$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json) Hash identifier: SCDPhdjYTrbg+H06ka9Gj4b1vI9ptL7P68E8hxSjkRM= Subject key identifier: D1:F6:AA:27:4F:D5:6B:43:A1:75:9D:EF:C2:2D:C3:32:B2:38:71:4B Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft Manifest number: 0A4F Signing time: Thu 16 Apr 2026 19:36:00 +0000 Manifest this update: Thu 16 Apr 2026 19:35:59 +0000 Manifest next update: Thu 23 Apr 2026 19:35:59 +0000 Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: FQwK7ygxPdoVbTdhpez2plRBb45WxDq55au7H1WvMXQ=) 2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Validity Not Before: Apr 16 19:35:59 2026 GMT Not After : Apr 23 19:35:59 2026 GMT Subject: CN=69e13a20-3d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:47:53:d7:31:54:d3:e6:6c:c1:d0:41:51: 51:6f:ae:40:66:75:4f:e0:0e:48:22:9e:26:c0:38: a7:21:de:2d:fe:28:b4:37:ff:92:89:2f:c8:af:f4: 39:22:f1:88:c7:14:f7:75:fa:5c:01:f3:09:97:ec: 2c:60:02:4d:bb:8b:a1:0f:15:46:35:38:a6:76:d6: 33:4f:6f:ea:38:00:75:da:15:8d:e4:58:d6:df:5a: 62:51:d7:a0:35:ba:c8:c3:c9:45:81:76:a5:88:ae: c1:3f:72:27:48:18:fb:22:42:38:cf:2a:65:a2:f4: f0:94:21:46:e8:5d:1b:57:3f:e6:8f:49:33:be:ad: f0:63:5a:7c:d7:1b:34:81:a0:54:44:db:23:c9:53: 49:07:b4:fb:91:5f:b8:88:6c:04:09:a7:7d:dd:30: 1d:ba:a0:97:16:0a:12:36:ff:97:f4:ae:c5:1c:b2: 5e:ad:f8:95:24:1a:62:26:c3:4d:a2:09:79:99:cc: cf:fd:db:c2:30:15:d3:64:b8:eb:25:c4:89:69:09: 70:18:fe:21:b0:42:a9:16:6a:2e:54:94:aa:67:5e: 24:fe:24:2c:8d:1f:29:da:e0:4a:5b:30:65:e5:7d: ce:ef:9c:d0:69:07:b2:8f:cb:e8:db:ff:92:79:11: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:AA:27:4F:D5:6B:43:A1:75:9D:EF:C2:2D:C3:32:B2:38:71:4B X509v3 Authority Key Identifier: keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0b:a6:c1:63:12:35:25:dd:82:7b:b7:d7:c8:e9:d1:ac:c2: b8:25:72:31:42:db:9f:8f:b0:66:04:0e:a4:5d:82:ef:6b:22: f1:a6:b5:9f:a9:3b:9f:19:db:19:e2:d1:ad:9b:84:81:02:de: 6f:73:a5:59:c9:b9:84:15:2b:79:34:5e:5e:26:e0:d5:bb:c1: cf:98:e8:5c:90:42:f9:9d:87:c4:46:8a:37:cd:0d:af:2f:23: f3:4c:17:7c:05:c1:73:be:98:24:68:b5:75:fd:69:e3:aa:54: f0:11:57:c3:27:e4:23:7a:82:36:cb:24:03:7b:cd:7a:ef:ac: 01:33:31:c3:53:86:23:20:92:e4:ba:08:f9:83:e0:80:b5:47: a9:da:20:61:12:2a:74:a7:05:31:0d:8a:1d:e4:d1:fc:04:ff: f5:b8:9c:91:bd:5f:1d:74:b7:c2:04:6d:61:66:02:ba:6b:29: 42:0f:8a:df:10:fb:3e:61:3f:48:b9:fb:a0:49:51:81:f5:b6: 95:3d:36:77:28:f8:1a:eb:6b:6e:2e:cd:3e:d7:3b:ea:ff:59: d1:f3:49:14:75:a5:29:4b:6b:2b:d6:e3:c0:4c:72:ee:df:81: c9:0e:1d:f6:67:51:23:d7:b2:71:9b:2e:da:6c:b0:ba:8f:16: e7:b0:7c:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyNTIxMTAvBgNVBAUTKDI4RjE4RUM3NDlFQTkxQjVBMzI5OTc0OUYyQUJFMjc4 OEExMEM2OTEwHhcNMjYwNDE2MTkzNTU5WhcNMjYwNDIzMTkzNTU5WjAYMRYwFAYD VQQDEw02OWUxM2EyMC0zZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUZHU9cxVNPmbMHQQVFRb65AZnVP4A5IIp4mwDinId4t/ii0N/+SiS/Ir/Q5 IvGIxxT3dfpcAfMJl+wsYAJNu4uhDxVGNTimdtYzT2/qOAB12hWN5FjW31piUdeg NbrIw8lFgXaliK7BP3InSBj7IkI4zyplovTwlCFG6F0bVz/mj0kzvq3wY1p81xs0 gaBURNsjyVNJB7T7kV+4iGwECad93TAduqCXFgoSNv+X9K7FHLJerfiVJBpiJsNN ogl5mczP/dvCMBXTZLjrJcSJaQlwGP4hsEKpFmouVJSqZ14k/iQsjR8p2uBKWzBl 5X3O75zQaQeyj8vo2/+SeREwrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNH2qidP 1WtDoXWd78ItwzKyOHFLMB8GA1UdIwQYMBaAFCjxjsdJ6pG1oymXSfKr4niKEMaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI1Mi9GMDgxNzE2ODg2 REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWtiV2pLWmRKOHF2aWVJb1F4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQR094MG5xa2JXaktaZEo4cXZpZUlvUXhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTI1Mi9GMDgxNzE2ODg2REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWti V2pLWmRKOHF2aWVJb1F4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZgumwWMSNSXdgnu318jp0azCuCVyMULbn4+wZgQOpF2C72si8aa1n6k7nxnb GeLRrZuEgQLeb3OlWcm5hBUreTReXibg1bvBz5joXJBC+Z2HxEaKN80Nry8j80wX fAXBc76YJGi1df1p46pU8BFXwyfkI3qCNsskA3vNeu+sATMxw1OGIyCS5LoI+YPg gLVHqdogYRIqdKcFMQ2KHeTR/AT/9bickb1fHXS3wgRtYWYCumspQg+K3xD7PmE/ SLn7oElRgfW2lT02dyj4Gutrbi7NPtc76v9Z0fNJFHWlKUtrK9bjwExy7t+ByQ4d 9mdRI9eycZsu2mywuo8W57B8Qg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:02 2026 by rpki-client