$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: QfOThS6HadklNu6xCZZDCFd2SSc4Jizopn47HlfA7pc= Subject key identifier: 0A:2B:9D:C3:CD:99:4C:56:CF:8E:64:31:80:7E:A1:EF:92:50:C1:F6 Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: D0 Signing time: Thu 23 Jul 2026 08:32:07 +0000 Manifest this update: Thu 23 Jul 2026 08:32:06 +0000 Manifest next update: Thu 30 Jul 2026 08:32:06 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: +3UU5osB/2fWg7QT/JHV9OvK6O0NsbiOFzOWqASZze0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Jul 23 08:32:06 2026 GMT Not After : Jul 30 08:32:06 2026 GMT Subject: CN=6a61d187-5d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:5d:6e:17:1b:49:6e:9d:f0:08:7d:7a:2d: 2f:3d:d3:59:f5:a4:8d:c2:3b:df:80:5d:44:d0:9e: 61:20:93:49:36:2f:f4:65:0e:f8:4b:b9:ce:a9:5f: fa:9a:03:30:89:b1:c5:47:a6:8a:e2:32:f2:9e:8b: dc:fd:7c:f3:ac:44:36:6b:74:82:c0:56:8b:44:e1: c0:c6:ca:ba:0f:b3:ae:b1:48:8b:bb:9c:47:4f:22: 24:19:cb:0a:1d:1b:a8:ae:db:c4:ff:7a:54:15:c7: 43:1a:b9:e3:4b:ad:36:2a:bd:e1:e1:7a:26:90:68: 3c:75:0b:06:72:2d:89:55:13:39:9f:86:4c:76:10: 7f:72:b7:13:0f:bc:84:73:b3:8a:03:77:d6:bf:aa: 79:07:e0:e8:13:34:e6:5a:4e:3c:e1:fa:1f:88:12: 4c:3c:b2:2b:da:6f:5d:58:4a:31:31:c2:c8:7a:8e: 45:b4:ff:70:f2:49:97:91:4d:79:47:52:7b:2c:fc: f0:b0:ca:3c:e2:26:5c:7f:a1:00:61:63:15:3c:1c: 97:4e:87:34:91:4b:01:af:0c:b2:a8:8b:df:5a:ea: 00:19:6c:cc:ed:44:29:d1:c4:35:d9:27:71:de:31: 24:eb:a3:df:bb:97:9c:1f:23:77:65:16:15:28:34: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2B:9D:C3:CD:99:4C:56:CF:8E:64:31:80:7E:A1:EF:92:50:C1:F6 X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:2f:41:df:b6:81:c6:aa:97:eb:3b:ae:ca:4a:de:9d:17:d5: d5:1a:28:39:04:96:5c:ec:28:a7:c3:46:1f:f1:e8:c4:fe:85: f9:1c:50:ca:74:12:bc:50:0c:2c:55:22:4c:16:d9:b1:3c:d0: 0c:b2:4d:a7:f7:13:62:ef:3a:63:0c:07:13:5e:aa:06:48:28: 35:65:a7:c8:95:aa:99:61:12:44:dd:94:1c:e7:2a:12:8d:c1: 47:02:88:fb:5d:9c:08:a2:b4:2c:8f:f3:b1:2f:3d:b1:85:e1: cc:25:bc:c8:c9:78:a3:f5:9d:30:98:cb:e6:3d:69:85:3e:b3: 43:0a:b2:ef:90:a4:56:a5:b1:5e:fd:bc:b4:ac:71:ae:55:04: d4:17:10:5c:63:f0:12:bc:a8:b0:ec:60:f2:54:03:56:0c:2d: 12:f6:e8:21:f9:6e:5e:e0:de:90:58:43:5c:0a:57:6a:e1:6c: a0:07:8b:c9:cf:4e:1b:04:21:db:50:43:58:53:6a:9e:42:a4: 4a:11:28:5c:45:68:bd:0c:69:10:7c:a4:b6:9f:b6:97:bb:c2: fc:54:80:27:03:a3:c6:8a:a7:19:28:cd:d5:07:5d:c7:8b:dc: 98:1c:bc:cd:6b:25:b5:f5:44:7d:8c:65:25:5f:86:7d:ef:63: 5d:09:5d:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3 RTMxMjFDRDkwHhcNMjYwNzIzMDgzMjA2WhcNMjYwNzMwMDgzMjA2WjAYMRYwFAYD VQQDEw02YTYxZDE4Ny01ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkxdbhcbSW6d8Ah9ei0vPdNZ9aSNwjvfgF1E0J5hIJNJNi/0ZQ74S7nOqV/6 mgMwibHFR6aK4jLynovc/XzzrEQ2a3SCwFaLROHAxsq6D7OusUiLu5xHTyIkGcsK HRuortvE/3pUFcdDGrnjS602Kr3h4XomkGg8dQsGci2JVRM5n4ZMdhB/crcTD7yE c7OKA3fWv6p5B+DoEzTmWk484fofiBJMPLIr2m9dWEoxMcLIeo5FtP9w8kmXkU15 R1J7LPzwsMo84iZcf6EAYWMVPByXToc0kUsBrwyyqIvfWuoAGWzM7UQp0cQ12Sdx 3jEk66Pfu5ecHyN3ZRYVKDTwVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAorncPN mUxWz45kMYB+oe+SUMH2MB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsC9B37aBxqqX6zuuykrenRfV1RooOQSWXOwop8NGH/HoxP6F+RxQynQSvFAM LFUiTBbZsTzQDLJNp/cTYu86YwwHE16qBkgoNWWnyJWqmWESRN2UHOcqEo3BRwKI +12cCKK0LI/zsS89sYXhzCW8yMl4o/WdMJjL5j1phT6zQwqy75CkVqWxXv28tKxx rlUE1BcQXGPwEryosOxg8lQDVgwtEvboIfluXuDekFhDXApXauFsoAeLyc9OGwQh 21BDWFNqnkKkShEoXEVovQxpEHyktp+2l7vC/FSAJwOjxoqnGSjN1Qddx4vcmBy8 zWsltfVEfYxlJV+Gfe9jXQld8g== -----END CERTIFICATE-----Generated at Fri Jul 24 16:35:37 2026 by rpki-client