$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: FVhfCjvZZuPQYl5eNLxZ1RF7d3dfvJ2wmQwn5AGtN3k= Subject key identifier: 15:0A:38:FE:9A:6C:78:E8:C1:60:A3:3D:A9:33:AE:C0:84:A4:28:9A Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: D2 Signing time: Mon 27 Jul 2026 08:51:31 +0000 Manifest this update: Mon 27 Jul 2026 08:51:30 +0000 Manifest next update: Mon 03 Aug 2026 08:51:30 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: ad5Ru2MEpqCwOuGrZBxjW8rZbDXx4fT7ll8E/rE5kHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Jul 27 08:51:30 2026 GMT Not After : Aug 3 08:51:30 2026 GMT Subject: CN=6a671c12-71c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:66:77:27:84:99:2e:78:ec:a9:76:95:2f: 86:ed:0c:47:7a:71:af:a2:59:81:ca:de:fd:8a:ab: a6:2c:e3:30:4e:e8:7f:1b:2a:49:56:07:77:0a:19: 1b:cc:0d:f6:df:b6:2c:ef:b7:f5:a6:d3:cd:de:60: 53:f7:90:87:4f:07:4a:e4:fe:e8:d4:61:4c:d4:d2: 2e:62:51:cb:95:ec:3d:49:27:1e:f2:ac:81:a5:f9: 1b:a8:bf:ea:5f:68:0a:27:d1:78:21:12:0e:17:22: 1f:17:45:91:b4:ba:21:d5:5d:f2:a9:33:fd:a8:d2: 0c:93:ea:8f:eb:1e:23:18:02:10:64:3f:ab:d4:61: f8:3b:0b:5f:aa:45:8e:3a:27:4f:8f:e8:7c:b6:37: d8:de:8e:28:70:7d:95:93:9a:75:89:32:0d:c0:fa: 02:63:9d:5f:31:d8:37:b5:11:24:3f:b3:75:6a:0d: 93:64:a3:72:14:cb:ef:7d:c4:b7:d1:37:32:13:52: 94:6a:2a:64:26:93:69:b2:76:25:2f:df:47:d0:41: be:57:36:82:46:ca:a9:52:d2:45:0c:51:61:2d:47: 49:f3:f1:21:54:91:16:25:d0:55:d2:55:d0:f3:7a: b2:3e:98:63:78:7c:00:46:a5:01:17:28:ae:33:e1: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:38:FE:9A:6C:78:E8:C1:60:A3:3D:A9:33:AE:C0:84:A4:28:9A X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a0:da:90:28:d0:b2:cf:1d:a4:af:ec:37:aa:b0:ad:a8:be: 9d:04:8b:d2:ce:a7:96:78:96:37:77:b2:eb:6f:dd:8e:96:72: cb:94:a2:05:c8:3c:07:44:cc:5d:c4:16:30:e7:a6:d3:1e:83: 1e:3a:59:66:19:bf:40:d7:e9:53:6e:09:38:52:3e:69:d1:8b: d8:5b:d7:cc:bd:02:56:76:5c:78:cb:a3:1e:9c:c5:29:e6:0d: bf:b6:dc:b0:59:14:60:13:94:73:f8:83:c7:50:11:1d:64:f5: 58:82:75:29:00:f4:95:53:a8:fb:69:5e:b9:2b:a1:fb:92:38: 0e:1a:43:fe:4e:20:56:dc:ad:4b:8a:d8:9b:4d:4f:aa:14:09: 4c:30:59:27:6c:ec:14:c1:35:b1:a1:37:9e:fd:a1:35:f7:62: 69:fa:52:a8:46:90:38:b8:84:37:8d:72:53:49:42:3c:0e:0d: 54:04:cf:b4:50:8b:54:3c:04:1f:df:44:40:50:d5:8a:56:9d: 9b:31:d6:17:e1:7f:1b:3b:c5:6d:b6:ae:1b:68:ac:1b:75:e6: 3c:02:b5:92:d1:14:ad:64:c4:09:4b:c8:89:b5:03:f4:b9:2a: 3f:fa:69:c3:ae:7d:3d:80:6f:7b:34:b0:55:d4:13:4a:cd:9d: fe:ce:67:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYwNzI3MDg1MTMwWhcNMjYwODAzMDg1MTMwWjAYMRYwFAYD VQQDEw02YTY3MWMxMi03MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tlmdyeEmS547Kl2lS+G7QxHenGvolmByt79iqumLOMwTuh/GypJVgd3Chkb zA3237Ys77f1ptPN3mBT95CHTwdK5P7o1GFM1NIuYlHLlew9SSce8qyBpfkbqL/q X2gKJ9F4IRIOFyIfF0WRtLoh1V3yqTP9qNIMk+qP6x4jGAIQZD+r1GH4OwtfqkWO OidPj+h8tjfY3o4ocH2Vk5p1iTINwPoCY51fMdg3tREkP7N1ag2TZKNyFMvvfcS3 0TcyE1KUaipkJpNpsnYlL99H0EG+VzaCRsqpUtJFDFFhLUdJ8/EhVJEWJdBV0lXQ 83qyPphjeHwARqUBFyiuM+GRYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUKOP6a bHjowWCjPakzrsCEpCiaMB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABKDakCjQss8dpK/sN6qwrai+nQSL0s6nlniWN3ey62/djpZyy5SiBcg8B0TM XcQWMOem0x6DHjpZZhm/QNfpU24JOFI+adGL2FvXzL0CVnZceMujHpzFKeYNv7bc sFkUYBOUc/iDx1ARHWT1WIJ1KQD0lVOo+2leuSuh+5I4DhpD/k4gVtytS4rYm01P qhQJTDBZJ2zsFME1saE3nv2hNfdiafpSqEaQOLiEN41yU0lCPA4NVATPtFCLVDwE H99EQFDViladmzHWF+F/GzvFbbauG2isG3XmPAK1ktEUrWTECUvIibUD9LkqP/pp w659PYBvezSwVdQTSs2d/s5ngQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:45 2026 by rpki-client