$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: 9UuNSsVJjm29TPsXSjlQVj9aHznbhvranwaqYF+rekU= Subject key identifier: 8B:AB:C9:34:70:F4:B3:DB:E4:3C:FD:79:9D:AA:F1:02:3F:89:25:F4 Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: 0137 Signing time: Fri 17 Apr 2026 05:12:05 +0000 Manifest this update: Fri 17 Apr 2026 05:12:04 +0000 Manifest next update: Fri 24 Apr 2026 05:12:04 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: 3jNVa+iNNqzWbV+FOFrHpCWuTxobluyBVEI2QF/noKY=) 2: C37A8D80DC9411F0B18EF655406F56BC.roa (hash: xdvfA779z9auA+6dnwAxD5LtYSpidPPxAN1J+qgnhRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: Apr 17 05:12:04 2026 GMT Not After : Apr 24 05:12:04 2026 GMT Subject: CN=69e1c124-c4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:17:40:bf:84:30:89:10:31:41:bb:bc:fa: 88:9c:e1:16:12:b2:1b:d0:db:a8:be:1f:d9:3c:8b: e8:eb:7b:61:5a:3b:d4:2e:2b:d1:90:92:ca:f1:bf: 5b:0f:6e:98:82:50:2f:00:d4:68:68:f6:e7:8f:aa: bb:f9:a5:aa:83:b8:7a:41:39:4e:48:8d:80:5e:85: 00:93:02:23:a4:0c:de:2e:eb:39:be:42:df:f5:61: c6:ab:8b:34:33:38:38:7b:b1:92:f1:9a:75:a9:1c: ec:54:6f:8d:c0:f6:1c:30:e6:40:c8:18:03:bd:af: 7a:69:92:37:f8:5f:66:1e:f8:21:fe:ce:6f:02:cb: 2e:31:51:a1:ae:c1:a3:79:3c:57:8d:e1:25:ec:a1: d9:5f:3e:7c:11:ae:29:a1:3e:36:e6:b9:48:a3:62: c1:bd:34:26:25:61:fc:1b:e3:a1:4f:1a:d3:d8:ee: b1:9f:9b:1d:a3:04:c2:f2:e1:b2:77:aa:8a:24:67: 6b:0e:e3:4d:67:b6:40:97:7e:97:10:48:72:10:c3: f9:6d:09:6a:89:8e:b5:e8:7c:03:03:cc:ad:54:02: 2f:73:f6:c3:13:99:c3:2a:c4:66:2c:57:de:3e:e2: c5:77:a0:45:96:b3:05:4b:07:97:31:b3:33:b1:f6: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AB:C9:34:70:F4:B3:DB:E4:3C:FD:79:9D:AA:F1:02:3F:89:25:F4 X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:07:91:e0:cb:1c:86:b1:a2:c7:3c:03:da:14:49:a0:b1:00: c5:c7:87:3a:a5:b4:09:d4:5f:3d:af:77:47:87:1b:cf:d1:19: 99:65:44:89:6c:75:f1:4a:2b:f0:7a:e5:8c:6b:cf:c1:e7:3a: bf:96:dc:91:7d:b7:01:d8:76:b2:10:be:3c:2b:b0:b4:bf:9f: 52:29:9c:9c:4e:75:f7:70:96:74:5a:22:37:e5:cd:0b:f6:d9: 70:35:b9:bb:1a:27:9d:fa:5f:4d:ea:be:fa:fc:8e:5e:94:1d: 3c:8f:3b:88:b9:08:9f:e5:db:0b:33:45:b5:ee:b3:99:39:37: e1:3b:2b:c8:a5:1e:e0:27:92:c0:65:52:bb:98:96:e6:a8:de: 88:70:91:97:75:dd:dc:cb:19:c6:2b:a2:0f:b1:b1:25:7c:4a: a0:25:49:f0:78:cd:7f:52:03:b0:d7:7a:93:f0:f0:97:74:0d: 2a:6a:70:6c:fb:54:4a:89:8f:48:c7:0f:00:21:06:62:af:a5: 24:d7:6d:20:3e:df:a0:51:fa:78:54:6a:94:dd:a4:99:79:39: f4:ee:75:49:a9:24:cb:50:48:87:bd:06:c6:00:f0:de:ac:71: 83:0d:95:ec:58:08:6e:77:a4:8a:de:0e:c6:18:d2:64:20:5b: 41:a0:8d:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjYwNDE3MDUxMjA0WhcNMjYwNDI0MDUxMjA0WjAYMRYwFAYD VQQDEw02OWUxYzEyNC1jNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhmcXQL+EMIkQMUG7vPqInOEWErIb0Nuovh/ZPIvo63thWjvULivRkJLK8b9b D26YglAvANRoaPbnj6q7+aWqg7h6QTlOSI2AXoUAkwIjpAzeLus5vkLf9WHGq4s0 Mzg4e7GS8Zp1qRzsVG+NwPYcMOZAyBgDva96aZI3+F9mHvgh/s5vAssuMVGhrsGj eTxXjeEl7KHZXz58Ea4poT425rlIo2LBvTQmJWH8G+OhTxrT2O6xn5sdowTC8uGy d6qKJGdrDuNNZ7ZAl36XEEhyEMP5bQlqiY616HwDA8ytVAIvc/bDE5nDKsRmLFfe PuLFd6BFlrMFSweXMbMzsfYq0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuryTRw 9LPb5Dz9eZ2q8QI/iSX0MB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcgeR4MschrGixzwD2hRJoLEAxceHOqW0CdRfPa93R4cbz9EZmWVEiWx18Uor 8HrljGvPwec6v5bckX23Adh2shC+PCuwtL+fUimcnE5193CWdFoiN+XNC/bZcDW5 uxonnfpfTeq++vyOXpQdPI87iLkIn+XbCzNFte6zmTk34TsryKUe4CeSwGVSu5iW 5qjeiHCRl3Xd3MsZxiuiD7GxJXxKoCVJ8HjNf1IDsNd6k/Dwl3QNKmpwbPtUSomP SMcPACEGYq+lJNdtID7foFH6eFRqlN2kmXk59O51Sakky1BIh70GxgDw3qxxgw2V 7FgIbnekit4OxhjSZCBbQaCNvQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:54 2026 by rpki-client