$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: g9pAMVCLlB9YJ77NKCMKk8+WC5PIq9kNpFIiVx+keNQ= Subject key identifier: AA:A8:AD:C8:B3:53:03:40:00:45:66:2F:98:C1:17:57:FB:51:D1:25 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D73 Signing time: Thu 16 Apr 2026 17:53:23 +0000 Manifest this update: Thu 16 Apr 2026 17:53:23 +0000 Manifest next update: Thu 23 Apr 2026 17:53:23 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: qKSL8m7yCOJGNeV9fCo38HbXClnTfopvONZNGopf2g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Apr 16 17:53:23 2026 GMT Not After : Apr 23 17:53:23 2026 GMT Subject: CN=69e12213-0b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:22:e7:be:64:c3:11:91:1c:19:21:3e:cc: 65:02:57:eb:60:61:0e:51:6d:27:fb:b1:e3:16:3a: 51:ff:36:7d:10:71:3d:cb:c5:ad:ee:4e:27:97:57: de:6b:d4:eb:96:18:35:9e:2f:8b:3b:76:af:39:1f: f4:2d:c5:e6:98:a4:ab:45:ec:e0:47:f9:d9:07:f5: 92:3a:b3:32:fa:49:c5:ae:bd:bd:ed:af:61:65:05: 47:a2:d1:1e:9b:65:48:4a:24:49:d7:50:83:72:fa: 98:8a:04:78:f3:49:37:e9:be:cf:a2:1f:5d:8f:2e: 7b:1a:55:bf:9a:d4:ca:23:d7:d7:ab:51:11:4c:0d: a3:50:ba:59:b1:dd:60:ab:05:b0:60:42:21:f9:98: f0:d8:6d:78:2a:d8:00:a0:cc:dd:69:63:0d:7d:22: a4:78:dd:a1:e3:6c:09:65:fa:89:8d:73:4d:43:a7: 38:8d:e5:2e:e3:a0:7f:8e:ab:1c:c8:5f:79:98:5d: 05:95:aa:43:a5:66:c9:45:0a:36:7a:a6:af:7f:21: 71:94:9a:95:77:5a:0d:8c:6f:fc:50:a1:35:c7:1f: b9:0b:84:e2:64:a5:fc:b9:be:c4:e0:f4:8f:52:b1: e9:b4:cb:f1:c0:d3:05:38:cd:47:f4:59:48:d4:37: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:AD:C8:B3:53:03:40:00:45:66:2F:98:C1:17:57:FB:51:D1:25 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fb:70:1c:d9:9c:e0:13:7e:35:29:3d:20:03:4a:9d:ac:a2: 17:69:68:73:c3:d8:c8:92:6d:03:06:97:53:4e:44:94:47:d9: 2c:0d:ee:e9:91:d6:ba:37:fc:15:2e:9b:f3:6a:ac:29:56:2c: 08:00:83:25:52:1a:10:fc:a5:aa:8f:36:94:bb:7a:8e:30:aa: 8f:ef:75:93:91:3b:55:31:3a:f8:15:66:bf:a8:11:b0:63:a8: 0b:e0:a9:2c:d5:db:1d:7c:95:34:5f:25:a5:7a:52:1d:a8:ac: 89:e3:85:e6:df:1b:1c:46:57:0b:89:63:d3:1d:f1:3a:3f:d1: ca:ec:53:1a:63:97:3d:04:8a:9f:d4:27:cd:4c:3b:f8:09:7b: a7:11:8e:c2:44:08:bc:e6:5a:82:54:37:63:12:90:cd:8a:c0: 7b:84:f0:91:19:33:85:3c:5d:0d:00:9a:22:58:54:ac:f4:05: 71:5d:58:d8:16:2e:79:46:9f:db:5a:4e:35:a7:c4:b1:99:00: 7f:6f:9d:56:5d:6c:37:c0:a1:76:b1:0f:ac:c7:56:53:95:88: cc:4f:9b:86:cd:70:46:ee:9f:77:94:51:fd:65:00:58:d7:85: 42:ee:52:ef:90:41:72:be:20:b8:69:0d:d9:5e:22:6e:6b:7f: 33:6a:8f:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjYwNDE2MTc1MzIzWhcNMjYwNDIzMTc1MzIzWjAYMRYwFAYD VQQDEw02OWUxMjIxMy0wYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5Ii575kwxGRHBkhPsxlAlfrYGEOUW0n+7HjFjpR/zZ9EHE9y8Wt7k4nl1fe a9Trlhg1ni+LO3avOR/0LcXmmKSrRezgR/nZB/WSOrMy+knFrr297a9hZQVHotEe m2VISiRJ11CDcvqYigR480k36b7Poh9djy57GlW/mtTKI9fXq1ERTA2jULpZsd1g qwWwYEIh+Zjw2G14KtgAoMzdaWMNfSKkeN2h42wJZfqJjXNNQ6c4jeUu46B/jqsc yF95mF0FlapDpWbJRQo2eqavfyFxlJqVd1oNjG/8UKE1xx+5C4TiZKX8ub7E4PSP UrHptMvxwNMFOM1H9FlI1DdvMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqorciz UwNAAEVmL5jBF1f7UdElMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdPtwHNmc4BN+NSk9IANKnayiF2loc8PYyJJtAwaXU05ElEfZLA3u6ZHWujf8 FS6b82qsKVYsCACDJVIaEPylqo82lLt6jjCqj+91k5E7VTE6+BVmv6gRsGOoC+Cp LNXbHXyVNF8lpXpSHaisieOF5t8bHEZXC4lj0x3xOj/RyuxTGmOXPQSKn9QnzUw7 +Al7pxGOwkQIvOZaglQ3YxKQzYrAe4TwkRkzhTxdDQCaIlhUrPQFcV1Y2BYueUaf 21pONafEsZkAf2+dVl1sN8ChdrEPrMdWU5WIzE+bhs1wRu6fd5RR/WUAWNeFQu5S 75BBcr4guGkN2V4ibmt/M2qPcw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:24 2026 by rpki-client