$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: WipKXUmhN/ug8kkdyCkxclM0RHwHOJ+zNFzsUD3OYo0= Subject key identifier: 83:8A:8F:0F:F3:D4:41:4E:0F:A6:D9:32:A7:5D:DB:26:07:57:56:57 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 9A Signing time: Sun 05 Apr 2026 06:47:14 +0000 Manifest this update: Sun 05 Apr 2026 06:47:14 +0000 Manifest next update: Sun 12 Apr 2026 06:47:14 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: PGX2smT4QoEUpylJboJqzLCvGJDLnaLElcASr2sE2cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Apr 5 06:47:14 2026 GMT Not After : Apr 12 06:47:14 2026 GMT Subject: CN=69d20572-2685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:3c:48:0d:8c:19:2b:ea:7a:15:7d:fc:6c: c2:9b:a5:60:31:f3:af:bb:ac:ad:b0:06:16:5b:27: 7c:b5:f4:dc:31:42:55:31:70:9b:c6:53:22:b5:a6: 38:07:f6:cb:0a:36:05:7d:9e:3f:c1:c0:85:78:52: 99:7f:53:f4:c1:8d:31:77:98:e6:e6:d9:ad:8e:13: c3:7d:83:bc:a3:19:92:1e:18:2e:ec:7e:a2:f4:11: dc:6d:93:7f:a9:29:ad:02:51:f0:1e:b0:ec:b0:eb: be:36:70:9c:2c:79:5d:03:8c:03:1a:7b:28:42:58: 8d:71:ef:45:e3:17:45:03:67:78:21:48:cd:23:d2: b7:02:18:2d:80:f9:4c:cf:1d:16:de:79:2d:1f:ee: c3:8e:b8:d5:9f:00:6a:ed:e4:c6:77:05:f1:d2:3b: bb:07:b8:97:f2:5f:f5:9a:f2:09:9f:38:88:e6:93: 4a:de:a0:53:ee:bd:46:31:33:76:ac:b4:86:c3:b4: ec:35:a3:52:db:ba:81:38:e4:79:af:c3:3a:7c:0b: a6:5b:fe:33:3f:5a:fa:b9:b6:f0:79:5b:96:1b:ed: e5:ff:ec:18:4e:14:d6:f0:db:94:2d:47:6d:4b:2a: 1d:89:94:41:99:5b:0c:85:12:b3:5b:36:43:bb:06: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8A:8F:0F:F3:D4:41:4E:0F:A6:D9:32:A7:5D:DB:26:07:57:56:57 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e7:b6:a9:0f:af:85:dc:1e:8c:ec:c6:eb:49:77:09:69:eb: 13:6c:e4:19:fd:b3:64:66:50:2c:89:ba:a8:a2:d3:bd:b5:59: 35:d3:17:fc:97:e2:1a:e9:3e:55:95:3d:84:dc:62:74:7b:eb: 5b:d7:ed:6d:90:b0:01:e6:54:2d:3a:f4:29:0b:d4:a8:ed:44: e5:4c:d7:10:65:7c:1c:24:11:e6:c0:b8:2c:eb:b8:74:df:df: 9f:c6:1c:3e:1c:6e:19:71:74:fe:d9:b6:78:5d:60:00:fb:41: 14:4b:52:02:56:ee:db:ac:d7:53:3c:18:f7:dc:27:40:5f:d1: 9d:d0:a9:43:94:be:3c:27:54:ad:67:06:b9:5a:2a:34:1f:14: 9b:8f:b5:1d:c5:34:53:8e:d8:bb:bc:b5:0f:9c:bf:eb:96:58: 98:2a:d9:ba:f5:dc:64:a0:8a:c8:33:00:9a:f8:70:7d:19:80: 51:94:95:86:11:0a:0b:d5:af:f4:0a:72:74:6b:15:50:32:47: ac:ac:5d:f1:75:da:1a:c9:6a:05:89:14:c7:92:1e:af:bc:1b: f5:ac:6b:fe:fe:db:5b:c3:ca:3d:36:f5:d1:3a:95:48:b3:6e: 99:eb:4e:7c:5d:83:d0:5b:1b:3d:9b:7c:3d:b1:ea:cd:b8:df: cf:5b:8a:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYwNDA1MDY0NzE0WhcNMjYwNDEyMDY0NzE0WjAYMRYwFAYD VQQDEw02OWQyMDU3Mi0yNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qc8SA2MGSvqehV9/GzCm6VgMfOvu6ytsAYWWyd8tfTcMUJVMXCbxlMitaY4 B/bLCjYFfZ4/wcCFeFKZf1P0wY0xd5jm5tmtjhPDfYO8oxmSHhgu7H6i9BHcbZN/ qSmtAlHwHrDssOu+NnCcLHldA4wDGnsoQliNce9F4xdFA2d4IUjNI9K3AhgtgPlM zx0W3nktH+7DjrjVnwBq7eTGdwXx0ju7B7iX8l/1mvIJnziI5pNK3qBT7r1GMTN2 rLSGw7TsNaNS27qBOOR5r8M6fAumW/4zP1r6ubbweVuWG+3l/+wYThTW8NuULUdt SyodiZRBmVsMhRKzWzZDuwYSyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOKjw/z 1EFOD6bZMqdd2yYHV1ZXMB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm+e2qQ+vhdwejOzG60l3CWnrE2zkGf2zZGZQLIm6qKLTvbVZNdMX/JfiGuk+ VZU9hNxidHvrW9ftbZCwAeZULTr0KQvUqO1E5UzXEGV8HCQR5sC4LOu4dN/fn8Yc PhxuGXF0/tm2eF1gAPtBFEtSAlbu26zXUzwY99wnQF/RndCpQ5S+PCdUrWcGuVoq NB8Um4+1HcU0U47Yu7y1D5y/65ZYmCrZuvXcZKCKyDMAmvhwfRmAUZSVhhEKC9Wv 9ApydGsVUDJHrKxd8XXaGslqBYkUx5Ier7wb9axr/v7bW8PKPTb10TqVSLNumetO fF2D0FsbPZt8PbHqzbjfz1uKYA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:12 2026 by rpki-client