$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft File: gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft (raw, json) Hash identifier: RSqcOibkIQmdCMChJYW4zSqlV835wCpNSTsVpXOWl/o= Subject key identifier: E5:77:62:87:0C:DE:48:6D:02:FC:9C:45:CC:C1:29:7E:12:01:33:F1 Authority key identifier: 81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD Certificate issuer: /CN=A91393AF/serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft Manifest number: 1B Signing time: Sat 03 Oct 2026 09:42:20 +0000 Manifest this update: Sat 03 Oct 2026 09:42:19 +0000 Manifest next update: Sat 10 Oct 2026 09:42:19 +0000 Files and hashes: 1: gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl (hash: i8nTAFw9DBbqkScgvZzcUKPuWxn1hiGaY3ioer3xUkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91393AF, serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD Validity Not Before: Oct 3 09:42:19 2026 GMT Not After : Oct 10 09:42:19 2026 GMT Subject: CN=6ac0cdfc-22c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:be:a3:5e:db:2c:54:a9:11:d2:f9:4c:c4: 16:77:75:5b:52:11:a6:df:54:46:b2:af:f5:ca:a3: 39:bd:09:08:38:6a:3f:10:91:4a:e0:33:13:64:17: 46:e9:a5:54:10:bd:fb:09:23:8a:d9:0d:c0:ee:a7: 8c:98:fc:62:cc:a3:cc:dd:2f:e8:28:2c:73:eb:1f: ee:b0:80:48:61:11:32:3b:0a:09:5e:ae:b5:13:bb: 26:d7:1b:4f:44:61:6f:14:26:05:be:99:ca:9c:fd: 31:e2:4f:f2:e7:41:3b:bd:43:9e:ce:3f:6a:96:32: 50:2f:1e:19:ab:cb:c7:eb:c1:0b:84:71:fb:51:66: b8:06:3d:dc:de:1b:b3:10:29:97:b0:9e:4d:b8:64: 0c:a0:81:13:00:e8:70:c1:a3:0d:b2:28:15:62:54: d1:a5:56:30:5c:cd:6a:56:ba:3a:88:69:48:71:a1: 86:4b:2c:2f:d0:1e:f4:f1:f9:4f:7a:80:01:c6:2f: 1b:d7:51:33:16:c4:78:1d:3a:57:71:e3:89:d0:71: a9:99:b3:7a:77:4d:b7:d1:fa:25:99:ac:f6:a0:7d: ca:2b:e7:93:0e:f0:c9:f2:e2:ce:82:24:0e:b0:6f: d4:cc:be:91:cb:76:31:7b:44:b1:c2:69:bf:23:0c: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:77:62:87:0C:DE:48:6D:02:FC:9C:45:CC:C1:29:7E:12:01:33:F1 X509v3 Authority Key Identifier: keyid:81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:eb:61:87:52:5c:f4:6a:c8:86:26:c3:38:71:47:70:5c:89: 24:7f:94:63:df:2b:83:0b:99:f5:fd:0c:97:16:be:75:89:be: 9d:36:eb:5c:a0:67:7f:e4:98:43:ca:47:c5:29:b6:2c:35:67: 24:ba:5c:b2:f2:2c:16:83:1d:9a:ed:00:54:89:80:47:aa:22: 99:f4:49:aa:1e:f6:54:63:6a:67:be:bf:b7:f1:2d:b5:35:d0: 56:88:60:9f:45:64:85:e6:0c:f3:eb:86:95:0d:7e:48:a4:02: b5:fa:6b:c7:42:9b:45:91:74:8a:2a:24:ee:77:ea:14:5c:83: f4:8f:b9:f7:66:72:8e:bd:c5:ab:ef:85:22:bf:ac:9e:69:20: 23:75:f0:f4:4f:7a:42:bc:4e:cf:51:e7:7b:1a:c6:71:de:40: 43:8f:ed:5a:d6:0f:68:f6:a2:8c:89:44:54:52:1c:31:c5:2b: 8f:0c:71:05:16:54:15:a5:e0:e4:25:22:0a:c1:18:1f:ae:cb: d8:89:a4:6e:cd:42:bc:98:c4:ef:83:bd:67:23:d2:2d:a8:ff: b1:ed:3f:3b:b2:72:79:9d:8b:0d:d7:73:10:38:21:4e:f6:fe: 14:93:5c:ca:0d:e3:d1:e9:9f:c1:6a:60:34:1b:23:0e:b3:ff: 0d:6b:5a:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTNBRjExMC8GA1UEBRMoODFBNzRBQ0JGNTlGQTc1MjBFQ0U2Q0M1QzQzNjI3QTlC REFBNzJBRDAeFw0yNjEwMDMwOTQyMTlaFw0yNjEwMTAwOTQyMTlaMBgxFjAUBgNV BAMTDTZhYzBjZGZjLTIyYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnbr6jXtssVKkR0vlMxBZ3dVtSEabfVEayr/XKozm9CQg4aj8QkUrgMxNkF0bp pVQQvfsJI4rZDcDup4yY/GLMo8zdL+goLHPrH+6wgEhhETI7CglerrUTuybXG09E YW8UJgW+mcqc/THiT/LnQTu9Q57OP2qWMlAvHhmry8frwQuEcftRZrgGPdzeG7MQ KZewnk24ZAyggRMA6HDBow2yKBViVNGlVjBczWpWujqIaUhxoYZLLC/QHvTx+U96 gAHGLxvXUTMWxHgdOldx44nQcamZs3p3TbfR+iWZrPagfcor55MO8Mny4s6CJA6w b9TMvpHLdjF7RLHCab8jDG1nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5Xdihwze SG0C/JxFzMEpfhIBM/EwHwYDVR0jBBgwFoAUgadKy/Wfp1IOzmzFxDYnqb2qcq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5M0FGLzNDQkQwN0Y4OTk1 QjExRjFCRTBDRTA5MDU4MTFGOTcwL2dhZEt5X1dmcDFJT3ptekZ4RFlucWIycWNx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2FkS3lfV2ZwMUlPem16RnhEWW5xYjJxY3EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 M0FGLzNDQkQwN0Y4OTk1QjExRjFCRTBDRTA5MDU4MTFGOTcwL2dhZEt5X1dmcDFJ T3ptekZ4RFlucWIycWNxMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCM62GHUlz0asiGJsM4cUdwXIkkf5Rj3yuDC5n1/QyXFr51ib6dNutcoGd/5JhD ykfFKbYsNWckulyy8iwWgx2a7QBUiYBHqiKZ9EmqHvZUY2pnvr+38S21NdBWiGCf RWSF5gzz64aVDX5IpAK1+mvHQptFkXSKKiTud+oUXIP0j7n3ZnKOvcWr74Uiv6ye aSAjdfD0T3pCvE7PUed7GsZx3kBDj+1a1g9o9qKMiURUUhwxxSuPDHEFFlQVpeDk JSIKwRgfrsvYiaRuzUK8mMTvg71nI9ItqP+x7T87snJ5nYsN13MQOCFO9v4Uk1zK DePR6Z/BamA0GyMOs/8Na1ro -----END CERTIFICATE-----Generated at Sun Oct 4 06:44:21 2026 by rpki-client