$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft File: 1_KB4-XMf8L0gLKaflSfC6yMbfI.mft (raw, json) Hash identifier: 4ffzWTRVPJZb394YVE5KC0TLMMisITaupENB+teV9Ac= Subject key identifier: EF:41:2A:1C:35:6A:CD:73:D5:20:D0:C0:12:52:74:D8:B6:22:CF:66 Authority key identifier: D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 Certificate issuer: /CN=A915C38F/serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft Manifest number: 36 Signing time: Tue 03 Nov 2026 09:44:24 +0000 Manifest this update: Tue 03 Nov 2026 09:44:23 +0000 Manifest next update: Tue 10 Nov 2026 09:44:23 +0000 Files and hashes: 1: 1_KB4-XMf8L0gLKaflSfC6yMbfI.crl (hash: j+cTuTUfsvgcVtF6SegGsjmCBXmdF7eWUOBj+ghdBjM=) 2: EAB52720931411F1ACFC204F3511F970.roa (hash: jOKr1O6uDPb+PHiDSlud8HBHSWAz7FJZ5XLwIBlBgFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C38F, serialNumber=D7F281E3E5CC7FC2F480B29A7E549F0BAC8C6DF2 Validity Not Before: Nov 3 09:44:23 2026 GMT Not After : Nov 10 09:44:23 2026 GMT Subject: CN=6ae9acf8-7e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:36:07:f8:b5:36:91:c1:15:a3:62:59:ba: b9:40:6b:eb:d1:61:65:4e:24:b9:09:fa:3a:f1:35: a0:2f:34:eb:11:fa:77:24:2c:15:3f:02:bb:36:44: 89:89:63:f3:03:a8:b3:ea:69:78:8d:7e:0c:76:b1: c8:0f:2c:8b:cb:1c:18:fc:13:57:ec:44:08:87:57: 6d:d6:b5:a7:3d:cc:77:d9:de:0c:20:f1:e5:fb:bb: c3:87:81:15:fe:64:2c:51:be:5b:b1:5f:95:3b:21: 8a:20:8f:e4:3e:ce:55:ea:a5:65:0a:55:47:85:40: 51:8f:61:95:99:4d:ad:1b:d3:21:81:45:d2:7d:36: c8:30:4e:77:e2:8f:13:47:1f:f2:6b:ea:85:06:df: 6e:71:26:59:da:41:f7:7a:6b:6b:01:a7:0e:9c:dc: b6:fd:61:83:35:5b:90:9a:97:9e:31:24:90:9b:f9: 85:e9:4e:e7:c9:97:bb:a6:be:e0:77:e8:ec:ad:ca: 8b:76:e6:f3:c1:49:71:e9:32:52:17:fc:0f:96:60: a4:8d:fd:98:01:cf:16:38:89:5d:75:f7:f9:f6:79: 3b:80:3e:a7:04:dd:a8:81:77:05:19:13:57:60:2a: 87:5d:b0:22:e3:20:00:63:67:f9:12:65:73:a8:ea: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:41:2A:1C:35:6A:CD:73:D5:20:D0:C0:12:52:74:D8:B6:22:CF:66 X509v3 Authority Key Identifier: keyid:D7:F2:81:E3:E5:CC:7F:C2:F4:80:B2:9A:7E:54:9F:0B:AC:8C:6D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1_KB4-XMf8L0gLKaflSfC6yMbfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C38F/247F376E8D6311F18EF7CFC66C11F970/1_KB4-XMf8L0gLKaflSfC6yMbfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a2:b4:f7:d5:fb:9b:6f:97:57:ce:b7:24:05:d8:8f:52:e8: 70:f1:97:1d:c6:e3:36:f7:79:b4:e1:00:e9:68:8a:6b:81:fe: 61:a9:4e:bb:2a:0f:a3:4b:74:4e:e6:44:15:5e:ab:1f:bc:6b: e9:0c:d2:5d:f7:bc:ea:2c:c5:ca:60:8b:6e:44:fb:1d:db:7e: 85:46:92:ce:f9:06:0d:93:25:42:f7:68:97:4f:3c:76:5d:67: 2c:8e:71:48:39:84:77:dd:8c:56:58:4d:7f:f8:c2:67:72:6d: f8:8c:c5:b5:33:a0:0a:74:ed:cc:1f:e1:87:1b:50:75:bd:00: 8e:a0:58:6d:4c:00:0c:0c:90:77:04:ec:30:66:62:fa:95:ee: a0:4d:91:29:bc:75:d6:6d:95:04:27:93:78:13:61:43:8b:d2: 92:b2:cd:aa:33:3b:e5:6b:36:e7:41:44:55:d6:47:da:56:f6: 5a:65:a4:14:4a:8e:be:d2:67:ed:25:fd:53:be:dd:ce:b8:c7: fb:6d:79:56:85:ed:6d:64:94:44:72:46:b7:75:9a:0f:30:a4: b7:06:54:df:48:64:27:1e:7c:40:44:9a:43:74:9b:f3:4a:34: f9:5c:a0:fe:47:69:8f:4b:11:11:03:c8:a8:83:47:74:47:0a: d5:c7:05:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzM4RjExMC8GA1UEBRMoRDdGMjgxRTNFNUNDN0ZDMkY0ODBCMjlBN0U1NDlGMEJB QzhDNkRGMjAeFw0yNjExMDMwOTQ0MjNaFw0yNjExMTAwOTQ0MjNaMBgxFjAUBgNV BAMTDTZhZTlhY2Y4LTdlN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3tzYH+LU2kcEVo2JZurlAa+vRYWVOJLkJ+jrxNaAvNOsR+nckLBU/Ars2RImJ Y/MDqLPqaXiNfgx2scgPLIvLHBj8E1fsRAiHV23Wtac9zHfZ3gwg8eX7u8OHgRX+ ZCxRvluxX5U7IYogj+Q+zlXqpWUKVUeFQFGPYZWZTa0b0yGBRdJ9NsgwTnfijxNH H/Jr6oUG325xJlnaQfd6a2sBpw6c3Lb9YYM1W5Cal54xJJCb+YXpTufJl7umvuB3 6Oytyot25vPBSXHpMlIX/A+WYKSN/ZgBzxY4iV119/n2eTuAPqcE3aiBdwUZE1dg KoddsCLjIABjZ/kSZXOo6uYTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU70EqHDVq zXPVINDAElJ02LYiz2YwHwYDVR0jBBgwFoAU1/KB4+XMf8L0gLKaflSfC6yMbfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDMzhGLzI0N0YzNzZFOEQ2 MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhMMGdMS2FmbFNmQzZ5TWJm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMV9LQjQtWE1mOEwwZ0xLYWZsU2ZDNnlNYmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD MzhGLzI0N0YzNzZFOEQ2MzExRjE4RUY3Q0ZDNjZDMTFGOTcwLzFfS0I0LVhNZjhM MGdMS2FmbFNmQzZ5TWJmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArorT31fubb5dXzrckBdiPUuhw8ZcdxuM293m04QDpaIprgf5hqU67Kg+jS3RO 5kQVXqsfvGvpDNJd97zqLMXKYItuRPsd236FRpLO+QYNkyVC92iXTzx2XWcsjnFI OYR33YxWWE1/+MJncm34jMW1M6AKdO3MH+GHG1B1vQCOoFhtTAAMDJB3BOwwZmL6 le6gTZEpvHXWbZUEJ5N4E2FDi9KSss2qMzvlazbnQURV1kfaVvZaZaQUSo6+0mft Jf1Tvt3OuMf7bXlWhe1tZJREcka3dZoPMKS3BlTfSGQnHnxARJpDdJvzSjT5XKD+ R2mPSxERA8iog0d0RwrVxwVi -----END CERTIFICATE-----Generated at Thu Nov 5 09:04:52 2026 by rpki-client