$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: WNwDgtlcjniz/9x+EDm4v8RgoEW30kaiZ0T5MMZu1cI= Subject key identifier: 45:40:AB:09:DD:98:C0:E4:E8:DB:33:FF:A3:8B:13:70:CF:61:8F:2D Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 041D Signing time: Wed 19 Aug 2026 00:41:13 +0000 Manifest this update: Wed 19 Aug 2026 00:41:12 +0000 Manifest next update: Wed 26 Aug 2026 00:41:12 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: Qs+vVc7dN2/qGWkuSv4UV4QH/Popbfuhy1L+IO8Qd+U=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Aug 19 00:41:12 2026 GMT Not After : Aug 26 00:41:12 2026 GMT Subject: CN=6a84fba9-cddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:f7:f3:26:09:23:ba:7b:ad:5b:ef:32:09: 4e:16:95:ed:26:ba:75:88:8f:64:bf:f9:f9:4c:43: 6d:0e:67:f0:73:16:97:19:f6:c3:29:72:5a:3e:7f: 72:5a:cf:9b:cd:cd:a6:4b:5e:9e:71:f7:f8:73:a1: e7:e0:70:19:97:32:19:d4:c5:6c:2b:0e:d6:0d:06: e8:d3:b4:d0:af:5c:7f:80:4f:93:6b:30:e2:36:15: 24:d6:d6:cf:ad:24:76:59:52:17:ec:1a:54:85:7f: 1b:d7:5f:c8:3b:60:c3:d0:8b:0c:0f:11:04:72:d8: c8:6f:fc:38:66:c3:a7:4d:e7:c2:fd:2e:e6:35:88: 41:75:78:50:53:9b:fb:12:74:53:ac:f3:7e:41:31: 7f:06:01:f4:8c:9c:de:90:e1:2f:f6:5d:f2:86:8f: 30:21:ef:9b:e7:d1:e2:8a:9d:cf:15:32:4e:db:a8: 49:58:22:68:99:50:37:60:e7:e0:91:7b:41:81:68: ae:d4:04:2d:fe:9c:97:1b:94:79:23:15:f4:ef:6c: 9a:f2:1f:bc:2a:59:a5:27:1f:37:96:08:de:a8:71: 1d:11:01:b5:e1:62:e6:70:df:83:c6:dc:fb:3e:95: 94:9b:5f:a3:aa:84:78:70:fe:0b:8a:7d:75:5f:f7: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:40:AB:09:DD:98:C0:E4:E8:DB:33:FF:A3:8B:13:70:CF:61:8F:2D X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:53:8d:04:f1:8a:12:f9:75:88:66:6c:59:5d:a5:3d:6b: b7:83:70:f5:68:61:2d:14:10:6d:01:e3:b4:29:35:e6:ff:bb: 2e:77:32:8f:a9:48:14:78:e4:67:57:64:b6:be:1d:65:d6:20: 79:b9:b6:a6:1a:8b:20:dc:bf:15:df:89:f8:f2:dd:35:63:91: 1c:16:05:99:cb:5a:63:17:86:18:36:92:bf:f7:46:52:a3:47: cf:e5:a6:4d:75:b9:e8:b8:26:02:f8:93:45:73:a1:66:58:3f: b6:7b:a8:f1:fd:ba:d0:8c:1b:45:55:0a:87:70:96:44:94:71: f3:c3:7e:bd:80:2a:2c:04:2a:b4:31:fb:00:9d:18:a8:dc:9d: f1:02:53:fe:71:ff:2a:f3:af:b7:bb:ca:0f:d9:c9:0a:c6:e2: a0:86:79:24:b1:87:7e:8b:3c:ba:59:15:e8:0f:bc:15:f4:25: 90:ee:fb:c7:64:f7:ec:2e:70:ea:c6:f5:39:15:5c:e3:4e:7a: d4:c2:8c:dd:37:d7:0f:89:4b:fd:d4:2b:fb:c4:55:b8:14:b7: 07:70:8c:84:6a:a2:46:ad:0b:83:fc:cc:95:2e:f6:fb:07:e5: 0b:5b:73:41:e6:2c:3c:6e:f5:69:0a:5d:ea:86:be:c0:0c:88: 07:b5:33:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjYwODE5MDA0MTEyWhcNMjYwODI2MDA0MTEyWjAYMRYwFAYD VQQDEw02YTg0ZmJhOS1jZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykT38yYJI7p7rVvvMglOFpXtJrp1iI9kv/n5TENtDmfwcxaXGfbDKXJaPn9y Ws+bzc2mS16ecff4c6Hn4HAZlzIZ1MVsKw7WDQbo07TQr1x/gE+TazDiNhUk1tbP rSR2WVIX7BpUhX8b11/IO2DD0IsMDxEEctjIb/w4ZsOnTefC/S7mNYhBdXhQU5v7 EnRTrPN+QTF/BgH0jJzekOEv9l3yho8wIe+b59Hiip3PFTJO26hJWCJomVA3YOfg kXtBgWiu1AQt/pyXG5R5IxX072ya8h+8KlmlJx83lgjeqHEdEQG14WLmcN+Dxtz7 PpWUm1+jqoR4cP4Lin11X/cJHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVAqwnd mMDk6Nsz/6OLE3DPYY8tMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnAVTjQTxihL5dYhmbFldpT1rt4Nw9WhhLRQQbQHjtCk15v+7Lncyj6lIFHjk Z1dktr4dZdYgebm2phqLINy/Fd+J+PLdNWORHBYFmctaYxeGGDaSv/dGUqNHz+Wm TXW56LgmAviTRXOhZlg/tnuo8f260IwbRVUKh3CWRJRx88N+vYAqLAQqtDH7AJ0Y qNyd8QJT/nH/KvOvt7vKD9nJCsbioIZ5JLGHfos8ulkV6A+8FfQlkO77x2T37C5w 6sb1ORVc40561MKM3TfXD4lL/dQr+8RVuBS3B3CMhGqiRq0Lg/zMlS72+wflC1tz QeYsPG71aQpd6oa+wAyIB7Uz+w== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:54 2026 by rpki-client