$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: 8UZ7EsFGXJCNM+7Py2U56EmfA5Zbs2JFyxVTvz7LOS8= Subject key identifier: B5:E6:03:BD:BB:AD:B6:AF:70:3D:3D:D1:FE:FF:DE:63:30:09:AA:31 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1ACF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1AA4 Signing time: Mon 06 Apr 2026 16:13:52 +0000 Manifest this update: Mon 06 Apr 2026 16:13:52 +0000 Manifest next update: Mon 13 Apr 2026 16:13:52 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: UUSmj13qVDyaxY8or+4g3AUWq9/mwtwURJv0IRfbrkM=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 16:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6863 (0x1acf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Apr 6 16:13:52 2026 GMT Not After : Apr 13 16:13:52 2026 GMT Subject: CN=69d3dbc0-7f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:6d:f2:e2:12:e2:cf:f9:1c:06:b4:69:0a: 08:d1:56:29:b5:89:34:88:a2:a0:17:14:43:c4:23: 69:23:04:80:3a:46:41:0f:49:a3:ca:49:1f:ad:05: e5:76:d2:6a:93:25:83:1f:45:c5:83:ec:80:be:a9: 38:a4:b1:31:c1:27:b2:87:61:63:90:45:2c:94:1d: 7d:29:25:c2:ab:32:ff:ec:08:02:19:46:a2:8f:11: 16:5a:50:b2:0d:66:e7:e3:00:6d:35:97:c3:23:4a: 61:64:ce:04:be:47:a2:40:0c:b9:46:6c:d3:93:ea: e2:10:ee:7b:fe:31:09:a4:02:86:f6:de:08:29:c3: 58:55:21:d7:6c:77:cb:c3:73:f2:c1:d5:a4:ac:02: 70:9c:45:7c:b5:5e:de:7c:e2:85:fd:f6:15:33:f7: 5b:19:2f:21:fe:49:40:6d:00:17:94:3d:43:bd:c2: cc:ff:e7:64:ef:f4:0f:d0:5a:36:8a:18:19:40:9d: d0:e4:7b:3e:0c:ca:f0:13:0e:b7:a9:d2:e6:11:88: 45:ed:91:17:52:5e:6b:cc:77:97:d1:dd:22:b5:24: 6c:da:db:fa:f0:bc:11:3b:33:eb:9f:c1:3e:06:c4: 09:b4:17:93:62:e1:f7:21:6c:48:ab:f9:5a:ea:01: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:03:BD:BB:AD:B6:AF:70:3D:3D:D1:FE:FF:DE:63:30:09:AA:31 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:30:d7:a6:19:8d:e1:c1:0e:20:2a:d3:6c:b5:7b:64:cf:53: a5:d3:04:5e:ed:bd:62:e5:22:b6:49:0b:93:62:2b:ae:99:cc: 94:de:75:d0:fd:7b:e8:64:d3:48:94:35:ec:10:ba:a3:4c:1d: 0e:a2:69:1f:cc:89:f4:83:88:99:98:94:4d:92:0a:8a:49:a6: 96:73:0c:8c:d1:e8:8b:19:6e:ab:bb:9c:db:8d:3a:b9:e2:63: 1e:bf:9f:5f:82:e2:ed:5e:78:6c:4a:10:cd:56:24:cb:ef:0f: c7:e1:07:1e:49:38:72:de:d6:89:a4:75:bc:56:9c:cd:4c:ce: ef:00:42:6c:30:a0:00:d9:de:e8:66:9a:b2:0d:36:19:e8:85: 3c:a5:17:8f:f3:3d:17:57:9c:cb:44:1b:f0:44:c1:75:07:8b: ec:97:76:0b:51:64:4f:9d:19:e0:cc:28:2b:bb:1a:ff:c1:d4: b3:5d:41:ae:a0:3f:c9:96:b3:ba:60:0b:b2:15:e0:8f:fa:36: ab:c1:66:77:4e:08:a3:d6:57:a5:5e:3a:57:93:0c:41:cc:4a: 48:03:78:7d:e7:13:ed:eb:b8:db:c4:8f:13:50:e1:da:db:58: 7b:3c:94:2b:1e:44:f8:35:96:10:cc:57:64:dd:c0:4f:91:89: ca:a4:1f:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjYwNDA2MTYxMzUyWhcNMjYwNDEzMTYxMzUyWjAYMRYwFAYD VQQDEw02OWQzZGJjMC03Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrJt8uIS4s/5HAa0aQoI0VYptYk0iKKgFxRDxCNpIwSAOkZBD0mjykkfrQXl dtJqkyWDH0XFg+yAvqk4pLExwSeyh2FjkEUslB19KSXCqzL/7AgCGUaijxEWWlCy DWbn4wBtNZfDI0phZM4EvkeiQAy5RmzTk+riEO57/jEJpAKG9t4IKcNYVSHXbHfL w3PywdWkrAJwnEV8tV7efOKF/fYVM/dbGS8h/klAbQAXlD1DvcLM/+dk7/QP0Fo2 ihgZQJ3Q5Hs+DMrwEw63qdLmEYhF7ZEXUl5rzHeX0d0itSRs2tv68LwROzPrn8E+ BsQJtBeTYuH3IWxIq/la6gGtnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXmA727 rbavcD090f7/3mMwCaoxMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDDXphmN4cEOICrTbLV7ZM9TpdMEXu29YuUitkkLk2IrrpnMlN510P176GTT SJQ17BC6o0wdDqJpH8yJ9IOImZiUTZIKikmmlnMMjNHoixluq7uc2406ueJjHr+f X4Li7V54bEoQzVYky+8Px+EHHkk4ct7WiaR1vFaczUzO7wBCbDCgANne6Gaasg02 GeiFPKUXj/M9F1ecy0Qb8ETBdQeL7Jd2C1FkT50Z4MwoK7sa/8HUs11BrqA/yZaz umALshXgj/o2q8Fmd04Io9ZXpV46V5MMQcxKSAN4fecT7eu428SPE1Dh2ttYezyU Kx5E+DWWEMxXZN3AT5GJyqQfqQ== -----END CERTIFICATE-----Generated at Tue Apr 7 18:32:42 2026 by rpki-client