$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft File: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft (raw, json) Hash identifier: 2f5cUqAdZvrUH3ti6SCft8r5dP6xnBFFSBGoQ/6vDFY= Subject key identifier: AC:FE:6D:11:10:76:CD:E2:90:7D:C7:A3:D3:AE:82:0D:6C:C1:16:A0 Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0EB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft Manifest number: 0E8E Signing time: Tue 18 Aug 2026 17:58:02 +0000 Manifest this update: Tue 18 Aug 2026 17:58:01 +0000 Manifest next update: Tue 25 Aug 2026 17:58:01 +0000 Files and hashes: 1: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl (hash: 6C8YPt4ufnDnju7uzGfCS6+DvVVXiVytuqvDj2VHFDA=) 2: F70C0B5E4A8C11F18179024696EE528E.roa (hash: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg=) 3: CD22D13C6DEC11F19E45C9465DA30FBC.roa (hash: ZShJ4AD7l89NGkQj9YglmhWVaniaXpNAe1m+z6iRJIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3760 (0xeb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Aug 18 17:58:01 2026 GMT Not After : Aug 25 17:58:01 2026 GMT Subject: CN=6a849d2a-d49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:52:10:c6:8b:0f:3e:c7:fc:fc:a2:1e:a3: dd:cf:12:65:f2:39:b9:ec:7d:cc:20:a3:75:03:87: 88:ed:98:44:24:5d:99:8d:6b:93:65:73:af:62:5f: b7:a0:73:d8:fe:8e:77:27:4f:de:a4:3c:ff:c3:6e: 98:4b:91:16:64:f7:41:8d:9c:20:4f:8b:68:ca:6d: cb:31:3d:91:ec:91:94:7a:f4:55:44:d6:e6:f0:15: 3f:43:2c:d5:d2:0f:5a:96:dd:a7:d7:13:a4:6a:fa: b3:5d:27:96:5c:0b:25:85:2a:70:62:09:a2:44:2f: 59:ff:06:0e:c9:6a:a9:2e:c5:0a:ef:a3:61:25:e9: f3:81:93:dc:18:fd:41:26:fe:9d:f9:4d:0c:fa:c7: 46:b7:f3:cd:c1:5c:b6:d9:41:78:09:27:b8:54:dc: 71:43:8e:af:89:f3:5a:52:21:a6:91:3b:4d:27:e3: b1:06:c2:9a:bb:a6:c2:05:3b:5a:b5:01:95:0a:f6: 4b:20:fa:10:59:da:dc:5e:63:03:75:63:75:04:0c: b6:b1:f7:69:5b:35:e9:b8:9b:34:a7:0a:dd:69:f8: 1a:d6:ee:57:18:12:ce:55:a9:30:ef:c2:02:c2:bc: 6e:63:25:05:e0:70:f7:84:cd:2d:f1:9c:4f:29:08: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FE:6D:11:10:76:CD:E2:90:7D:C7:A3:D3:AE:82:0D:6C:C1:16:A0 X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ef:d6:3d:54:5b:8e:ab:e2:c5:23:7c:0c:e0:8f:17:fe:06: 54:27:4c:20:8f:7f:10:0b:49:26:aa:c9:5a:34:a8:cd:8e:08: 46:7c:c5:ef:22:5a:ec:de:7a:b7:f6:5e:b7:22:c5:18:c5:7c: 6e:40:d0:41:d2:bc:ec:45:46:cf:40:73:c9:9e:ac:d1:df:ef: 1b:7d:79:4a:96:15:fa:53:1a:eb:cd:88:ce:44:64:ed:62:da: 01:33:27:4e:fd:04:88:61:99:a0:96:b0:33:f7:6b:f6:2f:3b: 67:90:ab:ee:4f:66:47:d0:92:a9:ab:8a:73:9e:05:2e:ef:2d: 16:f7:1a:39:96:03:f0:88:54:40:d9:93:ee:83:84:f6:a3:dd: 69:cc:be:4e:35:77:12:24:30:28:97:56:17:97:8c:2f:df:c5: 79:3d:d1:cd:cf:ec:50:84:2f:b7:49:08:5a:20:7a:15:d6:bb: f0:d4:80:8a:81:c3:26:15:79:cd:55:e9:71:aa:c6:0f:39:63: 15:97:9c:d5:e1:69:b4:93:13:f1:e9:41:81:b8:41:6c:68:f2: de:ea:40:a7:30:83:3e:e0:da:9f:cc:29:db:32:08:fe:97:94: dd:b9:dd:1e:e9:55:35:15:fd:94:a5:b1:42:fd:f7:31:71:da: 2e:ec:9b:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYwODE4MTc1ODAxWhcNMjYwODI1MTc1ODAxWjAYMRYwFAYD VQQDEw02YTg0OWQyYS1kNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvANSEMaLDz7H/PyiHqPdzxJl8jm57H3MIKN1A4eI7ZhEJF2ZjWuTZXOvYl+3 oHPY/o53J0/epDz/w26YS5EWZPdBjZwgT4toym3LMT2R7JGUevRVRNbm8BU/QyzV 0g9alt2n1xOkavqzXSeWXAslhSpwYgmiRC9Z/wYOyWqpLsUK76NhJenzgZPcGP1B Jv6d+U0M+sdGt/PNwVy22UF4CSe4VNxxQ46vifNaUiGmkTtNJ+OxBsKau6bCBTta tQGVCvZLIPoQWdrcXmMDdWN1BAy2sfdpWzXpuJs0pwrdafga1u5XGBLOVakw78IC wrxuYyUF4HD3hM0t8ZxPKQifbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKz+bREQ ds3ikH3Ho9Ougg1swRagMB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjUyMS8yMTY1ODgyMEM2N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZX S255b1hqNmVqZmRRZVh5VWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS+/WPVRbjqvixSN8DOCPF/4GVCdMII9/EAtJJqrJWjSozY4IRnzF7yJa7N56 t/ZetyLFGMV8bkDQQdK87EVGz0BzyZ6s0d/vG315SpYV+lMa682IzkRk7WLaATMn Tv0EiGGZoJawM/dr9i87Z5Cr7k9mR9CSqauKc54FLu8tFvcaOZYD8IhUQNmT7oOE 9qPdacy+TjV3EiQwKJdWF5eML9/FeT3Rzc/sUIQvt0kIWiB6Fda78NSAioHDJhV5 zVXpcarGDzljFZec1eFptJMT8elBgbhBbGjy3upApzCDPuDan8wp2zII/peU3bnd HulVNRX9lKWxQv33MXHaLuyb2g== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:46 2026 by rpki-client