$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: 9cakjk7QO3C4c7vEcwlHJIRJ/48/Gd0ykVs/ONh3BiE= Subject key identifier: 6D:40:95:4E:89:ED:23:80:69:3C:94:D3:BE:21:C6:CD:F7:1E:D7:2B Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0F45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0F3A Signing time: Tue 18 Aug 2026 17:46:02 +0000 Manifest this update: Tue 18 Aug 2026 17:46:01 +0000 Manifest next update: Tue 25 Aug 2026 17:46:01 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: WDRj4C0pupN2oBXTOvdl1FPR3erheI1d49UPCP7WRTQ=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3909 (0xf45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Aug 18 17:46:01 2026 GMT Not After : Aug 25 17:46:01 2026 GMT Subject: CN=6a849a5a-11f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:77:b1:02:99:75:99:71:58:ea:c7:0e:f0: 05:8f:f4:5c:3e:b5:24:e5:17:9b:d1:aa:b5:61:9f: c3:d2:10:2d:67:48:83:e6:c6:b8:64:ce:8c:4c:7d: cc:d5:8b:99:95:b3:89:78:4a:2d:55:7f:47:b5:92: 41:c6:17:3a:01:3a:60:9b:4b:72:70:2f:55:7c:e3: 59:40:66:b9:06:7d:51:c3:4b:47:13:94:a8:ca:64: d1:ca:36:1f:7d:b9:5c:bc:45:a7:fb:52:d0:ef:14: 3d:71:de:e8:fe:42:0c:2e:06:89:7b:76:49:74:d0: a5:4a:54:85:4a:d4:db:0f:ad:ad:c1:ab:cd:4b:aa: 21:5e:39:f8:24:dc:02:4f:75:ff:76:28:dc:a7:0d: 6a:e1:ab:5b:14:88:4c:7d:2f:fe:3c:00:7e:8f:48: 3b:57:3f:30:27:92:e2:9c:b6:e4:33:ec:d6:58:1d: f1:d9:e0:0d:36:fa:4a:bc:b5:b4:21:94:72:94:50: d9:b4:2e:ef:12:a1:00:d0:cd:e4:e7:56:73:00:6c: 9c:cd:44:cc:95:ab:7b:d7:4d:8b:82:a5:ae:98:96: 23:9d:59:15:42:47:2f:d2:c8:ec:32:23:3c:e8:6f: a0:c5:2f:7a:fb:bd:70:47:85:97:e8:14:e2:ba:7f: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:95:4E:89:ED:23:80:69:3C:94:D3:BE:21:C6:CD:F7:1E:D7:2B X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:29:08:d1:27:b6:b4:99:ad:51:c9:a2:23:dd:1a:7c:cd:19: 0c:3c:64:8f:5d:b8:cf:ec:91:a5:fd:3b:69:b9:49:e3:f1:89: b5:a4:21:e2:b1:7e:3e:53:05:c6:b3:fc:9b:0d:d5:7f:7a:57: c8:bd:18:ab:3d:ca:ec:d7:e5:57:c4:1e:92:58:45:c0:ed:95: f4:a3:bd:db:0e:d8:01:d3:78:13:7b:28:11:f5:41:f4:62:2e: 64:72:cc:e6:4d:7a:ad:61:33:21:13:c8:1b:0c:67:aa:66:fe: b0:ee:0c:b4:13:00:a2:2d:4c:1f:f5:8b:02:ef:e1:f7:fb:21: 75:54:4a:c2:8f:d7:b9:85:e8:6a:ee:10:a8:6b:1d:4b:49:b5: 4a:52:b2:4f:13:ff:0a:68:bd:68:77:73:19:09:59:00:8a:73: 88:54:00:1f:f5:01:8e:af:43:30:49:f5:16:0f:8d:84:01:cc: 9d:5c:31:68:81:51:4e:43:10:59:8c:7c:0a:09:bb:60:34:04: c0:24:16:8b:ce:77:b7:e6:c9:72:ba:73:bf:18:36:02:39:2e: d2:0d:ae:04:9d:ed:c4:e8:17:1f:34:6f:91:e5:12:78:32:69: d8:f7:ba:50:18:3b:7c:31:cd:35:00:67:ea:dc:69:64:ef:9d: a5:b0:77:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjYwODE4MTc0NjAxWhcNMjYwODI1MTc0NjAxWjAYMRYwFAYD VQQDEw02YTg0OWE1YS0xMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRl3sQKZdZlxWOrHDvAFj/RcPrUk5Reb0aq1YZ/D0hAtZ0iD5sa4ZM6MTH3M 1YuZlbOJeEotVX9HtZJBxhc6ATpgm0tycC9VfONZQGa5Bn1Rw0tHE5SoymTRyjYf fblcvEWn+1LQ7xQ9cd7o/kIMLgaJe3ZJdNClSlSFStTbD62twavNS6ohXjn4JNwC T3X/dijcpw1q4atbFIhMfS/+PAB+j0g7Vz8wJ5LinLbkM+zWWB3x2eANNvpKvLW0 IZRylFDZtC7vEqEA0M3k51ZzAGyczUTMlat7102LgqWumJYjnVkVQkcv0sjsMiM8 6G+gxS96+71wR4WX6BTiun8Z4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1AlU6J 7SOAaTyU074hxs33HtcrMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADikI0Se2tJmtUcmiI90afM0ZDDxkj124z+yRpf07ablJ4/GJtaQh4rF+PlMF xrP8mw3Vf3pXyL0Yqz3K7NflV8QeklhFwO2V9KO92w7YAdN4E3soEfVB9GIuZHLM 5k16rWEzIRPIGwxnqmb+sO4MtBMAoi1MH/WLAu/h9/shdVRKwo/XuYXoau4QqGsd S0m1SlKyTxP/Cmi9aHdzGQlZAIpziFQAH/UBjq9DMEn1Fg+NhAHMnVwxaIFRTkMQ WYx8Cgm7YDQEwCQWi853t+bJcrpzvxg2Ajku0g2uBJ3txOgXHzRvkeUSeDJp2Pe6 UBg7fDHNNQBn6txpZO+dpbB3fg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:17 2026 by rpki-client