$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: jDyiV8vkR38KoA9Pl0cbNCX5qg0kJOUNKv1WrayThmM= Subject key identifier: F1:B0:57:FC:CF:B0:5B:23:81:27:A3:C6:66:3A:B5:9C:C5:3A:AE:8B Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 0698 Signing time: Sat 04 Apr 2026 15:55:56 +0000 Manifest this update: Sat 04 Apr 2026 15:55:55 +0000 Manifest next update: Sat 11 Apr 2026 15:55:55 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: q5tGvC+UeeQhsnGgg0VuftqkENMlMY0gq2fyv1nH1Lc=) 2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: yCmJKCeUjCX4/1rndfEcZXyyAy1UCnlaRalfod8v7Ts=) 3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: po/i8uxPFYRsNFTlJU1d5KEDrihE5XxUDGJv65GiON0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Apr 4 15:55:55 2026 GMT Not After : Apr 11 15:55:55 2026 GMT Subject: CN=69d1348c-a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:04:5e:ae:fb:dc:b6:93:f2:3d:7c:f3:b1: 94:1f:ae:8f:30:7e:77:88:9b:9d:1f:60:2e:bb:17: d9:f6:26:d2:58:fe:62:60:0b:a2:38:2f:0c:36:79: b7:19:da:72:00:c0:f5:9f:f5:27:81:84:0a:0a:b1: 56:77:e2:78:61:9d:b2:80:ed:86:7b:72:bf:4c:f2: 6f:12:25:a9:56:78:8a:59:0b:2a:6b:0f:f3:93:bd: a8:9f:75:a1:c4:70:39:75:9f:d4:3a:49:ef:b1:47: 0d:71:21:1a:32:86:c4:a9:23:cb:ba:b2:92:b3:f7: e3:c8:aa:0e:6f:79:3b:17:bb:47:a6:ad:a6:7b:28: 72:b4:16:b7:cb:42:19:af:a0:9f:56:19:0e:0d:60: 48:21:a9:8f:84:a3:42:e4:b5:8e:55:89:e7:76:6c: 23:5e:c1:7e:4c:72:d3:ff:9d:32:e7:51:45:eb:53: 4b:58:ed:e5:71:18:9c:4b:40:8c:5f:8f:72:6f:b4: dd:c7:ff:58:71:22:63:2e:87:b1:86:3e:94:be:00: f7:4a:01:e2:79:90:89:78:3b:50:64:d9:74:a0:b5: af:96:a7:bb:c4:76:84:2a:da:45:70:3f:e2:2b:d8: ee:14:4d:f5:91:25:e4:7e:94:36:14:9e:ca:41:25: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B0:57:FC:CF:B0:5B:23:81:27:A3:C6:66:3A:B5:9C:C5:3A:AE:8B X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9f:7f:a4:ae:9c:88:d8:a8:ab:99:87:74:b3:c7:b9:09:f4: dc:eb:5b:a1:e6:67:31:7c:1e:71:a3:af:63:6b:cf:55:4d:0e: a4:14:0d:25:5b:da:ce:94:89:ed:dd:82:48:80:3d:53:b3:d3: 21:67:24:35:64:ea:aa:5b:4e:94:08:c9:7b:e0:37:30:e3:ff: 36:2d:f6:f1:7c:0f:32:15:08:a3:7e:50:6c:49:89:44:07:1a: 0e:6b:3b:83:d0:a9:ab:07:79:ba:9c:d0:c5:28:61:b0:ac:4e: 1a:0c:c6:1e:aa:48:97:5e:50:33:1b:ea:4b:2b:1f:ea:7f:72: ef:df:81:87:51:5b:b9:69:a2:13:67:d0:d4:80:98:ab:cf:67: 99:ed:cf:7f:99:2a:fc:4e:3f:fb:37:69:56:e3:16:cb:01:2c: 3c:0e:0c:8b:0a:6e:9f:c5:12:bf:9f:6c:33:c9:9e:17:7e:95: eb:9a:d1:30:a4:38:8d:b6:f0:0c:11:c0:ba:9f:f0:ce:e2:36: b7:d8:ce:dd:a5:32:8a:fe:7c:63:63:d1:fd:f1:2d:90:8c:4f: 87:17:cf:a4:16:44:bf:51:32:d5:29:5f:a9:23:cb:47:d5:0b: 7c:37:0a:64:36:39:3d:f5:2a:41:f6:1c:67:3d:c5:8c:1b:63: 70:97:40:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwNDA0MTU1NTU1WhcNMjYwNDExMTU1NTU1WjAYMRYwFAYD VQQDEw02OWQxMzQ4Yy1hNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FAEXq773LaT8j1887GUH66PMH53iJudH2AuuxfZ9ibSWP5iYAuiOC8MNnm3 GdpyAMD1n/UngYQKCrFWd+J4YZ2ygO2Ge3K/TPJvEiWpVniKWQsqaw/zk72on3Wh xHA5dZ/UOknvsUcNcSEaMobEqSPLurKSs/fjyKoOb3k7F7tHpq2meyhytBa3y0IZ r6CfVhkODWBIIamPhKNC5LWOVYnndmwjXsF+THLT/50y51FF61NLWO3lcRicS0CM X49yb7Tdx/9YcSJjLoexhj6UvgD3SgHieZCJeDtQZNl0oLWvlqe7xHaEKtpFcD/i K9juFE31kSXkfpQ2FJ7KQSVvMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGwV/zP sFsjgSejxmY6tZzFOq6LMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG59/pK6ciNioq5mHdLPHuQn03OtboeZnMXwecaOvY2vPVU0OpBQNJVvazpSJ 7d2CSIA9U7PTIWckNWTqqltOlAjJe+A3MOP/Ni328XwPMhUIo35QbEmJRAcaDms7 g9Cpqwd5upzQxShhsKxOGgzGHqpIl15QMxvqSysf6n9y79+Bh1FbuWmiE2fQ1ICY q89nme3Pf5kq/E4/+zdpVuMWywEsPA4Miwpun8USv59sM8meF36V65rRMKQ4jbbw DBHAup/wzuI2t9jO3aUyiv58Y2PR/fEtkIxPhxfPpBZEv1Ey1SlfqSPLR9ULfDcK ZDY5PfUqQfYcZz3FjBtjcJdApw== -----END CERTIFICATE-----Generated at Mon Apr 6 15:11:49 2026 by rpki-client