$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: g486GhrUjmp96euVwnaziMXcCu7nlIOZzxOAbzAHuBs= Subject key identifier: 96:DA:2A:B1:56:4B:4B:08:1A:FA:F7:D5:58:DA:3F:86:DF:51:8A:4C Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D68 Signing time: Thu 26 Mar 2026 17:55:10 +0000 Manifest this update: Thu 26 Mar 2026 17:55:10 +0000 Manifest next update: Thu 02 Apr 2026 17:55:10 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: 14IHW7RjdvdJPKx2YQGmtx2jL5EBe1sW0RPWEMBhJz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Mar 26 17:55:10 2026 GMT Not After : Apr 2 17:55:10 2026 GMT Subject: CN=69c572fe-e240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:65:0d:68:e2:61:c7:10:6e:3a:8a:a9:4d: 47:b8:ae:8b:29:95:00:43:a5:d1:95:a6:38:d9:d8: d8:21:01:51:35:c4:89:09:0b:b8:04:0a:4f:7f:77: 71:7f:89:9e:b7:dd:a9:65:e8:43:2c:84:4e:60:47: 86:61:85:b4:d0:d0:2e:b0:e7:aa:fc:20:3a:73:36: 2a:ae:99:bf:a6:d7:c7:de:8c:35:08:e0:f9:03:4b: 68:6d:2a:79:04:28:a2:23:3d:bb:95:61:45:0a:29: eb:8e:5e:11:33:81:bf:c4:c7:65:0a:8d:8b:a6:4b: df:63:7f:37:8b:e8:1e:ff:80:1d:d7:a3:35:b3:6e: d6:1b:49:c4:2a:f3:26:22:6e:a3:44:34:ce:69:5c: 7f:b8:74:c0:b8:02:ca:15:6c:08:04:af:3e:96:15: 63:96:37:8d:80:05:b7:f0:73:87:4d:20:8b:1b:32: c1:bf:5d:01:34:e5:34:27:fb:49:f1:c3:26:7a:65: cb:20:91:1a:6d:36:98:f8:05:19:1f:ae:09:23:5a: 8c:50:88:4f:7c:2a:40:33:2c:67:d4:7b:a8:53:06: 83:e3:cc:8c:ed:55:f6:1a:f6:70:99:45:75:38:50: 37:31:0c:f0:50:6c:3e:65:86:fb:e0:9f:47:49:8e: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DA:2A:B1:56:4B:4B:08:1A:FA:F7:D5:58:DA:3F:86:DF:51:8A:4C X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d9:88:f7:ac:5d:50:66:8d:93:6d:98:cb:45:6e:1f:27:99: 5a:8a:47:f6:b0:02:15:59:ea:ad:81:af:31:0f:95:5c:e3:31: 17:c8:ba:8f:3f:de:5b:32:a3:cc:2e:74:53:8b:22:28:0f:10: c0:4b:2a:1d:81:1f:a8:f0:a6:7b:2b:b7:78:4a:37:c8:e3:d0: 21:96:30:5a:e8:7f:24:64:39:22:37:ff:57:ba:03:ad:20:ac: fb:d0:0b:f9:eb:0f:6e:6b:4c:45:c7:8e:d6:65:31:80:3a:9b: f9:25:59:d4:47:ad:d6:fc:e9:4f:94:30:c6:54:3e:57:04:0b: 4f:c4:b3:c4:fe:e6:27:fa:6e:27:41:6e:3a:fd:1f:ca:3e:c8: e5:26:ec:c8:c1:15:04:8a:4a:49:e0:48:ac:a8:d5:42:93:ca: 27:23:16:d5:0f:d9:91:2b:49:b4:ea:db:a2:b0:cd:f4:91:f5: 7f:9a:71:cb:ca:58:d8:f2:d0:91:35:9c:51:79:42:27:29:72: dd:8f:06:cc:cb:54:80:3d:2a:23:92:ce:af:d8:51:0c:b6:41: de:6d:f7:3e:d3:70:93:71:74:63:a1:f0:85:c0:89:f3:71:a3: af:25:c4:e8:b1:56:bb:60:30:68:59:b2:ba:35:ee:5b:d2:88: 0a:57:82:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjYwMzI2MTc1NTEwWhcNMjYwNDAyMTc1NTEwWjAYMRYwFAYD VQQDEw02OWM1NzJmZS1lMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYRlDWjiYccQbjqKqU1HuK6LKZUAQ6XRlaY42djYIQFRNcSJCQu4BApPf3dx f4met92pZehDLIROYEeGYYW00NAusOeq/CA6czYqrpm/ptfH3ow1COD5A0tobSp5 BCiiIz27lWFFCinrjl4RM4G/xMdlCo2LpkvfY383i+ge/4Ad16M1s27WG0nEKvMm Im6jRDTOaVx/uHTAuALKFWwIBK8+lhVjljeNgAW38HOHTSCLGzLBv10BNOU0J/tJ 8cMmemXLIJEabTaY+AUZH64JI1qMUIhPfCpAMyxn1HuoUwaD48yM7VX2GvZwmUV1 OFA3MQzwUGw+ZYb74J9HSY4CmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbaKrFW S0sIGvr31VjaP4bfUYpMMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHtmI96xdUGaNk22Yy0VuHyeZWopH9rACFVnqrYGvMQ+VXOMxF8i6jz/eWzKj zC50U4siKA8QwEsqHYEfqPCmeyu3eEo3yOPQIZYwWuh/JGQ5Ijf/V7oDrSCs+9AL +esPbmtMRceO1mUxgDqb+SVZ1Eet1vzpT5QwxlQ+VwQLT8SzxP7mJ/puJ0FuOv0f yj7I5SbsyMEVBIpKSeBIrKjVQpPKJyMW1Q/ZkStJtOrborDN9JH1f5pxy8pY2PLQ kTWcUXlCJyly3Y8GzMtUgD0qI5LOr9hRDLZB3m33PtNwk3F0Y6HwhcCJ83GjryXE 6LFWu2AwaFmyujXuW9KICleCbg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:10:00 2026 by rpki-client