$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: Y1IC/V8FUymyE8AfRH0KkVh+S6GlcOAkXZKEsmuQjoY= Subject key identifier: B2:5E:80:17:B4:23:22:C3:04:F9:0A:47:6B:9D:A8:1D:AF:5D:AE:0C Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 359E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 3581 Signing time: Tue 18 Aug 2026 15:21:09 +0000 Manifest this update: Tue 18 Aug 2026 15:21:09 +0000 Manifest next update: Tue 25 Aug 2026 15:21:09 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: M0u24wkOZVNBEklHf2vA+Qte+Kn0mf+EQUkuBliG0go=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: HQH51hi8x4G+r78sw5Vb/qFkzB1JErJiNGaCDyzi5E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13726 (0x359e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Aug 18 15:21:09 2026 GMT Not After : Aug 25 15:21:09 2026 GMT Subject: CN=6a847865-d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:a4:a4:a4:ed:da:b3:39:96:a0:c7:bc:fb: 93:09:36:bf:a1:e6:c7:ec:2c:4d:97:e9:0c:a1:98: 28:fb:16:eb:dd:06:bf:bd:c9:47:0e:00:98:54:1d: a8:53:23:25:47:e2:4b:6a:31:bf:a0:d9:79:9e:99: 99:77:4c:cd:d0:ff:49:14:25:73:26:79:fe:aa:03: d7:a6:aa:f5:63:04:15:69:7b:16:8c:8c:29:9c:b1: e1:b2:48:1e:11:55:c7:8c:ae:e0:43:6f:65:95:08: db:67:d5:ef:02:51:b2:30:a9:f5:52:fb:8e:f7:af: 83:38:d4:cb:1d:e4:00:71:1e:fe:83:1b:db:86:fc: 0b:b5:39:37:0d:86:bd:02:eb:fa:0a:a8:fd:1d:11: 8a:c0:33:84:05:02:f7:3a:35:2d:87:b3:1b:cf:71: 3a:55:08:ce:e0:37:e4:0f:3f:de:df:78:95:0d:aa: 2a:5c:95:4e:e8:32:b2:f2:48:14:04:be:ed:7f:df: d7:a6:66:f1:fa:12:a1:3e:7f:da:14:cc:e0:c2:5f: d5:57:d3:eb:65:5c:95:5f:6f:bb:70:48:d5:0f:1c: 17:30:c1:9d:b9:4f:18:3e:2d:e5:d6:9f:8f:74:fd: 16:d1:16:92:70:dc:59:d2:4a:64:bf:50:a2:c8:ff: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5E:80:17:B4:23:22:C3:04:F9:0A:47:6B:9D:A8:1D:AF:5D:AE:0C X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:7a:bf:74:ef:ea:1c:ca:98:14:96:2f:96:a9:d5:55:10:ba: 40:73:f3:eb:2d:d6:59:9e:c9:5c:50:5c:db:51:5b:bc:0f:c6: 19:cf:4c:73:dc:16:79:a0:db:ce:f4:dc:71:0f:0b:ce:16:44: d0:6d:ae:98:92:fc:23:3b:94:a3:6d:1d:d7:f8:b5:86:63:eb: 09:b6:04:aa:b7:19:8f:c2:d9:cb:50:01:0b:ba:9d:81:92:a6: 97:57:5b:7d:8e:b6:a8:b1:bd:a1:60:22:53:3b:67:dc:07:5b: 9a:58:30:eb:c3:e2:09:06:aa:58:dd:da:18:36:35:52:86:a4: 6b:52:25:fb:09:ec:ce:36:d5:70:d3:52:a4:e6:96:fc:27:33: ba:23:cb:92:5d:26:ae:58:0b:8a:75:87:35:b0:19:da:2c:87: 00:93:72:39:85:be:5c:46:6b:7b:1a:ca:7b:81:64:20:f4:4b: 57:6f:3d:28:96:05:5e:30:d5:7d:32:3a:38:6c:17:1f:d1:3d: 94:8b:63:3f:21:18:77:e3:d8:ff:b4:93:1e:86:bf:20:4a:29: c6:5b:5a:5e:59:49:07:1d:9a:cb:66:82:1f:33:60:35:b1:0d: 06:7c:39:e0:4d:92:c2:6f:e1:1a:12:88:1c:aa:95:5b:b5:28: 6a:5a:6f:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjYwODE4MTUyMTA5WhcNMjYwODI1MTUyMTA5WjAYMRYwFAYD VQQDEw02YTg0Nzg2NS1kNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXakpKTt2rM5lqDHvPuTCTa/oebH7CxNl+kMoZgo+xbr3Qa/vclHDgCYVB2o UyMlR+JLajG/oNl5npmZd0zN0P9JFCVzJnn+qgPXpqr1YwQVaXsWjIwpnLHhskge EVXHjK7gQ29llQjbZ9XvAlGyMKn1UvuO96+DONTLHeQAcR7+gxvbhvwLtTk3DYa9 Auv6Cqj9HRGKwDOEBQL3OjUth7Mbz3E6VQjO4DfkDz/e33iVDaoqXJVO6DKy8kgU BL7tf9/Xpmbx+hKhPn/aFMzgwl/VV9PrZVyVX2+7cEjVDxwXMMGduU8YPi3l1p+P dP0W0RaScNxZ0kpkv1CiyP8AYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJegBe0 IyLDBPkKR2udqB2vXa4MMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0Xq/dO/qHMqYFJYvlqnVVRC6QHPz6y3WWZ7JXFBc21FbvA/GGc9Mc9wWeaDb zvTccQ8LzhZE0G2umJL8IzuUo20d1/i1hmPrCbYEqrcZj8LZy1ABC7qdgZKml1db fY62qLG9oWAiUztn3Adbmlgw68PiCQaqWN3aGDY1Uoaka1Il+wnszjbVcNNSpOaW /CczuiPLkl0mrlgLinWHNbAZ2iyHAJNyOYW+XEZrexrKe4FkIPRLV289KJYFXjDV fTI6OGwXH9E9lItjPyEYd+PY/7STHoa/IEopxltaXllJBx2ay2aCHzNgNbENBnw5 4E2Swm/hGhKIHKqVW7Uoalpv8A== -----END CERTIFICATE-----Generated at Wed Aug 19 13:40:41 2026 by rpki-client