$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json) Hash identifier: 7ou+go27VUMzGNwcP29D08uZuRE2xj9H8OZ5cfcWly8= Subject key identifier: 97:43:8F:BA:86:8A:D5:26:BD:F8:84:31:58:42:A8:45:A3:47:C8:7C Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft Manifest number: 0BF4 Signing time: Tue 18 Aug 2026 19:45:52 +0000 Manifest this update: Tue 18 Aug 2026 19:45:51 +0000 Manifest next update: Tue 25 Aug 2026 19:45:51 +0000 Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: iAbtCNc5KLkYAn6aYN4ylXcendpfrSX+wU3N2DzR+G0=) 2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Validity Not Before: Aug 18 19:45:51 2026 GMT Not After : Aug 25 19:45:51 2026 GMT Subject: CN=6a84b670-7aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:6c:77:1e:2e:3d:3a:52:f3:96:cb:57:72: 06:ed:dd:9b:72:1a:06:4e:ca:cd:d2:db:d9:12:a8: c8:85:b6:a0:e3:ca:eb:34:50:63:1e:de:e7:25:90: 1d:89:f1:da:a8:2e:83:ff:e8:9c:0c:64:aa:6b:62: a4:bf:c3:f6:94:77:b0:33:07:e5:08:a7:b5:1f:4c: 74:7a:aa:64:61:08:e5:a3:95:3a:24:ca:72:95:2d: 34:cd:68:75:53:e4:b3:98:61:39:37:39:bb:85:92: 9a:31:95:4f:5d:b9:46:9a:18:1a:e9:a6:f0:f4:a2: ad:d7:c5:ec:24:9a:84:40:a4:11:8a:d8:da:64:6e: 22:e5:6d:b5:21:b2:19:18:be:a4:7a:63:cb:98:95: 0d:dd:3a:3e:8f:33:27:e3:59:f7:33:cc:90:7a:57: 3f:37:4a:ed:71:23:83:db:e2:47:e9:9c:ad:af:88: cc:2e:8d:0e:fc:18:09:d0:26:5b:59:a9:16:04:0e: 16:a1:58:31:ca:a2:c7:aa:68:69:32:ff:88:db:fc: f1:9a:ba:78:9e:54:0c:7c:84:41:74:6c:5c:b1:55: 68:e6:fe:4a:2f:f3:7c:6b:0d:96:f4:56:ec:d2:46: 5a:46:84:87:03:bc:dd:b3:f3:e9:53:5c:13:6c:2f: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:8F:BA:86:8A:D5:26:BD:F8:84:31:58:42:A8:45:A3:47:C8:7C X509v3 Authority Key Identifier: keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:a8:99:18:fa:e9:e7:92:db:c8:c8:31:92:cf:ce:7a:4a:57: 3d:9a:28:12:a3:b5:ea:71:31:ec:3b:b3:b0:55:11:b0:ca:1c: 9a:73:74:b1:fc:02:59:4d:a0:6e:21:bd:e2:26:df:d6:a7:d8: 04:54:42:17:86:8e:f6:ab:b0:af:55:bf:0e:1f:ef:85:d0:ee: 52:c0:9d:35:52:e0:ea:11:23:cb:6a:56:9a:65:46:c1:37:96: 3a:ee:77:8d:d7:31:8b:a9:a2:3d:40:8d:97:b4:11:d2:03:71: bf:04:08:5b:d1:80:96:3e:13:04:c5:47:f2:b0:4f:05:79:0b: 4b:20:07:05:61:2d:be:1b:c2:1e:06:f4:d1:22:d0:e1:b5:ed: 1c:61:82:aa:f1:c6:53:98:06:97:d6:5d:e0:0c:0d:73:39:2a: e8:50:e1:4a:01:e6:fe:47:b0:36:64:3a:11:56:d2:5a:08:dc: a1:62:53:97:ec:c3:84:f7:8b:17:b1:98:ac:81:d1:24:1a:5f: 02:48:49:ac:c0:63:99:92:79:b3:20:8c:a5:d0:d8:96:6d:32: dc:e0:b9:89:3c:a9:a2:a6:97:bb:cf:bc:e2:7d:77:da:c0:92: 93:66:26:2b:b3:dc:9f:79:21:0c:1d:7e:61:51:a0:8d:51:ce: 68:dd:6c:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKERFNENFOTYwQTM5MzBBQjRDMjI3RkNFOEY4NTdDMDg0 MTk3RjA4RDAwHhcNMjYwODE4MTk0NTUxWhcNMjYwODI1MTk0NTUxWjAYMRYwFAYD VQQDEw02YTg0YjY3MC03YWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuxsdx4uPTpS85bLV3IG7d2bchoGTsrN0tvZEqjIhbag48rrNFBjHt7nJZAd ifHaqC6D/+icDGSqa2Kkv8P2lHewMwflCKe1H0x0eqpkYQjlo5U6JMpylS00zWh1 U+SzmGE5Nzm7hZKaMZVPXblGmhga6abw9KKt18XsJJqEQKQRitjaZG4i5W21IbIZ GL6kemPLmJUN3To+jzMn41n3M8yQelc/N0rtcSOD2+JH6Zytr4jMLo0O/BgJ0CZb WakWBA4WoVgxyqLHqmhpMv+I2/zxmrp4nlQMfIRBdGxcsVVo5v5KL/N8aw2W9Fbs 0kZaRoSHA7zds/PpU1wTbC8xbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdDj7qG itUmvfiEMVhCqEWjR8h8MB8GA1UdIwQYMBaAFN5M6WCjkwq0wif86PhXwIQZfwjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENyVENKX3pvLUZmQWhCbF9D TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNrenBZS09UQ3JUQ0pfem8tRmZBaEJsX0NOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENy VENKX3pvLUZmQWhCbF9DTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4KiZGPrp55LbyMgxks/OekpXPZooEqO16nEx7DuzsFURsMocmnN0sfwCWU2g biG94ibf1qfYBFRCF4aO9quwr1W/Dh/vhdDuUsCdNVLg6hEjy2pWmmVGwTeWOu53 jdcxi6miPUCNl7QR0gNxvwQIW9GAlj4TBMVH8rBPBXkLSyAHBWEtvhvCHgb00SLQ 4bXtHGGCqvHGU5gGl9Zd4AwNczkq6FDhSgHm/kewNmQ6EVbSWgjcoWJTl+zDhPeL F7GYrIHRJBpfAkhJrMBjmZJ5syCMpdDYlm0y3OC5iTypoqaXu8+84n132sCSk2Ym K7Pcn3khDB1+YVGgjVHOaN1sJg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:28 2026 by rpki-client