$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: zhWPcTISfaQTFFV5+pIH/483G86D5rOoO1MdFer2whg= Subject key identifier: C9:EA:B5:14:F0:37:F1:03:45:76:E0:9F:66:94:5F:BE:45:42:82:37 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: AD Signing time: Wed 13 May 2026 07:18:56 +0000 Manifest this update: Wed 13 May 2026 07:18:55 +0000 Manifest next update: Wed 20 May 2026 07:18:55 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: 9nOTqBVpbOPu22soAtQSc6VFIb+Xydmz6/Bi7KaWH6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: May 13 07:18:55 2026 GMT Not After : May 20 07:18:55 2026 GMT Subject: CN=6a0425e0-55a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:77:6a:fb:72:a5:5d:fd:37:c4:46:40:06: 76:71:b4:d0:a7:80:11:38:ee:f3:5f:83:7f:7f:df: 57:be:93:ba:4b:11:ac:1a:9f:66:ab:3b:0b:14:da: e1:5d:80:e0:3b:af:79:c7:1c:b9:0f:67:27:b6:20: 44:1a:c7:7c:3f:2c:84:55:91:8f:de:ed:60:95:a5: a4:6c:2f:80:8a:2a:4d:db:dc:a9:df:49:18:df:09: 1a:f6:53:c2:cb:3a:6d:24:d6:5f:b6:2b:a2:c6:6c: 58:ef:5e:9c:2e:7c:32:8d:09:24:f9:f0:62:99:27: 62:41:03:bd:4a:58:47:88:2c:c6:32:29:bf:9a:83: c4:3d:9e:8e:36:a1:24:77:fc:7d:db:e7:51:e6:f4: d5:cb:1c:16:91:ce:92:1d:c0:7e:72:e2:15:b9:e2: bb:78:dd:8d:43:f9:63:cc:36:9e:4e:ea:94:69:70: b7:bd:a8:1b:4d:a6:20:1a:96:22:4c:18:7a:ce:61: 04:5c:81:45:78:07:80:c7:79:8c:3a:7f:77:74:3c: 55:12:9c:a1:0c:5b:dd:79:39:91:17:c6:5b:59:2e: 13:94:b8:51:ac:5a:83:cb:a6:c6:d5:eb:de:fc:57: 19:ea:ff:8f:e8:4f:b8:36:8e:df:fd:b0:f0:f7:2f: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:B5:14:F0:37:F1:03:45:76:E0:9F:66:94:5F:BE:45:42:82:37 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7b:95:4d:08:0a:dd:7e:c4:c6:c8:e2:73:92:b2:b4:2d:3f: 20:23:bd:41:47:b7:97:ae:dd:77:ac:11:04:c5:dc:5a:f5:f1: 40:96:46:81:de:2e:38:d7:66:77:a4:fe:4c:93:15:70:83:0b: eb:f9:e2:e3:02:fe:3d:02:be:35:52:29:d7:fe:00:4a:87:2e: b7:f4:fc:95:d7:64:c4:75:14:bb:0d:24:42:fb:38:e4:62:3c: 7e:55:67:d2:6e:c0:db:69:a6:49:d8:b5:8d:09:fa:b0:99:ae: 82:4a:1a:8c:83:1f:4e:88:9b:dc:79:27:d7:64:dc:c8:9d:f6: c9:c7:26:b1:c4:2a:47:d6:e5:8e:33:fb:f6:bc:bf:c9:6c:b5: ec:5d:79:59:73:e6:00:7f:c2:59:c3:bf:81:3d:0c:d1:81:1c: 57:8c:53:17:02:ce:5c:62:db:74:43:f3:84:09:ab:5a:71:28: e5:60:5e:54:a9:fb:d4:2b:1b:8b:6a:a7:67:2f:78:25:c5:77: 7f:f4:65:ff:c4:22:3d:4d:48:7e:b5:dd:ab:85:4c:1a:aa:96: 74:a2:be:66:ea:16:b0:aa:d9:7c:25:dc:0c:99:3c:0e:74:01: 37:27:62:bb:93:fb:e5:42:68:8f:37:13:9b:97:ac:ff:ad:68: 29:4f:29:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYwNTEzMDcxODU1WhcNMjYwNTIwMDcxODU1WjAYMRYwFAYD VQQDEw02YTA0MjVlMC01NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvp3avtypV39N8RGQAZ2cbTQp4AROO7zX4N/f99XvpO6SxGsGp9mqzsLFNrh XYDgO695xxy5D2cntiBEGsd8PyyEVZGP3u1glaWkbC+AiipN29yp30kY3wka9lPC yzptJNZftiuixmxY716cLnwyjQkk+fBimSdiQQO9SlhHiCzGMim/moPEPZ6ONqEk d/x92+dR5vTVyxwWkc6SHcB+cuIVueK7eN2NQ/ljzDaeTuqUaXC3vagbTaYgGpYi TBh6zmEEXIFFeAeAx3mMOn93dDxVEpyhDFvdeTmRF8ZbWS4TlLhRrFqDy6bG1eve /FcZ6v+P6E+4No7f/bDw9y+JYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnqtRTw N/EDRXbgn2aUX75FQoI3MB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnXuVTQgK3X7Exsjic5KytC0/ICO9QUe3l67dd6wRBMXcWvXxQJZGgd4uONdm d6T+TJMVcIML6/ni4wL+PQK+NVIp1/4ASocut/T8lddkxHUUuw0kQvs45GI8flVn 0m7A22mmSdi1jQn6sJmugkoajIMfToib3Hkn12TcyJ32yccmscQqR9bljjP79ry/ yWy17F15WXPmAH/CWcO/gT0M0YEcV4xTFwLOXGLbdEPzhAmrWnEo5WBeVKn71Csb i2qnZy94JcV3f/Rl/8QiPU1IfrXdq4VMGqqWdKK+ZuoWsKrZfCXcDJk8DnQBNydi u5P75UJojzcTm5es/61oKU8pgQ== -----END CERTIFICATE-----Generated at Wed May 13 18:23:16 2026 by rpki-client