$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: dyZaZ+b7x0BxezqBJk+0NVCTJRinoa3faOcefwZ/jkk= Subject key identifier: E6:89:E2:0E:00:FB:1C:E2:C8:69:E9:2F:07:1E:91:2C:C7:4D:3B:93 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 099B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0960 Signing time: Thu 20 Aug 2026 20:05:05 +0000 Manifest this update: Thu 20 Aug 2026 20:05:04 +0000 Manifest next update: Thu 27 Aug 2026 20:05:04 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: g8q3QdyZYhiSidU8fG+kUTFvLFB3OYRYPSWXOFpL/q0=) 2: C6E6A146171011F1BE8A5674053D8C67.roa (hash: giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=) 3: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: FXMw4gU7m6cMDVIFR2ioRmioqgFmxJcgor2Nog9jRxk=) 4: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: KT7zEvJNVvs97oYvIe5jqgLfgSdT+s+2AedPsqQHGgo=) 5: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: pwTpLqoix1ml/iDyvZtQl2PM0Bjf1ih1Kt+rjQ1/6gY=) 6: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: pHl2UlpqvRYqNzqgzVyVtJS995yGr9GKW6dkHakGY/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2459 (0x99b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Aug 20 20:05:04 2026 GMT Not After : Aug 27 20:05:04 2026 GMT Subject: CN=6a875df1-08e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:e7:88:82:c2:32:cd:75:f5:6f:a9:2a:01: 4a:53:4b:06:b9:fe:a1:c8:a1:bc:43:26:b5:d3:18: 3f:60:a1:36:b3:05:8d:4d:5a:76:3c:84:78:74:2f: be:45:c9:84:ef:08:e7:3d:7c:68:46:fc:03:5e:c4: 18:61:1d:a0:d8:78:06:de:fc:01:56:17:ce:d5:98: 99:f6:7d:5b:73:e1:9e:48:da:b9:7b:80:4f:9a:4e: 10:88:fd:54:64:06:96:95:5a:9b:8e:d1:0e:c7:09: cc:db:73:7d:82:5f:49:6d:23:66:64:2e:8d:1e:6c: a9:bb:be:db:71:ad:da:a8:c2:cc:ff:ab:fa:cd:47: 3e:05:5a:ab:34:42:65:5d:b4:5d:44:ae:23:d2:19: 45:64:53:3e:0e:27:ad:01:47:3a:2d:0d:9e:b1:8f: a6:7e:19:07:60:d8:d0:51:1b:05:f9:a5:55:f9:d7: f8:1a:09:9a:e2:bc:6d:79:ce:46:bb:9d:98:32:c6: a2:f8:3a:42:db:11:f0:9a:2d:e3:66:1b:e3:bd:6d: e3:1f:f0:ab:a4:80:6c:03:48:4f:ff:4b:44:34:bc: a7:9a:61:96:e6:47:73:1a:0f:2c:c4:55:80:b6:5e: 31:0a:46:c7:a3:6e:7b:06:c7:1e:e8:de:cd:4b:d4: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:89:E2:0E:00:FB:1C:E2:C8:69:E9:2F:07:1E:91:2C:C7:4D:3B:93 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:f5:e4:b7:17:f1:97:91:ca:c2:51:30:53:cf:91:2c:4f: fb:86:31:a4:52:19:07:f0:cc:ad:1a:67:0a:54:03:1e:35:e3: c9:42:2e:ed:d5:b3:7b:c2:9c:a7:3a:94:56:f9:e1:5d:55:72: d8:ee:4b:fd:e2:8f:1b:2f:f4:0e:c4:36:0a:d6:35:03:2d:c8: 03:5b:af:e3:02:dc:95:0f:8e:13:91:44:50:28:a1:27:b2:70: e3:e8:35:6d:7d:6a:6d:56:ce:27:a6:89:85:b8:f4:9e:12:e3: 5a:f3:f8:b0:9c:1e:1d:03:cb:3b:db:55:1b:3d:5b:bc:ce:da: 07:c4:c4:77:56:01:c2:a0:8a:88:e6:8d:35:1c:43:62:48:9e: 19:86:10:7c:37:19:ce:f1:bc:1c:67:b3:83:d6:64:12:79:85: 1b:41:b6:a6:e8:17:96:8d:68:da:ae:7d:ae:6d:18:33:9f:5b: 1f:6d:b7:77:bc:1f:69:c9:09:f9:02:66:4e:40:f3:76:d1:3b: 2c:12:0b:3d:54:3a:b7:7d:17:dc:70:04:fd:e6:2e:07:c1:75: bc:31:bc:91:15:65:34:9e:7e:b0:3c:2b:85:75:d7:7a:f4:1f: ae:f6:b1:b0:51:7b:38:cb:59:89:d7:29:b7:17:02:9f:ac:49: 98:b0:c2:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjYwODIwMjAwNTA0WhcNMjYwODI3MjAwNTA0WjAYMRYwFAYD VQQDEw02YTg3NWRmMS0wOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LnniILCMs119W+pKgFKU0sGuf6hyKG8Qya10xg/YKE2swWNTVp2PIR4dC++ RcmE7wjnPXxoRvwDXsQYYR2g2HgG3vwBVhfO1ZiZ9n1bc+GeSNq5e4BPmk4QiP1U ZAaWlVqbjtEOxwnM23N9gl9JbSNmZC6NHmypu77bca3aqMLM/6v6zUc+BVqrNEJl XbRdRK4j0hlFZFM+DietAUc6LQ2esY+mfhkHYNjQURsF+aVV+df4Ggma4rxtec5G u52YMsai+DpC2xHwmi3jZhvjvW3jH/CrpIBsA0hP/0tENLynmmGW5kdzGg8sxFWA tl4xCkbHo257Bsce6N7NS9QneQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaJ4g4A +xziyGnpLwcekSzHTTuTMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMAb15LcX8ZeRysJRMFPPkSxP+4YxpFIZB/DMrRpnClQDHjXjyUIu7dWze8Kc pzqUVvnhXVVy2O5L/eKPGy/0DsQ2CtY1Ay3IA1uv4wLclQ+OE5FEUCihJ7Jw4+g1 bX1qbVbOJ6aJhbj0nhLjWvP4sJweHQPLO9tVGz1bvM7aB8TEd1YBwqCKiOaNNRxD YkieGYYQfDcZzvG8HGezg9ZkEnmFG0G2pugXlo1o2q59rm0YM59bH223d7wfackJ +QJmTkDzdtE7LBILPVQ6t30X3HAE/eYuB8F1vDG8kRVlNJ5+sDwrhXXXevQfrvax sFF7OMtZidcptxcCn6xJmLDCUg== -----END CERTIFICATE-----Generated at Thu Aug 20 22:55:38 2026 by rpki-client