$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: vCMRDfuTR0PIDekERjzvEeged0XJsFUYIdHwEd9Fo2U= Subject key identifier: 5D:EA:67:84:6D:33:6F:51:50:18:D6:9C:5B:32:6F:72:D0:75:88:B5 Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: 01D1 Signing time: Fri 21 Aug 2026 03:58:26 +0000 Manifest this update: Fri 21 Aug 2026 03:58:25 +0000 Manifest next update: Fri 28 Aug 2026 03:58:25 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: oQ5VpoOYBYFll9+fIAna3lBKuLumqQKS2duMHe8/zIw=) 2: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: tZoqe0Wr8WxlyxJlU9JnoVv0Dbj1abCtUlpInyE8avA=) 3: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: NXPm9MxFlazPxhF1ZkfK5w9U7zw1CF9xskWoFgFi9BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: Aug 21 03:58:25 2026 GMT Not After : Aug 28 03:58:25 2026 GMT Subject: CN=6a87cce2-5b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:52:c4:dd:e3:e2:1c:ce:24:68:19:82:e7: 07:02:1d:d2:69:e5:14:b5:0a:e4:11:a6:a8:ae:68: 82:1c:5b:f9:be:2c:15:0b:75:bd:d6:5a:3c:ad:f8: 9f:37:ed:96:5a:00:4e:e1:a6:48:16:45:2c:08:1f: 42:ed:f5:0d:5e:4d:d2:e6:3b:3b:4e:92:a5:3b:9e: 0c:7d:6e:8e:55:f1:17:ef:53:f4:95:07:38:d6:51: a9:70:2b:d1:ba:46:20:ab:32:c2:e3:de:22:44:66: 7e:1b:60:4b:53:c1:0e:b7:28:7c:67:bf:73:5b:1d: 27:a9:eb:a4:5a:41:a5:17:44:bc:58:bb:b2:b6:95: fd:d3:91:bc:13:08:41:9a:59:b9:3e:f0:ba:fa:db: 35:8b:b3:9e:e4:85:dd:e5:59:60:47:66:63:aa:f6: ce:6f:cd:13:cd:46:87:75:56:82:8e:67:67:43:79: bf:c1:e1:68:86:a6:75:f1:c8:e8:ed:c4:2c:bb:5c: 07:cb:02:92:69:d5:38:9b:63:7f:59:02:46:dc:2c: bf:ef:53:35:37:00:0f:8f:a1:2f:27:56:a6:b4:c7: 5e:aa:d2:38:c3:ca:35:14:0e:8a:a9:e3:4e:33:94: 4f:1d:07:46:5e:61:88:d2:c4:4e:40:ac:49:7e:94: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EA:67:84:6D:33:6F:51:50:18:D6:9C:5B:32:6F:72:D0:75:88:B5 X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:b3:d8:0b:8b:0b:bb:19:4b:71:d3:d7:e6:67:ce:72:85: f7:31:c1:9d:4d:c4:17:fb:95:68:a8:af:af:d1:93:f4:e9:65: 5a:09:0a:ec:83:7c:84:b0:1e:e3:43:8c:73:c7:83:5e:63:c1: da:a6:77:a1:6c:18:5b:20:56:8c:8b:95:f2:2d:62:63:34:77: 44:cc:c1:f4:20:12:2a:3c:74:87:f5:a9:c2:92:0d:b2:71:83: 26:d1:68:39:8d:c2:cc:fe:15:c9:cb:5f:39:82:0f:cf:c2:4e: 5f:ae:39:22:2b:32:c3:74:89:2c:ca:e2:59:a8:77:70:21:2e: 65:34:ae:1b:69:99:65:a2:73:4b:ec:64:8d:de:70:30:df:4c: 3d:ec:61:65:43:e6:92:94:75:a5:9f:c4:ec:6d:d7:b3:77:54: bc:cd:ee:30:35:10:6e:3f:99:1a:4f:c4:bb:07:8c:77:91:61: 35:75:7b:81:1e:e4:29:c3:93:89:03:8b:42:32:cd:9d:6f:d0: 78:2d:e9:a2:32:1f:54:6e:d2:a9:9e:82:1e:85:c8:df:12:b5: f6:26:1a:97:3e:e2:a8:ea:12:7e:f1:8b:12:33:75:1e:6f:bb: 48:fb:6a:98:fc:8c:f0:ed:69:38:06:a8:bd:f6:66:a3:3f:3a: a2:94:1b:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjYwODIxMDM1ODI1WhcNMjYwODI4MDM1ODI1WjAYMRYwFAYD VQQDEw02YTg3Y2NlMi01YjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA561SxN3j4hzOJGgZgucHAh3SaeUUtQrkEaaormiCHFv5viwVC3W91lo8rfif N+2WWgBO4aZIFkUsCB9C7fUNXk3S5js7TpKlO54MfW6OVfEX71P0lQc41lGpcCvR ukYgqzLC494iRGZ+G2BLU8EOtyh8Z79zWx0nqeukWkGlF0S8WLuytpX905G8EwhB mlm5PvC6+ts1i7Oe5IXd5VlgR2ZjqvbOb80TzUaHdVaCjmdnQ3m/weFohqZ18cjo 7cQsu1wHywKSadU4m2N/WQJG3Cy/71M1NwAPj6EvJ1amtMdeqtI4w8o1FA6KqeNO M5RPHQdGXmGI0sROQKxJfpS95wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3qZ4Rt M29RUBjWnFsyb3LQdYi1MB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoNGz2AuLC7sZS3HT1+ZnznKF9zHBnU3EF/uVaKivr9GT9OllWgkK7IN8hLAe 40OMc8eDXmPB2qZ3oWwYWyBWjIuV8i1iYzR3RMzB9CASKjx0h/WpwpINsnGDJtFo OY3CzP4VyctfOYIPz8JOX645Iisyw3SJLMriWah3cCEuZTSuG2mZZaJzS+xkjd5w MN9MPexhZUPmkpR1pZ/E7G3Xs3dUvM3uMDUQbj+ZGk/EuweMd5FhNXV7gR7kKcOT iQOLQjLNnW/QeC3pojIfVG7SqZ6CHoXI3xK19iYalz7iqOoSfvGLEjN1Hm+7SPtq mPyM8O1pOAaovfZmoz86opQb8A== -----END CERTIFICATE-----Generated at Sat Aug 22 15:38:10 2026 by rpki-client