$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: opb3uT+umOXAIWAWuiRjnScNUzioZMC8Ebv5HBEFSFo= Subject key identifier: 52:6D:4A:0B:48:8F:A1:52:DD:3D:1D:E0:B0:5A:9B:53:B4:B4:5E:C4 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0AD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0ACA Signing time: Thu 16 Apr 2026 19:21:57 +0000 Manifest this update: Thu 16 Apr 2026 19:21:56 +0000 Manifest next update: Thu 23 Apr 2026 19:21:56 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: PUu5dcnM9BFr/OVodyJ0zJUFJYGxqLygQv17yqpbwIc=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: AkREMdUY9iw5osiiQhe7w1xnANjcqb+Bqi344RCqSk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2771 (0xad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Apr 16 19:21:56 2026 GMT Not After : Apr 23 19:21:56 2026 GMT Subject: CN=69e136d5-06f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:fc:e2:0a:40:35:9b:35:22:ea:f8:ed:82: 82:2f:4c:ef:f4:8d:4c:8e:f6:26:fc:29:f4:cf:3a: 7f:6c:54:0a:7e:33:c2:82:a1:51:3a:94:b5:aa:ab: 45:46:d5:fe:91:5a:fd:75:b9:b4:38:31:ee:8a:d4: f0:b6:27:9e:90:a3:0e:8a:99:4c:74:5c:ec:4b:6e: fb:26:ec:82:d2:f7:27:ce:79:c4:c3:c8:7f:bc:14: 70:cf:b5:05:62:d4:0c:30:72:de:81:5c:80:84:87: c5:85:2c:84:85:97:9a:c5:41:ff:a3:e5:3c:a5:96: be:64:1e:03:ca:23:99:19:f2:e3:95:3e:08:c1:34: 34:db:41:33:91:0d:3e:76:4e:e3:ee:42:f3:e7:d6: ce:0e:8a:76:e8:ff:66:f7:b7:21:65:26:fe:71:90: 7e:00:5b:a4:1d:7e:97:29:61:6c:14:d4:9a:c5:ab: 39:94:68:7c:47:55:9f:95:46:d3:c7:35:e2:06:9b: 81:ee:fd:7e:dd:0f:0e:53:ac:0f:dc:5c:96:19:f4: d3:19:e5:48:ea:92:de:be:7b:48:b7:ff:4d:90:64: 3d:3b:84:80:b0:c7:92:ea:27:76:f1:63:a5:08:6a: 21:70:6d:d2:8c:7f:dd:51:ae:b2:6a:3c:35:c8:f3: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:4A:0B:48:8F:A1:52:DD:3D:1D:E0:B0:5A:9B:53:B4:B4:5E:C4 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a8:f1:e3:3e:05:a8:cb:fb:96:50:92:4b:1a:fa:88:be:cb: 0a:72:52:86:ae:c3:c2:c8:51:16:d9:3d:ac:e2:2f:0e:03:26: 64:ee:41:41:5d:22:6e:0b:1f:3c:9f:af:f9:58:4a:86:9b:0c: 79:a8:ac:45:72:ce:16:c2:4c:77:0e:59:28:70:78:c6:23:98: 16:5a:f7:cb:2b:ab:44:3a:aa:31:2b:8f:a4:23:16:87:4a:7c: e6:41:15:d6:f3:3f:29:dc:8f:f4:79:4e:0b:69:16:6d:d6:12: 44:4b:34:80:22:b3:fe:75:80:35:d3:b4:f0:74:11:52:3c:97: f9:59:86:13:d6:f5:60:29:d7:70:cd:e9:b0:c9:81:a0:cf:f4: 21:84:ff:81:0b:6b:59:ff:66:b6:1b:56:54:30:8a:1d:c7:c3: 3b:e2:3a:fd:33:74:ff:fe:ff:3d:8d:f1:f7:0f:d8:49:c1:d1: 03:06:ef:e7:dd:f9:0d:ac:ea:56:a6:46:01:ac:a4:0b:a6:14: 26:cf:d6:7d:bb:e8:32:31:f4:0c:8c:a5:b8:68:e2:11:06:93: bd:01:78:87:dc:be:ac:99:12:c4:59:bb:e1:1c:6e:15:9a:41: e0:a9:3e:af:06:7e:b4:93:99:a6:36:47:a9:bd:ec:40:25:ef: 11:28:2b:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjYwNDE2MTkyMTU2WhcNMjYwNDIzMTkyMTU2WjAYMRYwFAYD VQQDEw02OWUxMzZkNS0wNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3/84gpANZs1Iur47YKCL0zv9I1MjvYm/Cn0zzp/bFQKfjPCgqFROpS1qqtF RtX+kVr9dbm0ODHuitTwtieekKMOiplMdFzsS277JuyC0vcnznnEw8h/vBRwz7UF YtQMMHLegVyAhIfFhSyEhZeaxUH/o+U8pZa+ZB4DyiOZGfLjlT4IwTQ020EzkQ0+ dk7j7kLz59bODop26P9m97chZSb+cZB+AFukHX6XKWFsFNSaxas5lGh8R1WflUbT xzXiBpuB7v1+3Q8OU6wP3FyWGfTTGeVI6pLevntIt/9NkGQ9O4SAsMeS6id28WOl CGohcG3SjH/dUa6yajw1yPPgBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJtSgtI j6FS3T0d4LBam1O0tF7EMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM6jx4z4FqMv7llCSSxr6iL7LCnJShq7DwshRFtk9rOIvDgMmZO5BQV0ibgsf PJ+v+VhKhpsMeaisRXLOFsJMdw5ZKHB4xiOYFlr3yyurRDqqMSuPpCMWh0p85kEV 1vM/KdyP9HlOC2kWbdYSREs0gCKz/nWANdO08HQRUjyX+VmGE9b1YCnXcM3psMmB oM/0IYT/gQtrWf9mthtWVDCKHcfDO+I6/TN0//7/PY3x9w/YScHRAwbv5935Dazq VqZGAaykC6YUJs/WfbvoMjH0DIyluGjiEQaTvQF4h9y+rJkSxFm74RxuFZpB4Kk+ rwZ+tJOZpjZHqb3sQCXvESgr2A== -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:58 2026 by rpki-client