$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: hlLUp8Lf1z1XSBvgWfrqy+bkb+gJKWULfgIk91W8nkY= Subject key identifier: 44:52:0B:41:94:BF:50:B3:A6:ED:62:B1:57:29:6F:4D:96:F7:29:8F Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: 0148 Signing time: Thu 21 May 2026 05:23:02 +0000 Manifest this update: Thu 21 May 2026 05:23:01 +0000 Manifest next update: Thu 28 May 2026 05:23:01 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: edXfkCtA1ZeKikm0FJRlxW8qqspZsxlK5dfX04n7r94=) 2: C37A8D80DC9411F0B18EF655406F56BC.roa (hash: xdvfA779z9auA+6dnwAxD5LtYSpidPPxAN1J+qgnhRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: May 21 05:23:01 2026 GMT Not After : May 28 05:23:01 2026 GMT Subject: CN=6a0e96b6-ca94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:b3:87:3b:64:61:fe:96:10:3b:a3:bd:a4: bc:0b:89:32:7d:cb:93:97:fa:1d:45:b7:39:5e:bb: 45:ee:64:6e:d6:04:08:75:66:89:a2:9e:8b:99:93: cc:db:b5:f4:ee:ee:db:e3:ec:d8:3c:6f:e6:5b:d3: de:95:6c:45:b6:6d:cc:78:98:13:75:db:af:d9:d8: 0f:a1:9a:9d:39:62:e0:61:d7:06:19:86:87:4b:94: 04:33:11:ed:a5:28:ee:c4:7c:13:60:d8:c9:52:a4: d8:01:72:ed:73:2f:2e:9f:6c:6f:1f:22:ef:a3:e4: 4d:f4:58:53:3a:e6:2a:d5:2d:65:ad:b4:f3:7a:45: af:d1:ec:c9:a0:b1:dc:95:97:04:fd:7d:ee:2a:e8: e4:2e:43:03:19:b6:ce:5f:89:81:64:5c:1d:6e:45: ab:7e:a6:e8:79:d8:4c:65:3b:45:65:a0:7a:e6:0d: 9d:e3:a7:1e:dd:34:59:c6:90:fe:64:bc:4d:cc:d1: 1a:d8:02:2a:85:86:79:1d:37:0e:39:85:bc:47:ec: da:ee:ce:79:6d:64:7e:f2:36:11:ef:09:a2:65:2f: ec:ff:de:e8:e6:0c:59:53:e0:0a:0f:94:ff:6b:3d: 10:45:07:f1:07:8f:cd:7c:30:b2:3d:cf:8c:79:a9: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:0B:41:94:BF:50:B3:A6:ED:62:B1:57:29:6F:4D:96:F7:29:8F X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2c:c6:51:fa:7d:30:ec:c8:5d:f1:41:37:cf:3f:a2:b1:9b: 63:9f:c9:bd:1c:87:dd:fb:0c:7d:d5:ab:73:08:fe:35:ec:8d: a3:af:ec:2e:e3:bd:44:f7:7a:7b:3e:77:8f:11:e5:78:a8:7a: 3e:ca:f8:b0:75:4f:80:a1:23:f1:9a:c6:56:58:1e:10:d4:9f: 0b:1c:5f:5d:17:60:57:67:c2:b4:6b:1d:e8:52:51:95:e2:41: 77:f2:10:db:9d:ab:70:98:61:8e:16:c3:74:3c:0a:f7:64:eb: 54:fe:43:0b:b9:b1:24:5d:3c:91:f0:2b:ea:c0:5c:f7:d7:0a: 9a:33:05:ea:e3:84:e9:21:47:59:9b:02:18:5c:7b:be:0a:7c: da:fa:92:96:a8:9f:ed:96:d1:bd:1f:38:00:f7:59:c7:7a:24: d2:a1:d2:da:be:23:33:ec:54:91:1b:67:1b:82:c3:85:b2:3c: 4c:0c:9b:ca:30:ff:a2:58:24:bb:75:fd:21:76:4d:54:72:5a: ea:2f:aa:dd:6c:fe:b9:6f:0c:d7:e9:ed:7f:00:d1:3b:db:62: da:ec:c4:68:63:fb:f5:4a:27:bd:9c:fe:b7:2e:28:b5:54:f5: d0:41:c2:3f:d3:75:9a:2f:15:52:6b:75:5c:51:95:71:ed:ed: f9:27:bc:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjYwNTIxMDUyMzAxWhcNMjYwNTI4MDUyMzAxWjAYMRYwFAYD VQQDEw02YTBlOTZiNi1jYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhqmzhztkYf6WEDujvaS8C4kyfcuTl/odRbc5XrtF7mRu1gQIdWaJop6LmZPM 27X07u7b4+zYPG/mW9PelWxFtm3MeJgTdduv2dgPoZqdOWLgYdcGGYaHS5QEMxHt pSjuxHwTYNjJUqTYAXLtcy8un2xvHyLvo+RN9FhTOuYq1S1lrbTzekWv0ezJoLHc lZcE/X3uKujkLkMDGbbOX4mBZFwdbkWrfqboedhMZTtFZaB65g2d46ce3TRZxpD+ ZLxNzNEa2AIqhYZ5HTcOOYW8R+za7s55bWR+8jYR7wmiZS/s/97o5gxZU+AKD5T/ az0QRQfxB4/NfDCyPc+MeakRwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERSC0GU v1Czpu1isVcpb02W9ymPMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnyzGUfp9MOzIXfFBN88/orGbY5/JvRyH3fsMfdWrcwj+NeyNo6/sLuO9RPd6 ez53jxHleKh6Psr4sHVPgKEj8ZrGVlgeENSfCxxfXRdgV2fCtGsd6FJRleJBd/IQ 252rcJhhjhbDdDwK92TrVP5DC7mxJF08kfAr6sBc99cKmjMF6uOE6SFHWZsCGFx7 vgp82vqSlqif7ZbRvR84APdZx3ok0qHS2r4jM+xUkRtnG4LDhbI8TAybyjD/olgk u3X9IXZNVHJa6i+q3Wz+uW8M1+ntfwDRO9ti2uzEaGP79UonvZz+ty4otVT10EHC P9N1mi8VUmt1XFGVce3t+Se82A== -----END CERTIFICATE-----Generated at Thu May 21 09:38:49 2026 by rpki-client