$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft File: 1_KB4-XMf8L0gLKaflSfC6yMbfI.mft (raw, json) Hash identifier: CMiDGx7dvUI8TXKIeSHxAsXS5MG/xs8e7uID4f631qk= Subject key identifier: B0:98:75:3D:66:61:02:16:87:44:E7:BD:3B:4F:E7:F3:E7:2A:47:DD Authority key identifier: D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 Certificate issuer: /CN=A915C38F/serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft Manifest number: 1F Signing time: Sat 19 Sep 2026 08:57:58 +0000 Manifest this update: Sat 19 Sep 2026 08:57:57 +0000 Manifest next update: Sat 26 Sep 2026 08:57:57 +0000 Files and hashes: 1: 1_KB4-XMf8L0gLKaflSfC6yMbfI.crl (hash: dmMTFkLMBdZR0f6GdEfWo38UX9UsbBlDJtUxVco0Ips=) 2: EAB52720931411F1ACFC204F3511F970.roa (hash: jOKr1O6uDPb+PHiDSlud8HBHSWAz7FJZ5XLwIBlBgFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C38F, serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Validity Not Before: Sep 19 08:57:57 2026 GMT Not After : Sep 26 08:57:57 2026 GMT Subject: CN=6aae4e96-7eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:2d:06:d3:fb:24:72:04:3d:b5:82:4f:88: c1:fc:ed:13:44:ec:d4:ce:2b:d1:8a:69:1f:5b:5e: 2c:d9:8e:d7:a4:a2:7f:1c:14:4f:23:99:21:b3:73: ba:7d:03:71:56:c1:45:e0:1d:d2:64:c8:10:38:39: ea:94:28:26:ec:1e:f3:65:8c:7a:87:08:db:af:75: 17:62:8b:99:cf:eb:5c:10:e3:75:f4:f6:95:b8:8a: e7:6c:54:2d:ec:4a:6f:dc:4a:da:aa:c2:1d:aa:13: d5:00:12:9a:2b:d6:91:6d:8e:71:82:17:8c:4d:d6: 11:17:ef:84:b3:d8:21:6d:86:b2:bc:b1:f8:f5:7f: 91:95:68:2a:79:a5:c6:d7:f5:91:cd:03:75:a5:90: c9:e8:fc:b5:f5:65:ac:dd:82:ce:41:7f:63:a5:e2: e1:b6:ea:f2:b8:a9:51:78:49:ab:ba:a7:3a:18:29: 22:ff:86:96:a3:70:a0:3b:8b:b3:18:58:45:82:6d: a5:2d:8a:e2:b2:4c:0c:a3:8f:a0:71:e4:0b:12:70: ad:4f:ac:45:01:cc:7c:7e:56:69:88:6a:c0:3b:a0: d9:90:98:e1:35:5a:53:c2:c0:73:14:72:57:ab:61: 2e:61:ff:09:a6:21:7e:c8:c0:87:d0:c6:25:19:6b: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:75:3D:66:61:02:16:87:44:E7:BD:3B:4F:E7:F3:E7:2A:47:DD X509v3 Authority Key Identifier: keyid:D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c7:21:c3:a1:a4:c0:fd:49:70:f2:f7:69:ee:f6:01:e5:dd: 69:67:04:5a:2d:9b:97:a2:70:bb:1f:95:49:ea:2e:54:e9:f2: 53:43:1c:89:86:fc:54:83:53:ef:2b:c4:68:da:74:a5:b7:4e: ab:59:cf:da:49:22:3c:95:98:46:98:7f:08:ff:b9:9b:4b:d5: c7:aa:90:20:f1:88:8b:89:a7:9d:d5:3b:54:e7:0a:98:5c:96: 9a:3d:82:f9:48:94:d9:67:da:60:79:e4:bc:60:80:de:e5:81: 88:18:78:ae:19:ff:cb:b6:ba:e3:fe:b4:0f:3f:24:71:b0:99: 03:40:3f:d9:8f:20:c1:55:26:35:10:22:c1:10:3c:34:5e:53: 50:2f:7b:16:3f:f0:50:f5:06:8e:bd:07:7f:f2:70:24:76:5e: 4b:99:63:46:92:3a:78:71:61:e7:aa:7f:bb:22:5c:c1:68:b0: 0e:50:72:ca:95:68:6b:70:7b:31:dc:33:db:e4:56:02:44:92: fb:21:27:7b:aa:dc:10:92:8f:10:a4:7c:d2:87:09:3e:ba:a6: db:84:8d:48:6c:b0:e5:02:45:72:0b:79:3d:e0:5d:4a:cc:b8: c5:3b:e9:18:de:86:98:7e:bc:98:89:70:f5:81:d0:76:a9:2e: 4f:7c:13:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzM4RjExMC8GA1UEBRMoRDdGMjgxRTNFNUNDN0ZDMkY0ODBCMjlBN0U1NDlGMEJB QzhDNkRGMjAeFw0yNjA5MTkwODU3NTdaFw0yNjA5MjYwODU3NTdaMBgxFjAUBgNV BAMTDTZhYWU0ZTk2LTdlZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuFi0G0/skcgQ9tYJPiMH87RNE7NTOK9GKaR9bXizZjtekon8cFE8jmSGzc7p9 A3FWwUXgHdJkyBA4OeqUKCbsHvNljHqHCNuvdRdii5nP61wQ43X09pW4iudsVC3s Sm/cStqqwh2qE9UAEpor1pFtjnGCF4xN1hEX74Sz2CFthrK8sfj1f5GVaCp5pcbX 9ZHNA3WlkMno/LX1Zazdgs5Bf2Ol4uG26vK4qVF4Sau6pzoYKSL/hpajcKA7i7MY WEWCbaUtiuKyTAyjj6Bx5AsScK1PrEUBzHx+VmmIasA7oNmQmOE1WlPCwHMUcler YS5h/wmmIX7IwIfQxiUZa7q5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsJh1PWZh AhaHROe9O0/n8+cqR90wHwYDVR0jBBgwFoAU1/KB4+XMf8L0gLKaflSfC6yMbfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDMzhGLzI0N0YzNzZFOEQ2 MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhMMGdMS2FmbFNmQzZ5TWJm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMV9LQjQtWE1mOEwwZ0xLYWZsU2ZDNnlNYmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD MzhGLzI0N0YzNzZFOEQ2MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhM MGdMS2FmbFNmQzZ5TWJmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+xyHDoaTA/Ulw8vdp7vYB5d1pZwRaLZuXonC7H5VJ6i5U6fJTQxyJhvxUg1Pv K8Ro2nSlt06rWc/aSSI8lZhGmH8I/7mbS9XHqpAg8YiLiaed1TtU5wqYXJaaPYL5 SJTZZ9pgeeS8YIDe5YGIGHiuGf/Ltrrj/rQPPyRxsJkDQD/ZjyDBVSY1ECLBEDw0 XlNQL3sWP/BQ9QaOvQd/8nAkdl5LmWNGkjp4cWHnqn+7IlzBaLAOUHLKlWhrcHsx 3DPb5FYCRJL7ISd7qtwQko8QpHzShwk+uqbbhI1IbLDlAkVyC3k94F1KzLjFO+kY 3oaYfryYiXD1gdB2qS5PfBNy -----END CERTIFICATE-----Generated at Mon Sep 21 03:19:56 2026 by rpki-client