$ rpki-client -vvvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: tHGiRNQ/CY+GQCsfVWZHCVfqF+zBlf04gzaExa1o2n4= Subject key identifier: F9:82:54:AD:19:F9:6E:86:AD:01:71:EC:94:19:B4:C6:22:A8:7C:DB Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: FB Signing time: Tue 13 Oct 2026 06:55:57 +0000 Manifest this update: Tue 13 Oct 2026 06:55:57 +0000 Manifest next update: Tue 20 Oct 2026 06:55:57 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: Vu9b+G6uLSTl9nl82N20Fb2pgxENavoHNRbI1wl5HzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 06:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Oct 13 06:55:57 2026 GMT Not After : Oct 20 06:55:57 2026 GMT Subject: CN=6acdd5fd-86af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:fb:25:2f:87:74:93:9c:af:99:81:b6:60: 58:c3:76:a5:ed:7d:80:90:e0:7c:bf:47:28:1e:7e: 5f:39:08:6d:a9:cd:cd:29:e3:c2:d4:66:3f:d7:e3: e6:80:74:15:71:1d:a7:48:9f:dc:d8:f9:45:2f:51: 09:ec:47:2c:fb:6c:cc:5b:ed:de:ed:96:48:5d:75: 26:eb:2d:06:07:cd:e4:c9:34:12:8b:c0:3b:7c:2a: 10:db:b4:2b:c7:b2:5b:5d:bf:7c:74:84:c0:a6:83: d7:66:68:ba:0a:e8:e5:fa:3f:61:da:0a:b5:e3:f0: 05:c2:78:9f:c0:51:05:dc:0e:7a:07:22:b7:e7:07: 1f:5f:9b:23:9a:69:e6:6c:f3:52:e0:42:00:fa:c0: 8d:59:28:24:d2:72:cb:06:b2:a6:9f:74:38:7c:7a: 61:07:0d:28:0b:d3:f4:e0:db:70:27:16:42:d9:ce: 0c:74:00:76:8a:92:fe:e9:3a:61:4a:37:23:9c:17: 0a:be:a8:41:3b:f2:4b:cc:24:86:21:d7:8b:d2:98: e7:2f:04:39:5e:c8:a4:16:99:45:9e:50:db:26:a7: c5:0c:0b:03:58:98:64:1a:0e:cf:e7:82:03:6c:90: 46:b0:68:e2:0d:46:b3:08:a9:9f:6e:83:e5:5d:97: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:54:AD:19:F9:6E:86:AD:01:71:EC:94:19:B4:C6:22:A8:7C:DB X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:11:cf:78:45:38:c1:f9:aa:e6:be:ef:40:f5:6c:76:bd: be:89:70:bf:33:7c:95:6c:c8:9f:11:71:2d:ef:a4:13:8b:93: 5c:6b:cc:5b:56:d6:ba:39:4f:72:ce:96:4c:ab:03:1a:f9:6c: 00:3a:6c:66:d2:cc:6a:f8:35:ab:21:7a:21:3c:34:9b:68:8f: 4d:ba:d0:3c:22:61:5d:c4:ed:84:42:d7:e7:c2:08:54:f4:33: 08:8d:2c:1d:b7:eb:21:61:d8:73:ca:8f:2b:ee:86:cd:19:b7: 66:bb:48:97:30:31:fb:7b:e7:98:d4:73:20:7d:a2:a6:99:54: fe:3e:78:96:ed:7c:e8:2a:8b:5d:31:ac:65:75:1b:c6:65:f7: a4:49:ee:f2:9d:8e:d3:73:fb:ac:af:0f:a8:3b:62:fb:6b:72: 62:e3:bf:6d:2d:89:98:eb:7e:91:c7:d2:63:3f:73:95:f7:fd: 33:ba:32:82:9d:15:c9:02:f0:e4:69:68:62:97:3b:04:81:ab: fb:af:2e:1d:58:f7:16:77:30:b7:31:f6:3f:ef:ed:15:bf:e7: bb:0c:91:bf:28:e1:20:48:e3:a8:04:54:0d:28:9e:80:1f:76: 8a:5f:63:52:fa:2f:10:b4:9a:ac:77:bc:d9:04:ac:a3:c3:d9: b8:de:e6:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYxMDEzMDY1NTU3WhcNMjYxMDIwMDY1NTU3WjAYMRYwFAYD VQQDEw02YWNkZDVmZC04NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2z7JS+HdJOcr5mBtmBYw3al7X2AkOB8v0coHn5fOQhtqc3NKePC1GY/1+Pm gHQVcR2nSJ/c2PlFL1EJ7Ecs+2zMW+3e7ZZIXXUm6y0GB83kyTQSi8A7fCoQ27Qr x7JbXb98dITApoPXZmi6Cujl+j9h2gq14/AFwnifwFEF3A56ByK35wcfX5sjmmnm bPNS4EIA+sCNWSgk0nLLBrKmn3Q4fHphBw0oC9P04NtwJxZC2c4MdAB2ipL+6Tph SjcjnBcKvqhBO/JLzCSGIdeL0pjnLwQ5XsikFplFnlDbJqfFDAsDWJhkGg7P54ID bJBGsGjiDUazCKmfboPlXZcHAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmCVK0Z +W6GrQFx7JQZtMYiqHzbMB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkAARz3hFOMH5qua+70D1bHa9volwvzN8lWzInxFxLe+kE4uTXGvMW1bWujlP cs6WTKsDGvlsADpsZtLMavg1qyF6ITw0m2iPTbrQPCJhXcTthELX58IIVPQzCI0s HbfrIWHYc8qPK+6GzRm3ZrtIlzAx+3vnmNRzIH2ipplU/j54lu186CqLXTGsZXUb xmX3pEnu8p2O03P7rK8PqDti+2tyYuO/bS2JmOt+kcfSYz9zlff9M7oygp0VyQLw 5GloYpc7BIGr+68uHVj3FncwtzH2P+/tFb/nuwyRvyjhIEjjqARUDSiegB92il9j UvovELSarHe82QSso8PZuN7mZg== -----END CERTIFICATE-----Generated at Thu Oct 15 00:45:23 2026 by rpki-client