$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: yTBPYxIY9ODRGrUdzwwzy2e4SWEima2s7zZxR/FrN0U= Subject key identifier: EF:CC:D9:F6:D0:D8:A2:2D:33:18:48:DA:99:73:93:6B:BE:3F:2E:3E Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 06B6 Signing time: Tue 02 Jun 2026 15:59:58 +0000 Manifest this update: Tue 02 Jun 2026 15:59:58 +0000 Manifest next update: Tue 09 Jun 2026 15:59:58 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: +DwMre9CvA73TzfCDUVFviOPrzzaQz5CekHGwO97ml4=) 2: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: po/i8uxPFYRsNFTlJU1d5KEDrihE5XxUDGJv65GiON0=) 3: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: yCmJKCeUjCX4/1rndfEcZXyyAy1UCnlaRalfod8v7Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Jun 2 15:59:58 2026 GMT Not After : Jun 9 15:59:58 2026 GMT Subject: CN=6a1efdfe-0b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:92:d4:2b:04:55:92:38:0c:63:3f:3b:0c: d6:c3:d2:36:40:5b:5b:06:41:a3:0f:ec:a6:ed:5b: c6:45:9b:b0:9f:0e:4a:d9:e0:01:46:f4:9b:36:94: fd:bf:8a:82:9b:15:51:53:63:a0:3b:13:62:41:ca: 9a:61:2d:1c:bc:e3:d3:08:95:30:56:75:d1:e2:15: 51:55:89:35:af:9c:10:c2:21:a2:1c:43:de:55:94: 2d:d7:c0:5d:a4:66:40:b3:0e:56:b0:6e:80:af:1d: e2:5b:a0:eb:e8:df:84:e9:43:b9:a1:91:e0:cd:70: fe:4c:8a:49:21:1a:3b:24:37:37:80:b1:ff:bd:4d: 51:fa:a3:c6:2e:85:f5:81:9b:64:de:9a:b3:3f:cf: 75:c1:ec:b9:90:3d:2e:9f:b0:aa:0b:49:33:77:82: f2:92:4a:4b:74:f2:4f:03:7c:0b:46:da:2f:70:92: 82:4e:76:5a:8e:1c:6f:8d:e7:a5:cf:db:b9:93:91: 82:2f:07:c2:b7:36:62:e8:60:d2:d2:de:28:18:f7: 72:c9:61:e5:19:e7:eb:a9:1a:27:28:7c:03:1f:80: 63:48:47:aa:53:ee:02:79:63:6d:45:9d:ff:f8:b4: 99:29:04:c4:7b:33:27:87:ef:5d:6b:3e:e7:53:16: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CC:D9:F6:D0:D8:A2:2D:33:18:48:DA:99:73:93:6B:BE:3F:2E:3E X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:59:5b:a1:9d:31:b5:29:08:68:6a:8a:95:b0:21:fc:0b:df: fd:fe:19:ba:ae:5d:8d:9b:21:1f:6b:e7:84:e0:cc:f6:60:ad: 90:04:4e:54:fa:ed:11:49:22:ee:88:9f:ee:78:ee:cf:16:7e: 0a:61:27:18:f9:0c:3b:0a:88:e6:c1:cd:9a:ed:03:0b:c0:3a: 7a:49:7c:a8:a8:2c:19:55:d7:3b:c0:02:5d:0d:8f:d2:e6:63: 06:56:56:2a:e7:ba:70:28:bb:b1:2f:2f:ac:da:98:0f:b9:e9: 30:05:c8:7e:6d:85:4d:75:a6:1c:d1:42:25:4e:68:52:54:9b: a5:2d:5c:bb:56:67:3c:cd:a8:6f:c0:06:65:07:7c:2f:39:f0: ce:1c:03:fb:66:ac:e7:0b:0c:da:ed:86:f7:77:53:d7:87:a2: 33:42:ab:09:8d:56:01:3d:11:2e:0b:6d:37:df:65:02:4d:78: 87:67:64:d6:0b:ef:e1:3d:97:a1:e4:b9:d0:67:d5:31:da:68: c5:34:df:5e:47:b5:d5:4d:4f:55:05:c2:e2:ff:52:34:12:59: 1b:b4:e3:3a:30:70:56:05:3a:94:92:f9:c2:53:21:42:59:1e: e6:00:df:73:21:9f:81:12:fe:fb:93:7b:14:67:df:90:dc:5d: d4:3f:ee:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwNjAyMTU1OTU4WhcNMjYwNjA5MTU1OTU4WjAYMRYwFAYD VQQDEw02YTFlZmRmZS0wYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTqS1CsEVZI4DGM/OwzWw9I2QFtbBkGjD+ym7VvGRZuwnw5K2eABRvSbNpT9 v4qCmxVRU2OgOxNiQcqaYS0cvOPTCJUwVnXR4hVRVYk1r5wQwiGiHEPeVZQt18Bd pGZAsw5WsG6Arx3iW6Dr6N+E6UO5oZHgzXD+TIpJIRo7JDc3gLH/vU1R+qPGLoX1 gZtk3pqzP891wey5kD0un7CqC0kzd4LykkpLdPJPA3wLRtovcJKCTnZajhxvjeel z9u5k5GCLwfCtzZi6GDS0t4oGPdyyWHlGefrqRonKHwDH4BjSEeqU+4CeWNtRZ3/ +LSZKQTEezMnh+9daz7nUxbnYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/M2fbQ 2KItMxhI2plzk2u+Py4+MB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdVlboZ0xtSkIaGqKlbAh/Avf/f4Zuq5djZshH2vnhODM9mCtkAROVPrtEUki 7oif7njuzxZ+CmEnGPkMOwqI5sHNmu0DC8A6ekl8qKgsGVXXO8ACXQ2P0uZjBlZW Kue6cCi7sS8vrNqYD7npMAXIfm2FTXWmHNFCJU5oUlSbpS1cu1ZnPM2ob8AGZQd8 LznwzhwD+2as5wsM2u2G93dT14eiM0KrCY1WAT0RLgttN99lAk14h2dk1gvv4T2X oeS50GfVMdpoxTTfXke11U1PVQXC4v9SNBJZG7TjOjBwVgU6lJL5wlMhQlke5gDf cyGfgRL++5N7FGffkNxd1D/uQg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:33 2026 by rpki-client