$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: GJUhOmAzp/G6dNak0K3S8rQY/qe0+0fHo+nMzL26Qr4= Subject key identifier: C3:72:3A:BD:B5:DF:6E:7F:25:4E:A0:02:08:2C:2B:32:98:7E:6D:68 Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0B51 Signing time: Tue 18 Aug 2026 19:31:36 +0000 Manifest this update: Tue 18 Aug 2026 19:31:36 +0000 Manifest next update: Tue 25 Aug 2026 19:31:36 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: cTdPaRsbT+VUtFxpYocNTDjW3SIt5dA0K7iaN1maTpc=) 2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=) 3: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Aug 18 19:31:36 2026 GMT Not After : Aug 25 19:31:36 2026 GMT Subject: CN=6a84b318-5a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:e4:7b:7b:de:a2:e6:a3:ac:52:ec:9a:6b: 64:0e:1d:4c:73:e1:7e:ad:93:e7:34:66:6f:99:e4: cb:30:e1:a8:99:c4:ce:ee:94:5e:55:26:b2:6b:b9: 06:14:6a:c5:a0:18:b1:8f:61:2d:07:92:d3:49:a8: 1c:28:aa:38:f5:8f:6f:ba:b3:7f:49:be:61:70:80: 34:bf:bb:68:17:b4:8b:b5:de:7e:65:bd:7c:1c:99: 52:39:57:fb:a3:38:65:a7:d6:be:9f:20:c0:2d:32: f7:42:01:ca:aa:67:1f:13:81:f4:17:28:8c:72:ab: 3d:06:24:ca:07:85:22:68:1c:93:c6:ae:6c:6c:6c: ca:5b:ee:ca:ab:8b:d9:51:29:f3:7d:8c:e9:73:ef: 9e:dc:07:dd:1b:ec:80:af:a6:99:f9:17:75:d3:0f: 42:a4:75:c1:40:b0:d2:fb:36:bf:9b:a8:68:ae:63: ed:30:5e:9c:9a:cb:95:30:c7:d1:25:41:19:34:32: 74:72:ea:37:02:b8:49:bf:a4:13:d5:be:8d:82:bd: 24:b2:6c:96:af:26:a5:b5:af:cf:22:70:bb:b7:5a: a1:73:a0:59:71:94:90:f1:92:52:40:d4:e5:7b:58: 01:b3:2f:a1:54:66:19:10:13:d6:fd:ed:f8:33:71: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:72:3A:BD:B5:DF:6E:7F:25:4E:A0:02:08:2C:2B:32:98:7E:6D:68 X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:7d:e9:c9:7f:ba:3a:5b:b4:ac:c4:01:23:bd:6d:0e:25: cf:f6:47:de:3d:3b:f7:69:e8:ea:f5:cc:9f:8f:1a:3f:02:6d: ec:af:c9:57:db:59:b7:27:86:83:bc:cd:eb:d5:6c:3a:b6:f7: 69:14:09:a3:a8:ba:33:ea:c1:8c:e3:b5:94:13:fa:b4:a0:9f: 9e:c9:69:38:78:54:1e:ea:aa:0a:e1:f6:93:b5:3f:ac:f0:89: 5e:7f:8b:42:c0:e7:a2:c2:36:28:87:fd:ac:64:86:c7:04:65: 74:35:06:1d:25:5a:f9:dc:62:75:8f:1e:1e:a8:bc:96:fb:17: 1b:a0:70:9d:91:e8:15:2b:ea:ea:d5:de:94:cf:2a:e7:af:8a: a4:fc:b5:84:41:7f:86:ee:e3:e6:46:0a:5a:b0:cf:c1:e7:61: 57:25:a5:4d:0a:c2:f1:1b:16:be:2c:a1:9c:84:a1:0e:aa:72: 16:98:d8:c0:d9:63:21:b5:b3:1a:67:fd:04:b6:fa:b1:41:07: b0:28:0c:30:22:9a:e2:a6:c2:a9:a9:6e:a2:07:18:0e:3c:49: 32:17:07:74:ac:7d:8b:6d:35:f9:fd:be:c5:f2:79:59:76:5c: 6a:28:be:32:7a:81:b0:fe:c4:4d:92:7e:a6:0e:1a:82:ba:4d: 26:dc:15:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjYwODE4MTkzMTM2WhcNMjYwODI1MTkzMTM2WjAYMRYwFAYD VQQDEw02YTg0YjMxOC01YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4rke3veouajrFLsmmtkDh1Mc+F+rZPnNGZvmeTLMOGomcTO7pReVSaya7kG FGrFoBixj2EtB5LTSagcKKo49Y9vurN/Sb5hcIA0v7toF7SLtd5+Zb18HJlSOVf7 ozhlp9a+nyDALTL3QgHKqmcfE4H0FyiMcqs9BiTKB4UiaByTxq5sbGzKW+7Kq4vZ USnzfYzpc++e3AfdG+yAr6aZ+Rd10w9CpHXBQLDS+za/m6hormPtMF6cmsuVMMfR JUEZNDJ0cuo3ArhJv6QT1b6Ngr0ksmyWryalta/PInC7t1qhc6BZcZSQ8ZJSQNTl e1gBsy+hVGYZEBPW/e34M3F1PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNyOr21 325/JU6gAggsKzKYfm1oMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcy996cl/ujpbtKzEASO9bQ4lz/ZH3j0792no6vXMn48aPwJt7K/JV9tZtyeG g7zN69VsOrb3aRQJo6i6M+rBjOO1lBP6tKCfnslpOHhUHuqqCuH2k7U/rPCJXn+L QsDnosI2KIf9rGSGxwRldDUGHSVa+dxidY8eHqi8lvsXG6BwnZHoFSvq6tXelM8q 56+KpPy1hEF/hu7j5kYKWrDPwedhVyWlTQrC8RsWviyhnIShDqpyFpjYwNljIbWz Gmf9BLb6sUEHsCgMMCKa4qbCqaluogcYDjxJMhcHdKx9i201+f2+xfJ5WXZcaii+ MnqBsP7ETZJ+pg4agrpNJtwVJQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:21 2026 by rpki-client