$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: opcZ9JXn8tUjiHx2moX7FzTYZkNQB46RNoVNsh4L/jY= Subject key identifier: D1:85:F2:3E:97:8D:7C:C0:CB:E7:6C:99:1B:34:C0:19:F5:F4:D5:5A Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: 0144 Signing time: Wed 13 May 2026 05:25:53 +0000 Manifest this update: Wed 13 May 2026 05:25:52 +0000 Manifest next update: Wed 20 May 2026 05:25:52 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: YUxURk/9cO2AzYSns0DfWcceaiiI6bbZQSS12HPuznA=) 2: C37A8D80DC9411F0B18EF655406F56BC.roa (hash: xdvfA779z9auA+6dnwAxD5LtYSpidPPxAN1J+qgnhRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: May 13 05:25:52 2026 GMT Not After : May 20 05:25:52 2026 GMT Subject: CN=6a040b61-2895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:06:73:3f:b9:f9:be:26:75:d4:ba:50:5c: a8:35:35:48:fa:48:b3:b0:08:de:e4:af:8d:09:65: ed:18:c1:c8:9c:e7:14:f6:ce:17:4b:b4:4d:e4:50: 9a:00:96:ab:9e:bd:0c:30:6e:3f:b9:85:83:92:35: 1d:d6:c7:24:fd:83:95:19:7e:48:50:a0:1c:50:34: 2e:a1:19:e4:b5:ba:c9:d0:12:e9:90:40:ac:83:6b: 93:ab:48:b0:d0:7d:48:ab:53:9a:14:8f:8e:ae:15: c9:bf:1d:9f:2a:f4:a4:e3:c1:9e:a1:a8:63:d0:43: 20:cd:70:f6:64:25:fb:16:d8:49:ee:28:cf:e5:4a: 63:92:3a:fc:27:a7:81:a3:72:6f:8f:59:5f:64:74: c8:45:ae:26:20:eb:62:85:7a:d9:61:67:a4:5b:1a: 16:f6:f1:68:e3:7a:db:d6:86:75:af:92:81:cf:1f: 55:f5:df:a6:65:64:42:8c:6d:8b:ae:f2:1e:5a:68: 65:54:58:78:35:ce:3a:18:37:3f:2a:a7:2e:78:60: b3:d2:73:7e:45:81:1e:75:f4:d4:43:79:2b:39:20: c2:99:51:4d:f7:af:86:d4:97:e2:4d:1b:2a:3a:8a: b8:e8:10:57:27:2a:3f:c2:b7:cd:2f:55:06:19:b5: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:85:F2:3E:97:8D:7C:C0:CB:E7:6C:99:1B:34:C0:19:F5:F4:D5:5A X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4c:23:83:e1:fc:ff:db:27:ea:73:dd:ea:ef:0c:fa:25:0b: f3:ad:b5:7d:0e:fb:ba:ca:5a:56:20:83:29:8d:4f:a6:a8:c9: 93:09:df:14:3c:96:d8:e6:79:9c:b8:2d:b9:5d:42:bd:82:96: 86:93:f8:44:3c:b9:f1:0b:e2:12:d9:10:70:c1:eb:b9:f0:c1: d3:90:57:a1:c0:a5:df:46:16:f5:f1:60:80:f4:be:ef:03:d0: 7c:70:73:b8:57:b4:6d:28:43:05:4e:96:1a:b6:d6:44:fd:34: 5d:b9:ca:1d:a9:c2:7b:6a:35:65:21:45:55:06:59:4d:d8:a8: ea:36:5f:07:23:d0:8f:1f:06:4c:5e:f9:97:fc:3f:05:f1:ee: da:97:09:5c:be:07:1c:6e:db:9e:3a:b4:b5:b5:1d:6c:4f:92: e3:d1:1f:5e:29:9a:7c:d1:cc:1d:e1:a3:b8:93:1c:93:84:97: 31:26:3a:12:12:61:ef:0c:ef:5e:f3:b3:55:29:c9:9e:5d:b9: a5:f2:85:74:53:85:32:6b:fb:64:cf:81:43:2e:11:ce:1a:31: 69:fe:ff:a7:69:0c:9d:fb:33:f4:2d:fa:5c:5e:49:90:c7:95: 45:ba:7d:2c:0e:29:78:aa:31:2e:56:95:1b:6c:55:e8:ae:3b: 45:04:db:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjYwNTEzMDUyNTUyWhcNMjYwNTIwMDUyNTUyWjAYMRYwFAYD VQQDEw02YTA0MGI2MS0yODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18sGcz+5+b4mddS6UFyoNTVI+kizsAje5K+NCWXtGMHInOcU9s4XS7RN5FCa AJarnr0MMG4/uYWDkjUd1sck/YOVGX5IUKAcUDQuoRnktbrJ0BLpkECsg2uTq0iw 0H1Iq1OaFI+OrhXJvx2fKvSk48Geoahj0EMgzXD2ZCX7FthJ7ijP5Upjkjr8J6eB o3Jvj1lfZHTIRa4mIOtihXrZYWekWxoW9vFo43rb1oZ1r5KBzx9V9d+mZWRCjG2L rvIeWmhlVFh4Nc46GDc/KqcueGCz0nN+RYEedfTUQ3krOSDCmVFN96+G1JfiTRsq Ooq46BBXJyo/wrfNL1UGGbU6uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGF8j6X jXzAy+dsmRs0wBn19NVaMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc0wjg+H8/9sn6nPd6u8M+iUL8621fQ77uspaViCDKY1PpqjJkwnfFDyW2OZ5 nLgtuV1CvYKWhpP4RDy58QviEtkQcMHrufDB05BXocCl30YW9fFggPS+7wPQfHBz uFe0bShDBU6WGrbWRP00XbnKHanCe2o1ZSFFVQZZTdio6jZfByPQjx8GTF75l/w/ BfHu2pcJXL4HHG7bnjq0tbUdbE+S49EfXimafNHMHeGjuJMck4SXMSY6EhJh7wzv XvOzVSnJnl25pfKFdFOFMmv7ZM+BQy4Rzhoxaf7/p2kMnfsz9C36XF5JkMeVRbp9 LA4peKoxLlaVG2xV6K47RQTbzQ== -----END CERTIFICATE-----Generated at Wed May 13 12:28:03 2026 by rpki-client