$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: qnQWQx3xiL/M2pNJHid8YfPhypwhcgzvNwDheCofCA0= Subject key identifier: 6D:B1:C6:4D:C0:E4:D2:3C:F7:F9:E8:E3:25:FA:18:7A:E6:A4:9A:9D Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: CE Signing time: Tue 21 Apr 2026 06:38:20 +0000 Manifest this update: Tue 21 Apr 2026 06:38:19 +0000 Manifest next update: Tue 28 Apr 2026 06:38:19 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: /ad9/hbChgEdRpISaFeFXalNMkH8UcEE+QQW7xxW31I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Apr 21 06:38:19 2026 GMT Not After : Apr 28 06:38:19 2026 GMT Subject: CN=69e71b5c-c38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:5a:30:be:3f:2f:92:6f:84:73:fa:67:c9: 18:64:6c:0b:0f:18:4b:db:c2:21:3f:06:9c:b1:8e: a0:79:1a:2d:4f:fb:ea:fe:af:5f:af:11:27:9a:55: 80:3f:7f:5e:e7:d2:9a:b8:1d:f7:ef:0e:97:1c:66: a2:1d:81:af:c4:dd:71:30:1c:07:ce:cd:1e:d2:eb: 46:cb:f0:a7:fd:d5:91:84:96:48:e0:26:ee:3b:99: 7a:88:a5:9b:04:a0:c8:a1:ad:f7:f3:02:de:2e:00: d1:be:98:48:b0:8d:79:83:47:64:57:d6:62:d5:4c: 97:3d:40:67:f6:b1:25:b9:26:6b:e3:67:f1:43:34: 94:cb:3f:ef:82:cd:f5:81:b5:6f:7e:6f:ef:15:d6: 9c:1e:24:70:a0:50:26:df:71:12:8b:6d:8e:08:37: 53:db:fc:c8:1e:83:ef:2b:c4:bf:44:4f:19:04:a6: d5:e6:d2:81:16:e3:97:1f:91:94:5f:0b:8c:15:a0: 94:2a:04:c3:4d:e6:f3:b5:4a:07:e0:8a:51:6b:6e: d1:4e:f2:06:29:96:da:61:c6:75:08:d1:dd:67:e5: e4:7c:73:4d:41:47:cd:45:14:7b:30:14:58:c6:72: 48:42:93:93:8f:ef:04:97:60:3f:aa:48:02:a5:cc: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:C6:4D:C0:E4:D2:3C:F7:F9:E8:E3:25:FA:18:7A:E6:A4:9A:9D X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:d9:80:f9:3e:6a:28:d2:10:41:57:83:d8:b3:fe:0e:ee:64: 6f:11:c9:0b:8f:23:06:b1:1b:63:e6:42:5c:09:9b:47:f9:19: 1e:6c:df:46:26:9b:56:ff:3f:75:c3:8d:ff:e0:75:e3:da:9e: a2:3c:77:f2:5b:8c:a3:30:4a:39:8d:71:b3:35:74:ef:19:2e: d4:16:fc:d2:47:ed:26:a9:31:f5:9d:4e:09:59:f2:d0:e5:ab: 20:1f:ee:3a:5c:82:0d:9d:4e:7a:2b:1b:9e:32:1f:b1:72:fe: 94:5f:95:48:dd:e8:ee:ea:e9:e0:4a:de:7c:7a:33:d3:49:86: 70:db:bd:39:d5:54:d1:81:32:2a:be:d8:e5:e4:8f:cd:71:94: d7:80:2e:3d:17:d7:37:ca:99:82:30:d3:d1:9b:05:0c:0f:31: 45:ea:19:b4:13:b1:76:83:f0:3f:27:7a:35:7b:95:23:33:a2: 2b:89:35:75:d3:00:5d:7d:84:1f:89:01:94:54:08:34:9a:55: ee:ed:11:12:9d:32:94:39:5b:ec:6c:e5:c5:4b:b0:b7:01:90: eb:8e:50:83:d5:75:b8:75:67:9f:22:de:e4:9d:9b:a3:63:a6: 64:9c:28:15:55:50:cf:ef:51:27:b5:7e:e5:38:49:05:51:ec: 70:d4:87:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDkyMEU3RDA5MUYxNTU2OUYyRDgzNDBDNjU4MkI5NTk1 RUMwNjU2ODAwHhcNMjYwNDIxMDYzODE5WhcNMjYwNDI4MDYzODE5WjAYMRYwFAYD VQQDEw02OWU3MWI1Yy1jMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jxaML4/L5JvhHP6Z8kYZGwLDxhL28IhPwacsY6geRotT/vq/q9frxEnmlWA P39e59KauB337w6XHGaiHYGvxN1xMBwHzs0e0utGy/Cn/dWRhJZI4CbuO5l6iKWb BKDIoa338wLeLgDRvphIsI15g0dkV9Zi1UyXPUBn9rEluSZr42fxQzSUyz/vgs31 gbVvfm/vFdacHiRwoFAm33ESi22OCDdT2/zIHoPvK8S/RE8ZBKbV5tKBFuOXH5GU XwuMFaCUKgTDTebztUoH4IpRa27RTvIGKZbaYcZ1CNHdZ+XkfHNNQUfNRRR7MBRY xnJIQpOTj+8El2A/qkgCpczl8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2xxk3A 5NI89/no4yX6GHrmpJqdMB8GA1UdIwQYMBaAFJIOfQkfFVafLYNAxlgrlZXsBlaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GMUM3NDQ3RTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZwOHRnMERHV0N1Vmxld0dW b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1ZvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GMUM3NDQ3RTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZw OHRnMERHV0N1Vmxld0dWb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAudmA+T5qKNIQQVeD2LP+Du5kbxHJC48jBrEbY+ZCXAmbR/kZHmzfRiabVv8/ dcON/+B149qeojx38luMozBKOY1xszV07xku1Bb80kftJqkx9Z1OCVny0OWrIB/u OlyCDZ1OeisbnjIfsXL+lF+VSN3o7urp4ErefHoz00mGcNu9OdVU0YEyKr7Y5eSP zXGU14AuPRfXN8qZgjDT0ZsFDA8xReoZtBOxdoPwPyd6NXuVIzOiK4k1ddMAXX2E H4kBlFQINJpV7u0REp0ylDlb7GzlxUuwtwGQ645Qg9V1uHVnnyLe5J2bo2OmZJwo FVVQz+9RJ7V+5ThJBVHscNSHPA== -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:53 2026 by rpki-client