$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: /JmX5aOnu89gJpYegc3YXIMxo+LmP1tHbIL+gDMuwmw= Subject key identifier: 17:3A:8C:41:94:3D:26:F9:62:C7:C6:51:C8:E8:3A:F5:00:68:C0:F6 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: A0 Signing time: Fri 17 Apr 2026 07:03:25 +0000 Manifest this update: Fri 17 Apr 2026 07:03:24 +0000 Manifest next update: Fri 24 Apr 2026 07:03:24 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: 5kGV0tCF3dG0n6sJImwT8UYnQzjvAQbasCcmEkCN200=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Apr 17 07:03:24 2026 GMT Not After : Apr 24 07:03:24 2026 GMT Subject: CN=69e1db3c-06b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:22:43:25:02:45:7c:8d:09:e6:0d:80:8e: 18:25:96:48:ea:b9:9d:ef:e5:d1:50:60:72:db:88: 8e:bb:5d:76:d9:9f:10:b8:71:7a:c5:0c:0f:49:e7: 97:ef:61:5c:a6:1b:16:84:34:a3:53:17:52:3d:2f: d0:59:cd:75:e6:58:6c:13:e9:bb:9a:a5:bc:c6:fe: a3:f0:c7:64:12:86:df:b8:70:df:52:df:ab:81:60: b0:0e:38:78:57:e3:32:00:08:cc:fb:c9:be:aa:28: 48:3a:7d:28:a9:1a:6a:4e:36:a2:6d:93:40:c7:70: fb:f8:27:4d:6b:f3:f5:39:1a:b8:e3:7e:93:c4:4c: 7a:c4:30:fa:33:d1:bb:11:4d:c7:0f:d3:61:18:80: 1f:7f:e1:03:a6:38:12:e2:4b:90:3f:0d:15:33:6b: 4a:03:36:08:9a:89:f1:e7:c8:38:2a:58:ce:fb:3f: e8:f9:29:e3:46:b7:32:f6:92:dc:00:ef:04:90:68: 55:d9:06:a2:6c:56:f0:a6:cb:e5:8b:7f:46:e5:94: 9c:2f:65:13:bb:2d:d8:a9:f9:92:fe:d4:1f:19:0c: a2:8c:41:d6:07:02:92:a3:b3:f6:bd:65:c4:ef:fa: f2:20:b9:da:e5:e6:5f:3d:c9:68:3c:90:36:65:eb: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3A:8C:41:94:3D:26:F9:62:C7:C6:51:C8:E8:3A:F5:00:68:C0:F6 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d0:3f:4e:3c:c8:cd:b1:a9:e7:3f:9f:6b:7d:ff:4c:53:54: e0:c5:e9:f9:6b:5b:e2:a4:e8:b8:2c:e5:2b:60:2b:d4:5d:10: 72:47:5f:4d:7f:2a:e3:12:c1:f5:45:b6:1c:a4:d7:eb:2a:aa: b1:98:49:76:d4:14:96:70:14:fb:41:3a:85:cf:45:1b:f1:89: 45:b0:7a:5e:57:1f:f1:12:b1:e1:7d:f8:b4:57:3e:fc:29:fc: f3:56:91:b4:e7:e7:e5:ce:e7:29:2a:c5:92:63:c6:01:97:9c: 33:53:04:b7:73:81:93:57:e6:5f:bb:35:47:91:71:d0:55:74: ec:6e:9b:0c:e5:db:41:ae:51:7c:49:e7:68:e4:ef:9e:d1:ee: ec:5f:ec:cb:69:19:44:87:15:7a:83:93:a8:0b:17:f5:f5:54: 0d:96:80:bd:6e:ee:e2:ea:e1:9b:cc:9b:57:98:a7:d8:01:36: b6:ab:55:9c:bb:30:e8:07:67:03:c7:2f:73:05:a1:e5:d8:03: 96:d5:68:50:7f:6d:0e:bd:84:7e:d6:30:bc:b7:d7:f0:87:a4: 93:86:a9:88:ba:ed:3d:79:57:f2:7a:e2:a2:47:58:83:b5:25: e8:47:0c:e4:56:95:4c:16:47:5e:d9:3b:20:a2:cb:6f:06:e2: c5:cf:01:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYwNDE3MDcwMzI0WhcNMjYwNDI0MDcwMzI0WjAYMRYwFAYD VQQDEw02OWUxZGIzYy0wNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pEiQyUCRXyNCeYNgI4YJZZI6rmd7+XRUGBy24iOu1122Z8QuHF6xQwPSeeX 72FcphsWhDSjUxdSPS/QWc115lhsE+m7mqW8xv6j8MdkEobfuHDfUt+rgWCwDjh4 V+MyAAjM+8m+qihIOn0oqRpqTjaibZNAx3D7+CdNa/P1ORq4436TxEx6xDD6M9G7 EU3HD9NhGIAff+EDpjgS4kuQPw0VM2tKAzYImonx58g4KljO+z/o+SnjRrcy9pLc AO8EkGhV2QaibFbwpsvli39G5ZScL2UTuy3YqfmS/tQfGQyijEHWBwKSo7P2vWXE 7/ryILna5eZfPcloPJA2ZevAQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBc6jEGU PSb5YsfGUcjoOvUAaMD2MB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvtA/TjzIzbGp5z+fa33/TFNU4MXp+Wtb4qTouCzlK2Ar1F0QckdfTX8q4xLB 9UW2HKTX6yqqsZhJdtQUlnAU+0E6hc9FG/GJRbB6Xlcf8RKx4X34tFc+/Cn881aR tOfn5c7nKSrFkmPGAZecM1MEt3OBk1fmX7s1R5Fx0FV07G6bDOXbQa5RfEnnaOTv ntHu7F/sy2kZRIcVeoOTqAsX9fVUDZaAvW7u4urhm8ybV5in2AE2tqtVnLsw6Adn A8cvcwWh5dgDltVoUH9tDr2EftYwvLfX8Iekk4apiLrtPXlX8nriokdYg7Ul6EcM 5FaVTBZHXtk7IKLLbwbixc8BLw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:05:26 2026 by rpki-client