$ rpki-client -vvf rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft File: 1_KB4-XMf8L0gLKaflSfC6yMbfI.mft (raw, json) Hash identifier: f681xyeVFIxObNxkE5doMQsZhnh3/J/SEVsh7jymCJw= Subject key identifier: BC:AE:AD:62:F0:42:54:03:30:CA:E1:15:82:64:80:3F:CB:E6:37:61 Authority key identifier: D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 Certificate issuer: /CN=A915C38F/serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft Manifest number: 0F Signing time: Wed 19 Aug 2026 09:53:17 +0000 Manifest this update: Wed 19 Aug 2026 09:53:16 +0000 Manifest next update: Wed 26 Aug 2026 09:53:16 +0000 Files and hashes: 1: 1_KB4-XMf8L0gLKaflSfC6yMbfI.crl (hash: K7rx2Wrq1RFdw5xGxImmmhZx0VKJWrbTLM2lFJedknk=) 2: EAB52720931411F1ACFC204F3511F970.roa (hash: jOKr1O6uDPb+PHiDSlud8HBHSWAz7FJZ5XLwIBlBgFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C38F, serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Validity Not Before: Aug 19 09:53:16 2026 GMT Not After : Aug 26 09:53:16 2026 GMT Subject: CN=6a857d0c-a279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:27:9a:9f:73:96:35:9d:3b:9f:ad:82:87: 71:a1:65:7d:cb:95:c3:c5:87:9d:21:1f:e8:78:5f: 03:6b:1f:4d:80:c1:5f:08:f1:90:94:3d:b4:6b:cc: be:b2:d5:8e:01:c6:37:d5:eb:55:cb:c7:c1:44:36: 0a:f8:7b:99:5a:b9:90:4a:27:6a:3a:39:7c:65:83: f6:db:d8:1c:40:5b:0a:fd:7a:f2:b8:11:bc:7e:a0: a4:14:ac:a6:25:e8:e9:1a:8d:b6:94:36:97:8f:9b: 9f:2f:3c:f5:fa:cd:2b:93:aa:c4:02:3a:88:22:53: 94:33:dd:31:53:aa:f1:7b:af:4a:00:02:35:88:c3: 06:cf:86:5f:45:15:3b:6c:fd:e1:d0:f3:eb:b3:55: c9:38:9c:e8:b8:df:64:91:90:16:f7:dd:78:70:ef: 0b:ea:57:67:18:28:45:1f:f9:81:65:6c:c3:6a:00: b5:be:b4:01:92:d0:db:34:0a:d6:28:8b:69:60:9b: 8c:0b:2a:75:64:89:8a:04:81:f9:af:fa:ec:c7:08: 96:66:0b:32:f3:ae:a5:a1:55:00:ad:01:d8:3f:d4: 09:5a:18:0a:3a:06:4d:b3:c0:a9:74:bd:11:1a:6b: 17:3e:4f:02:fd:cc:cd:52:0d:98:ba:5a:07:95:31: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AE:AD:62:F0:42:54:03:30:CA:E1:15:82:64:80:3F:CB:E6:37:61 X509v3 Authority Key Identifier: keyid:D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6f:99:41:0e:b8:6e:df:73:98:cb:cf:e9:7c:9e:85:f7:58: 53:6f:29:0b:74:70:2e:36:9d:78:61:80:64:6c:f3:f8:54:d7: 02:09:f9:f5:2e:8b:e7:dc:9a:00:f7:ea:69:2a:88:f3:31:7e: 75:74:32:0e:bc:6c:76:75:c3:64:50:95:9a:30:33:da:c6:5a: 57:38:02:49:1d:40:06:bc:42:aa:9f:b6:cb:39:60:38:18:54: 67:9a:bb:71:e8:c9:59:42:a8:21:56:91:79:96:c4:e9:1a:16: a0:22:be:de:86:8b:27:05:85:77:62:13:2e:34:d9:c3:53:6a: ef:fc:0e:4c:9d:4b:66:f1:67:39:23:64:02:fc:04:49:ff:df: 63:8e:58:59:a3:c0:6e:fe:6e:0a:b8:59:f8:fb:6f:46:c0:81: 6c:0e:d6:a0:b4:07:e1:73:10:65:92:62:26:f2:a8:66:c9:4b: dd:9c:4e:5f:1f:dc:87:b5:99:81:c9:dd:ca:8e:37:36:87:40: 9f:de:65:3e:cf:4f:1b:16:0d:d7:3c:6e:e0:45:07:e2:41:0d: 9f:91:c3:90:0a:ab:33:d5:4c:0f:e3:bc:20:ca:32:28:ff:02: 27:c1:93:a1:0b:c5:96:83:38:1d:69:cc:ba:00:81:21:f9:79: a0:8f:4a:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzM4RjExMC8GA1UEBRMoRDdGMjgxRTNFNUNDN0ZDMkY0ODBCMjlBN0U1NDlGMEJB QzhDNkRGMjAeFw0yNjA4MTkwOTUzMTZaFw0yNjA4MjYwOTUzMTZaMBgxFjAUBgNV BAMTDTZhODU3ZDBjLWEyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC70Cean3OWNZ07n62Ch3GhZX3LlcPFh50hH+h4XwNrH02AwV8I8ZCUPbRrzL6y 1Y4BxjfV61XLx8FENgr4e5lauZBKJ2o6OXxlg/bb2BxAWwr9evK4Ebx+oKQUrKYl 6OkajbaUNpePm58vPPX6zSuTqsQCOogiU5Qz3TFTqvF7r0oAAjWIwwbPhl9FFTts /eHQ8+uzVck4nOi432SRkBb33Xhw7wvqV2cYKEUf+YFlbMNqALW+tAGS0Ns0CtYo i2lgm4wLKnVkiYoEgfmv+uzHCJZmCzLzrqWhVQCtAdg/1AlaGAo6Bk2zwKl0vREa axc+TwL9zM1SDZi6WgeVMeg1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvK6tYvBC VAMwyuEVgmSAP8vmN2EwHwYDVR0jBBgwFoAU1/KB4+XMf8L0gLKaflSfC6yMbfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDMzhGLzI0N0YzNzZFOEQ2 MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhMMGdMS2FmbFNmQzZ5TWJm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMV9LQjQtWE1mOEwwZ0xLYWZsU2ZDNnlNYmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD MzhGLzI0N0YzNzZFOEQ2MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhM MGdMS2FmbFNmQzZ5TWJmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4b5lBDrhu33OYy8/pfJ6F91hTbykLdHAuNp14YYBkbPP4VNcCCfn1Lovn3JoA 9+ppKojzMX51dDIOvGx2dcNkUJWaMDPaxlpXOAJJHUAGvEKqn7bLOWA4GFRnmrtx 6MlZQqghVpF5lsTpGhagIr7ehosnBYV3YhMuNNnDU2rv/A5MnUtm8Wc5I2QC/ARJ /99jjlhZo8Bu/m4KuFn4+29GwIFsDtagtAfhcxBlkmIm8qhmyUvdnE5fH9yHtZmB yd3Kjjc2h0Cf3mU+z08bFg3XPG7gRQfiQQ2fkcOQCqsz1UwP47wgyjIo/wInwZOh C8WWgzgdacy6AIEh+Xmgj0rg -----END CERTIFICATE-----Generated at Wed Aug 19 16:44:25 2026 by rpki-client