$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft File: GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json) Hash identifier: wS1Y5echi6fhYnt7wwnFAaY+bsUfA282daRRjpqVBd4= Subject key identifier: D5:39:20:EE:3E:AE:0C:20:E5:11:3D:05:FE:95:C7:99:8C:22:59:7B Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96 Certificate issuer: /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft Manifest number: 34 Signing time: Sun 05 Apr 2026 07:58:40 +0000 Manifest this update: Sun 05 Apr 2026 07:58:40 +0000 Manifest next update: Sun 12 Apr 2026 07:58:40 +0000 Files and hashes: 1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: /YNw7CSTfOQ+qdc5k0f+EUNlIHyqdtco3T76fmbVP2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896 Validity Not Before: Apr 5 07:58:40 2026 GMT Not After : Apr 12 07:58:40 2026 GMT Subject: CN=69d21630-0ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:b4:fb:2b:62:34:71:ac:24:eb:cf:aa:30: 60:92:d5:ed:9e:eb:8d:a2:67:c3:0a:cb:32:a1:12: 0e:96:b6:b8:f9:1d:92:59:20:9e:da:57:29:d7:c3: 6c:93:20:7f:88:02:6b:82:83:4f:2c:18:7d:e5:78: 49:5c:eb:12:32:22:62:ab:9b:3f:0c:ce:ee:53:4b: f2:96:8d:0a:e6:f2:c7:be:07:80:ae:89:e0:ca:08: 52:26:7e:28:77:4e:dc:86:27:d7:c0:38:04:05:9a: ac:0d:8c:67:a0:e9:fa:69:70:98:39:7f:59:9f:3d: 70:00:2a:60:aa:c1:b8:6e:c8:fd:f3:2b:99:45:62: 00:02:f8:44:76:e4:55:a3:db:11:78:3c:cb:77:e3: 27:32:10:12:86:56:2c:4b:6c:1f:66:f6:87:d3:7a: d0:23:4b:f6:24:c1:d9:d9:7f:79:d9:58:4b:1d:61: 23:b0:24:37:72:56:ff:2a:c2:28:61:7a:54:cb:26: 71:35:92:51:44:17:f9:54:e6:69:4b:3f:fa:80:6e: 18:08:58:5a:cf:24:9e:b5:3b:de:1d:c7:81:fd:26: df:6f:3e:12:6d:6e:ba:f2:0f:35:8c:30:c5:72:2a: 69:36:b3:03:74:70:90:eb:5d:d6:9d:a6:18:80:73: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:20:EE:3E:AE:0C:20:E5:11:3D:05:FE:95:C7:99:8C:22:59:7B X509v3 Authority Key Identifier: keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:17:4b:d6:b3:71:6f:a2:de:24:0e:0a:fe:34:cd:14:8c:bb: 0d:30:8e:2a:fb:ce:64:a4:d3:76:3d:aa:11:a8:e6:31:f8:4e: bc:dc:4f:78:94:72:8f:f9:a9:ab:ad:2c:22:fd:48:34:7b:d7: 14:7c:6f:4d:d8:96:95:77:2b:b6:b7:bc:b6:b0:44:d9:d3:78: 2b:ba:9d:fe:a1:1d:dc:2e:62:d9:ce:64:ba:42:a4:15:55:76: 0a:8b:ff:15:74:e6:77:cd:08:fb:f8:c2:06:80:4a:cf:56:83: fa:38:f2:3b:3d:13:97:68:b5:bb:11:05:e9:4d:27:34:1f:53: 42:92:62:ed:99:13:10:a3:f5:74:74:a8:b6:ce:5a:5b:df:85: 19:a0:b8:90:7a:95:13:d2:6f:56:06:c0:2b:0b:41:44:04:ef: 14:8e:16:50:f8:17:6f:30:4b:41:e2:32:dc:4e:b7:11:cd:d0: 06:a7:5d:3c:da:82:c9:08:8d:98:e2:a5:6e:ca:19:77:d1:05: d6:66:5f:54:ac:b4:6f:be:3c:5e:e7:43:0d:03:25:71:06:36: 46:53:3c:1a:46:38:72:09:71:15:e8:db:23:5b:e6:ab:e8:b1: fe:76:cf:d0:c1:97:99:eb:89:b3:9e:56:95:72:6e:a3:58:cf: 93:98:32:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NUZBNzExMC8GA1UEBRMoMUExODE0REE4OENEM0E3RkU1MzUzQjFCNUI4ODREQ0FE MTI0Nzg5NjAeFw0yNjA0MDUwNzU4NDBaFw0yNjA0MTIwNzU4NDBaMBgxFjAUBgNV BAMTDTY5ZDIxNjMwLTBhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMmLT7K2I0cawk68+qMGCS1e2e642iZ8MKyzKhEg6Wtrj5HZJZIJ7aVynXw2yT IH+IAmuCg08sGH3leElc6xIyImKrmz8Mzu5TS/KWjQrm8se+B4CuieDKCFImfih3 TtyGJ9fAOAQFmqwNjGeg6fppcJg5f1mfPXAAKmCqwbhuyP3zK5lFYgAC+ER25FWj 2xF4PMt34ycyEBKGVixLbB9m9ofTetAjS/YkwdnZf3nZWEsdYSOwJDdyVv8qwihh elTLJnE1klFEF/lU5mlLP/qAbhgIWFrPJJ61O94dx4H9Jt9vPhJtbrryDzWMMMVy Kmk2swN0cJDrXdadphiAc+XvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1Tkg7j6u DCDlET0F/pXHmYwiWXswHwYDVR0jBBgwFoAUGhgU2ojNOn/lNTsbW4hNytEkeJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RkE3LzdEMDMwN0U0RUMx OTExRjA4QUVGRkNCODNCNkY1NkJDL0doZ1Uyb2pOT25fbE5Uc2JXNGhOeXRFa2VK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2hnVTJvak5Pbl9sTlRzYlc0aE55dEVrZUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 RkE3LzdEMDMwN0U0RUMxOTExRjA4QUVGRkNCODNCNkY1NkJDL0doZ1Uyb2pOT25f bE5Uc2JXNGhOeXRFa2VKWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDPF0vWs3Fvot4kDgr+NM0UjLsNMI4q+85kpNN2PaoRqOYx+E683E94lHKP+amr rSwi/Ug0e9cUfG9N2JaVdyu2t7y2sETZ03grup3+oR3cLmLZzmS6QqQVVXYKi/8V dOZ3zQj7+MIGgErPVoP6OPI7PROXaLW7EQXpTSc0H1NCkmLtmRMQo/V0dKi2zlpb 34UZoLiQepUT0m9WBsArC0FEBO8UjhZQ+BdvMEtB4jLcTrcRzdAGp1082oLJCI2Y 4qVuyhl30QXWZl9UrLRvvjxe50MNAyVxBjZGUzwaRjhyCXEV6NsjW+ar6LH+ds/Q wZeZ64mznlaVcm6jWM+TmDKM -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:35 2026 by rpki-client