuWRSn2PRVwkHRSJd6ZiV MhitLIAXlsx5PYkFSxhgXFARWz/HacZCD+GgF42mE9hKkk6A+xAK5O8Jt/p5+JSK kIQMKZymDfreFAypmEs62RmSibacLfg/vHmeuxdLSP01heiDsZPe0H/dn4iqeL55 vELax2XHcCLyqku2c7WlQ8/wjxtc9xTq8j95/LhGNW2LsgPtCOUoczQ+YPbKx9EZ XOMF1NILTLIDQxNokWF4YbBCi2j5zab1cfEO9frA5dinT+SAJrLabqhBHn4gXNb7 5Wud5dT12u0h308gstaeV4JOdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYlLpV9 yf/Fbl2CS/+ZdiCssdXNMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAasXI13nyBew5N6leKdKRg5HhlzqWWyzVVqKbiPyTw43ev3viVbipG2TOK/PM rCA4wN9CZHCodobcIarXI5ouk0VkVDpGrvbNY7yW3eeVSon4HWtw0K/YpqVtwqAq uNVY70cjXqLGGtyJbCSwaim8aPvao6RaPcrGYgCfV3DIQzp/tLzR3bn4gf+SYXz6 gsFtvAVtRKUixg9Qw27kwujQIkxICSKRqmY+ycN0oYGvsmOXuo9tqiNcX0Pf1dSQ tEUbUbcVBYhB9aoE8P50xkQNDQOfZgkGWqdfgfHu7EOzG+RLrKpwEmwps6LV4gli t7wnky5Y3XykxdYFNDOqimdDlw== -----END CERTIFICATE-----Generated at Tue Aug 11 07:57:36 2026 by rpki-client