$ rpki-client -vvf rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft File: 8O-KITM_UQdy8x7aMkGe3iQXrTk.mft (raw, json) Hash identifier: +58YCv8VJgUdbaNBIObltWtmnK3ykIYn3k5epz1MVQg= Subject key identifier: 37:F2:64:88:3D:74:DE:DF:2E:2C:89:B1:DB:32:81:05:52:F0:07:6D Authority key identifier: F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 Certificate issuer: /CN=A91F352B/serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft Manifest number: 1B Signing time: Wed 19 Aug 2026 09:40:28 +0000 Manifest this update: Wed 19 Aug 2026 09:40:27 +0000 Manifest next update: Wed 26 Aug 2026 09:40:27 +0000 Files and hashes: 1: 8O-KITM_UQdy8x7aMkGe3iQXrTk.crl (hash: HmK32ajNAoNQlvVvTvFLJot1ktqZQSwEqu8RQXUi7iM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F352B, serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Validity Not Before: Aug 19 09:40:27 2026 GMT Not After : Aug 26 09:40:27 2026 GMT Subject: CN=6a857a0c-b67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:ec:7f:16:47:1f:75:e3:ee:d8:4f:73:34: 59:19:6b:2f:54:d3:ae:cc:14:38:ec:15:05:f8:11: 4b:8d:63:9f:6d:a5:22:fb:7c:47:25:09:d5:49:b3: d5:41:41:c5:76:31:39:0e:02:d9:40:6e:b4:bd:47: f2:81:ba:44:9e:93:d3:b3:fa:7f:15:16:99:f2:e9: bc:8b:a1:e4:ee:38:a0:fa:fd:f9:f3:93:b7:df:23: 84:1d:8f:02:46:40:d7:30:64:c9:0b:22:33:7e:91: e3:b0:98:2c:04:cb:08:b8:10:af:e0:ae:43:50:9f: cc:97:0d:01:5b:00:bc:8c:96:ac:70:92:2c:fc:ce: 2d:eb:04:f2:4d:c2:81:3d:c7:d2:8c:80:ae:35:98: 13:be:50:5c:3f:00:41:7c:6c:86:ad:f4:e0:27:38: e4:94:66:0d:2a:8a:c7:ca:e7:8d:3e:26:e0:4b:7a: 51:40:f3:cd:60:3b:fe:23:b9:4b:46:95:63:37:3f: 6b:5d:c7:91:0e:d4:95:92:dd:e3:54:62:19:c0:c2: d5:00:fc:a8:6f:98:90:53:0c:23:a0:79:61:e3:41: dc:c5:65:04:5d:2e:2d:44:7e:59:8c:f2:a7:40:c2: 2f:13:fb:18:66:f9:88:0f:d3:f0:49:b7:84:77:ee: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F2:64:88:3D:74:DE:DF:2E:2C:89:B1:DB:32:81:05:52:F0:07:6D X509v3 Authority Key Identifier: keyid:F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:63:7e:68:6c:8e:dc:c0:37:94:04:e0:2b:02:89:95:7c:51: 05:15:6f:91:fa:3a:93:10:43:c7:24:e9:de:81:11:09:5c:72: b0:ea:ba:2f:15:37:35:45:db:2c:15:4e:91:8f:ac:0c:38:38: 61:fd:5a:86:de:18:fa:5c:f8:49:d3:07:48:bd:32:7a:32:34: dd:86:c2:e8:11:6e:f0:cc:fd:c6:55:3b:3a:0b:98:ce:60:00: f7:e1:35:a1:7e:c9:de:87:d5:cd:f3:45:ce:bf:66:52:64:a2: 63:01:dc:4f:b9:da:c0:fc:f2:a1:a2:55:32:32:05:5e:f3:64: 98:07:87:e2:38:69:45:39:76:49:45:5e:3b:0a:10:dc:03:74: 8d:16:06:d1:08:d8:94:14:42:e0:8d:42:c3:2e:f8:fa:57:e6: 18:78:99:ae:23:7b:d4:6b:a7:14:77:89:98:f1:01:f6:0a:2b: e6:00:51:4b:b2:fb:a0:c8:b3:4a:7f:11:4d:18:c6:4d:ef:f4: 54:e7:01:9d:a1:59:24:9d:50:51:fe:81:8e:46:58:ee:48:a8: 0d:ce:4a:17:09:49:10:ef:b2:fe:5e:55:ae:fe:5d:31:cb:02: 89:9b:b3:5c:1f:45:ca:f4:89:51:86:a0:0d:5f:08:25:c0:e0: 54:1a:0d:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzUyQjExMC8GA1UEBRMoRjBFRjhBMjEzMzNGNTEwNzcyRjMxRURBMzI0MTlFREUy NDE3QUQzOTAeFw0yNjA4MTkwOTQwMjdaFw0yNjA4MjYwOTQwMjdaMBgxFjAUBgNV BAMTDTZhODU3YTBjLWI2N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNjex/FkcfdePu2E9zNFkZay9U067MFDjsFQX4EUuNY59tpSL7fEclCdVJs9VB QcV2MTkOAtlAbrS9R/KBukSek9Oz+n8VFpny6byLoeTuOKD6/fnzk7ffI4QdjwJG QNcwZMkLIjN+keOwmCwEywi4EK/grkNQn8yXDQFbALyMlqxwkiz8zi3rBPJNwoE9 x9KMgK41mBO+UFw/AEF8bIat9OAnOOSUZg0qisfK540+JuBLelFA881gO/4juUtG lWM3P2tdx5EO1JWS3eNUYhnAwtUA/KhvmJBTDCOgeWHjQdzFZQRdLi1EflmM8qdA wi8T+xhm+YgP0/BJt4R37lGNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN/JkiD10 3t8uLImx2zKBBVLwB20wHwYDVR0jBBgwFoAU8O+KITM/UQdy8x7aMkGe3iQXrTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNTJCLzE1MzU4RDk4NzM2 QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFkeTh4N2FNa0dlM2lRWHJU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOE8tS0lUTV9VUWR5OHg3YU1rR2UzaVFYclRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NTJCLzE1MzU4RDk4NzM2QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFk eTh4N2FNa0dlM2lRWHJUay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYY35obI7cwDeUBOArAomVfFEFFW+R+jqTEEPHJOnegREJXHKw6rovFTc1Rdss FU6Rj6wMODhh/VqG3hj6XPhJ0wdIvTJ6MjTdhsLoEW7wzP3GVTs6C5jOYAD34TWh fsneh9XN80XOv2ZSZKJjAdxPudrA/PKholUyMgVe82SYB4fiOGlFOXZJRV47ChDc A3SNFgbRCNiUFELgjULDLvj6V+YYeJmuI3vUa6cUd4mY8QH2CivmAFFLsvugyLNK fxFNGMZN7/RU5wGdoVkknVBR/oGORljuSKgNzkoXCUkQ77L+XlWu/l0xywKJm7Nc H0XK9IlRhqANXwglwOBUGg0l -----END CERTIFICATE-----Generated at Wed Aug 19 12:44:29 2026 by rpki-client