$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: I+faWu2sSaEyKyP/WLKIaU/KGqxdOhiy06x8K4Bhu6w= Subject key identifier: BE:69:E6:4E:51:B3:D1:AD:46:84:9F:65:42:86:0A:71:A6:03:5F:21 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 88 Signing time: Sun 01 Mar 2026 08:56:30 +0000 Manifest this update: Sun 01 Mar 2026 08:56:29 +0000 Manifest next update: Sun 08 Mar 2026 08:56:29 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: QdUBhzjiCY2KFo6g64dg2ptOjm6/MtbmH83cg/O5LRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Mar 1 08:56:29 2026 GMT Not After : Mar 8 08:56:29 2026 GMT Subject: CN=69a3ff3e-2bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:3c:5e:7a:4a:05:32:a6:a4:84:e0:98:47: 9b:fe:b2:49:cc:56:51:b8:f4:d5:b7:ad:06:8a:62: ba:97:c1:97:f5:8a:e7:48:94:dd:a7:5f:e2:06:3c: 3c:65:4f:9c:39:27:b5:07:f1:9b:db:c4:74:40:95: 10:cb:5f:be:b3:f0:e5:97:1a:25:4c:7e:32:4a:00: 71:2f:c5:00:eb:1a:d5:f1:ec:ba:8d:3c:7f:95:30: 3d:46:a2:4d:7e:34:91:b5:5b:53:63:a0:18:59:e3: 23:f6:c1:e7:1b:12:08:53:98:64:a8:25:d4:2f:d2: 9a:2c:eb:1c:70:da:62:fa:8a:8c:90:6b:e0:73:3a: 15:32:50:bb:30:6c:0c:77:9e:51:02:ae:92:b3:fa: 93:43:d4:d1:36:ec:17:9f:f6:17:09:f4:25:05:84: e2:5f:d8:b4:16:94:87:28:7e:89:48:be:6a:49:45: 6a:dc:30:b6:d1:a3:1e:b1:8d:18:45:a3:77:f4:d4: e2:ae:8b:a1:b4:29:72:ca:b9:2f:2e:0f:4a:d5:cd: fc:28:c9:a4:95:7f:ac:5f:0d:f5:ce:21:37:cc:9e: d9:cb:aa:8a:b4:e3:91:57:63:bc:87:19:e9:5a:b3: 70:d4:33:9d:cb:e8:5e:6b:18:39:9d:4d:00:71:7b: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:E6:4E:51:B3:D1:AD:46:84:9F:65:42:86:0A:71:A6:03:5F:21 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:32:64:ef:c3:dc:bd:6c:15:7d:0a:7c:6e:4c:a4:2a:e1:a4: 20:e3:05:5b:c9:a2:af:a2:b0:82:b7:d0:b5:28:3d:23:eb:24: 4a:cd:bc:d1:12:b5:a9:ca:96:ae:e0:4f:a6:40:48:38:d1:2e: 2c:6a:42:a2:3b:0f:f1:41:d8:11:52:18:40:6f:70:44:ae:99: 0b:83:ac:e0:70:98:ff:3d:f7:2b:f7:aa:21:a8:b3:c3:a6:1a: 69:a7:f1:b6:94:c0:97:67:ff:21:35:be:3e:02:00:57:31:c7: 2f:54:32:e2:9b:ad:93:be:2f:b5:f4:f4:b0:3b:b7:ac:a2:e8: ab:88:ce:12:8e:eb:f2:61:53:65:b3:71:8b:d8:5d:8e:ea:09: 28:9d:b1:17:07:8e:17:ab:72:c8:7c:41:a3:30:ff:de:ae:16: cc:d8:85:fd:f3:8e:99:c4:54:40:07:61:4a:e5:84:0f:13:c3: 5b:e1:7a:cc:f8:0f:9b:be:76:ac:8d:14:02:a5:34:a2:8d:36: 47:2b:1d:57:3a:cb:56:3c:f8:c1:9e:11:37:a5:b0:cf:c5:e1: f3:94:a5:4c:5a:f0:9b:41:e5:7a:06:8d:30:32:4c:00:a6:3b: fe:d4:da:48:d3:9f:d7:47:a0:1e:36:ab:97:08:71:72:06:78: b6:45:9c:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYwMzAxMDg1NjI5WhcNMjYwMzA4MDg1NjI5WjAYMRYwFAYD VQQDEw02OWEzZmYzZS0yYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOI8XnpKBTKmpITgmEeb/rJJzFZRuPTVt60GimK6l8GX9YrnSJTdp1/iBjw8 ZU+cOSe1B/Gb28R0QJUQy1++s/DllxolTH4ySgBxL8UA6xrV8ey6jTx/lTA9RqJN fjSRtVtTY6AYWeMj9sHnGxIIU5hkqCXUL9KaLOsccNpi+oqMkGvgczoVMlC7MGwM d55RAq6Ss/qTQ9TRNuwXn/YXCfQlBYTiX9i0FpSHKH6JSL5qSUVq3DC20aMesY0Y RaN39NTirouhtClyyrkvLg9K1c38KMmklX+sXw31ziE3zJ7Zy6qKtOORV2O8hxnp WrNw1DOdy+heaxg5nU0AcXvJKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5p5k5R s9GtRoSfZUKGCnGmA18hMB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmTJk78PcvWwVfQp8bkykKuGkIOMFW8mir6KwgrfQtSg9I+skSs280RK1qcqW ruBPpkBIONEuLGpCojsP8UHYEVIYQG9wRK6ZC4Os4HCY/z33K/eqIaizw6Yaaafx tpTAl2f/ITW+PgIAVzHHL1Qy4putk74vtfT0sDu3rKLoq4jOEo7r8mFTZbNxi9hd juoJKJ2xFweOF6tyyHxBozD/3q4WzNiF/fOOmcRUQAdhSuWEDxPDW+F6zPgPm752 rI0UAqU0oo02RysdVzrLVjz4wZ4RN6Wwz8Xh85SlTFrwm0HlegaNMDJMAKY7/tTa SNOf10egHjarlwhxcgZ4tkWcpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 22:48:33 2026 by rpki-client