$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft File: 1_KB4-XMf8L0gLKaflSfC6yMbfI.mft (raw, json) Hash identifier: aJ1WlK6XZMzvg5Xbq2mpkt3ul3FXLsdbfGp7jGi4yj8= Subject key identifier: 97:0C:24:F7:70:85:FA:C4:E1:1C:FC:A6:90:8B:99:F6:C9:83:89:BE Authority key identifier: D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 Certificate issuer: /CN=A915C38F/serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft Manifest number: 20 Signing time: Mon 21 Sep 2026 08:54:12 +0000 Manifest this update: Mon 21 Sep 2026 08:54:12 +0000 Manifest next update: Mon 28 Sep 2026 08:54:12 +0000 Files and hashes: 1: 1_KB4-XMf8L0gLKaflSfC6yMbfI.crl (hash: TqbrUWZokzffdtUXNjYhdDxvfe49Bki5pbNgT4M1Ni4=) 2: EAB52720931411F1ACFC204F3511F970.roa (hash: jOKr1O6uDPb+PHiDSlud8HBHSWAz7FJZ5XLwIBlBgFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C38F, serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Validity Not Before: Sep 21 08:54:12 2026 GMT Not After : Sep 28 08:54:12 2026 GMT Subject: CN=6ab0f0b4-feac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:83:93:4a:75:b3:6c:cb:98:66:df:00:e7: a1:15:d4:a8:9b:fd:90:ff:27:1a:fd:85:7d:9e:ba: c0:8e:01:3e:7e:2c:52:d3:d5:4a:9a:71:1b:34:47: bd:c0:70:c4:2b:87:eb:82:1b:ff:57:39:9d:e6:d9: 86:3e:a2:4c:67:10:93:e7:1e:1d:fe:7d:e6:9a:e7: 5b:48:4b:da:66:4b:25:a8:79:40:70:60:86:a2:be: 6e:42:fc:71:0e:37:f4:36:46:38:82:66:8a:39:8f: 02:35:a5:85:b6:39:c8:bb:3d:be:03:6c:64:86:fd: d0:39:bb:c9:cd:5f:6b:82:22:d8:e5:bf:b6:2e:22: 41:6e:ec:9a:94:ee:d2:7e:09:bd:82:b1:df:a8:94: 20:c2:99:98:a7:33:55:fe:6a:74:b7:83:14:b5:cd: 85:8f:26:49:03:c0:21:d7:65:2b:25:e2:59:4e:5d: db:a7:75:34:af:0a:a6:e0:5a:a5:5a:48:46:f4:a9: 14:87:5a:5a:67:37:6e:a3:64:8c:1e:5b:29:4d:cc: ef:9b:fa:cd:aa:0c:7b:47:f8:2c:e4:a2:b4:ce:f2: 44:e3:8b:af:60:cf:83:c2:12:b4:64:51:a0:d0:52: 46:31:a6:18:1e:a1:ef:e1:4d:44:49:df:ad:15:9f: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:24:F7:70:85:FA:C4:E1:1C:FC:A6:90:8B:99:F6:C9:83:89:BE X509v3 Authority Key Identifier: keyid:D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a1:da:df:10:f6:ef:7a:8d:da:33:fc:c0:ae:4c:a5:90:81: 62:9b:5b:e9:15:a4:ff:b8:6f:e6:a1:91:4f:8d:5b:7b:94:b0: 5c:73:0e:63:39:51:a2:e7:37:19:7a:0c:9a:9c:7e:62:a7:cd: a4:c4:ec:41:24:bc:5e:0b:e8:cf:50:9c:fb:cd:74:16:dc:28: 99:b9:58:b2:d1:e1:9f:48:ed:72:31:79:c4:08:72:d6:5b:68: 90:1b:15:d4:95:ad:19:1d:65:04:91:ce:ee:f6:ba:d9:ec:46: c7:81:8c:67:21:25:5b:21:a6:13:a7:74:23:22:cb:ce:85:07: 84:18:d6:4a:d1:ae:44:d2:53:d9:a6:06:70:9c:f2:53:86:61: 48:ae:e4:df:b3:e7:19:f2:f0:a4:1c:25:cc:3b:b4:5c:10:04: 33:6c:86:20:af:03:a5:ae:fd:11:01:91:cc:4a:79:49:49:81: f5:25:d5:9f:cf:f0:13:e5:30:0d:a1:80:99:a9:67:40:23:5d: 39:33:b7:04:bd:a2:bb:eb:8f:f5:07:1f:ad:8a:73:92:f1:75: a6:ea:80:33:51:ce:5d:52:f9:8f:50:f3:e2:07:7b:38:5c:e8: d0:65:bb:68:f9:67:91:94:5b:8a:09:38:74:76:99:9e:10:dc: e4:f2:f4:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzM4RjExMC8GA1UEBRMoRDdGMjgxRTNFNUNDN0ZDMkY0ODBCMjlBN0U1NDlGMEJB QzhDNkRGMjAeFw0yNjA5MjEwODU0MTJaFw0yNjA5MjgwODU0MTJaMBgxFjAUBgNV BAMTDTZhYjBmMGI0LWZlYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVoIOTSnWzbMuYZt8A56EV1Kib/ZD/Jxr9hX2eusCOAT5+LFLT1UqacRs0R73A cMQrh+uCG/9XOZ3m2YY+okxnEJPnHh3+feaa51tIS9pmSyWoeUBwYIaivm5C/HEO N/Q2RjiCZoo5jwI1pYW2Oci7Pb4DbGSG/dA5u8nNX2uCItjlv7YuIkFu7JqU7tJ+ Cb2Csd+olCDCmZinM1X+anS3gxS1zYWPJkkDwCHXZSsl4llOXdundTSvCqbgWqVa SEb0qRSHWlpnN26jZIweWylNzO+b+s2qDHtH+CzkorTO8kTji69gz4PCErRkUaDQ UkYxphgeoe/hTURJ360VnyB3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlwwk93CF +sThHPymkIuZ9smDib4wHwYDVR0jBBgwFoAU1/KB4+XMf8L0gLKaflSfC6yMbfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDMzhGLzI0N0YzNzZFOEQ2 MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhMMGdMS2FmbFNmQzZ5TWJm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMV9LQjQtWE1mOEwwZ0xLYWZsU2ZDNnlNYmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD MzhGLzI0N0YzNzZFOEQ2MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhM MGdMS2FmbFNmQzZ5TWJmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBrodrfEPbveo3aM/zArkylkIFim1vpFaT/uG/moZFPjVt7lLBccw5jOVGi5zcZ egyanH5ip82kxOxBJLxeC+jPUJz7zXQW3CiZuViy0eGfSO1yMXnECHLWW2iQGxXU la0ZHWUEkc7u9rrZ7EbHgYxnISVbIaYTp3QjIsvOhQeEGNZK0a5E0lPZpgZwnPJT hmFIruTfs+cZ8vCkHCXMO7RcEAQzbIYgrwOlrv0RAZHMSnlJSYH1JdWfz/AT5TAN oYCZqWdAI105M7cEvaK764/1Bx+tinOS8XWm6oAzUc5dUvmPUPPiB3s4XOjQZbto +WeRlFuKCTh0dpmeENzk8vTH -----END CERTIFICATE-----Generated at Wed Sep 23 04:28:51 2026 by rpki-client