$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: 4r3iYvnfpEoWOmb2zmk7zN5U/6jXywXeYh97QZC6bAY= Subject key identifier: 5E:B1:2F:28:BA:22:0A:2C:67:CB:58:4C:D3:3E:73:84:F1:61:05:FF Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D6D Signing time: Sat 04 Apr 2026 17:50:21 +0000 Manifest this update: Sat 04 Apr 2026 17:50:21 +0000 Manifest next update: Sat 11 Apr 2026 17:50:21 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: MWvrZlUDhiI6aRVX0/xKuPMMhcbTwhcKpAzDQusNFTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Apr 4 17:50:21 2026 GMT Not After : Apr 11 17:50:21 2026 GMT Subject: CN=69d14f5d-fc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:9b:2a:e8:e3:cb:18:5d:7f:4a:39:13:61: b9:aa:b4:46:0e:e2:b2:16:54:57:38:a8:f3:d3:ff: 92:06:17:cf:06:16:49:da:5d:32:3c:09:02:8a:5b: 6e:bc:16:17:91:60:60:f8:5c:88:e5:03:56:d8:41: 01:91:8d:54:31:e7:7f:d3:73:cc:56:d1:ab:f3:a2: ee:1c:63:a1:03:b0:56:7d:07:e9:ba:cf:59:8f:f1: 17:53:2e:0b:9d:67:8b:8d:4b:89:3e:70:6a:bd:43: 9b:40:a1:92:ac:40:5b:a9:92:85:4e:6e:6b:62:c1: f0:95:e3:37:f3:04:d1:b1:ab:43:33:14:0a:68:47: ff:b1:52:ec:70:b4:bb:e5:53:d0:fc:84:16:1c:b8: f8:09:8f:39:b1:e5:40:a0:e6:38:b1:1c:f3:90:b0: b7:26:ed:4f:02:71:ad:4e:a2:bb:d4:3d:55:e7:6f: 7b:25:fe:2e:68:ea:27:8a:a1:a2:15:5f:63:47:b0: 90:da:82:ff:59:1a:f5:35:bf:38:2e:fb:9a:40:8a: 98:73:e2:15:68:d0:53:55:23:26:26:ae:5b:77:f2: ec:20:e1:6b:a3:1e:9b:ad:ea:4b:25:ea:2b:f3:d8: f0:72:0e:bf:a3:93:ea:a1:12:be:5f:5b:98:5e:05: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B1:2F:28:BA:22:0A:2C:67:CB:58:4C:D3:3E:73:84:F1:61:05:FF X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:17:c4:f3:89:db:65:22:a5:91:8a:06:79:7e:dd:3f:99: 41:7f:1b:d0:86:de:4b:a5:dc:f1:e3:cf:d5:fa:52:15:8d:a3: c8:f0:1d:11:be:60:7b:1e:6f:65:aa:6a:ce:a4:e7:47:15:b1: 15:cf:6b:14:4e:5f:f8:85:bb:f5:ef:f6:b4:90:f0:77:8a:c5: f8:e8:f4:6b:f0:d6:c5:94:48:2e:16:8e:89:f5:b8:ac:ba:a5: 5d:d5:e6:08:5c:54:11:e7:4b:02:26:39:24:e6:08:d1:18:24: 37:48:2e:81:33:3e:ea:bb:6e:03:6d:74:1f:28:71:1b:99:97: 18:30:9e:dc:e6:47:ed:38:8f:24:e5:17:73:1a:1a:67:6d:72: 60:03:8c:0c:0a:77:79:89:30:b1:6b:95:11:ca:14:9c:f3:bf: 49:9e:5d:ed:1c:2b:55:0e:21:1f:f9:ab:a6:ec:25:c1:04:45: 33:26:9a:65:d8:88:55:a9:5e:bc:e8:ed:4a:f8:24:b7:9d:d4: 5f:39:f5:ef:78:da:6a:f3:54:28:0b:d9:5e:41:77:39:04:84: 56:2c:aa:26:7a:92:b0:27:9b:65:e4:bb:79:ab:08:b8:21:27: fa:cd:d7:00:39:ed:15:e9:6e:7f:e9:7a:0d:bc:86:7b:8e:af: 62:7a:cd:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjYwNDA0MTc1MDIxWhcNMjYwNDExMTc1MDIxWjAYMRYwFAYD VQQDEw02OWQxNGY1ZC1mYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmM2bKujjyxhdf0o5E2G5qrRGDuKyFlRXOKjz0/+SBhfPBhZJ2l0yPAkCiltu vBYXkWBg+FyI5QNW2EEBkY1UMed/03PMVtGr86LuHGOhA7BWfQfpus9Zj/EXUy4L nWeLjUuJPnBqvUObQKGSrEBbqZKFTm5rYsHwleM38wTRsatDMxQKaEf/sVLscLS7 5VPQ/IQWHLj4CY85seVAoOY4sRzzkLC3Ju1PAnGtTqK71D1V5297Jf4uaOoniqGi FV9jR7CQ2oL/WRr1Nb84LvuaQIqYc+IVaNBTVSMmJq5bd/LsIOFrox6brepLJeor 89jwcg6/o5PqoRK+X1uYXgVAswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6xLyi6 IgosZ8tYTNM+c4TxYQX/MB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVUYXxPOJ22UipZGKBnl+3T+ZQX8b0IbeS6Xc8ePP1fpSFY2jyPAdEb5gex5v ZapqzqTnRxWxFc9rFE5f+IW79e/2tJDwd4rF+Oj0a/DWxZRILhaOifW4rLqlXdXm CFxUEedLAiY5JOYI0RgkN0gugTM+6rtuA210HyhxG5mXGDCe3OZH7TiPJOUXcxoa Z21yYAOMDAp3eYkwsWuVEcoUnPO/SZ5d7RwrVQ4hH/mrpuwlwQRFMyaaZdiIVale vOjtSvgkt53UXzn173jaavNUKAvZXkF3OQSEViyqJnqSsCebZeS7easIuCEn+s3X ADntFeluf+l6DbyGe46vYnrNmw== -----END CERTIFICATE-----Generated at Mon Apr 6 11:26:31 2026 by rpki-client