$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json) Hash identifier: e0XDXLbBXRexFvRtP3aTX+TUiAu8CzZnXM+N9QRe9sU= Subject key identifier: F8:A9:9F:C8:B8:D6:C3:34:E5:5E:63:5E:7D:C6:D2:1E:7B:55:AC:B7 Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft Manifest number: 0331 Signing time: Thu 21 May 2026 01:11:08 +0000 Manifest this update: Thu 21 May 2026 01:11:07 +0000 Manifest next update: Thu 28 May 2026 01:11:07 +0000 Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: yDCPofuoSM8fI8Yajh83nVaucShPjpNyfj5p+XSCVKY=) 2: DE7835E0162A11F1B1AE06BC373D8C67.roa (hash: Jp5WJKUubellDV7cpOEF0ELwISK86JVxqNhDR8XDEUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Validity Not Before: May 21 01:11:07 2026 GMT Not After : May 28 01:11:07 2026 GMT Subject: CN=6a0e5bac-298a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:83:58:0b:80:35:00:20:0a:f4:c3:19:e8: 6c:97:84:4c:ed:77:51:d8:42:87:e1:0f:80:18:a0: fe:a4:f3:fc:19:3b:d3:d8:14:da:20:4a:7c:1d:44: 02:9a:07:64:fd:ed:73:b1:32:c3:38:8f:22:e9:93: c9:1f:1c:e9:13:0d:10:b5:6e:14:5d:34:a4:f1:bb: 10:ac:06:59:dc:08:ca:f6:4d:00:de:e2:b8:1a:e5: 8d:5e:f0:02:78:5c:67:01:a2:ba:3e:20:a4:3d:ef: 8a:3e:a6:e4:7f:5a:85:80:e0:07:13:2c:b4:e8:55: d2:90:c0:70:df:f4:36:7e:05:bb:f6:a8:e4:2c:0e: 29:37:f9:bf:51:f6:60:fb:98:3d:25:26:2d:77:66: 21:63:ff:b7:52:81:d5:5d:b1:93:48:13:13:96:6e: 97:3f:1e:bc:a7:b0:4e:13:2d:87:5c:a5:c4:f1:01: 2d:1d:b5:2a:07:10:f7:20:6d:7c:7e:0d:18:dc:39: 5a:48:4e:ad:09:49:a5:64:ab:39:88:33:f0:71:b3: 4c:ff:ed:72:f8:3b:02:26:b4:5c:f2:7f:35:bc:0b: 6c:4b:2f:f2:e3:c6:7f:be:47:87:f5:b9:90:a3:eb: 82:2c:0d:b5:e3:00:f7:62:18:0a:83:6a:63:cc:5d: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:9F:C8:B8:D6:C3:34:E5:5E:63:5E:7D:C6:D2:1E:7B:55:AC:B7 X509v3 Authority Key Identifier: keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5d:7a:70:aa:41:8c:3b:82:5f:54:c8:43:4e:cc:b1:32:2e: a0:1e:ae:fe:51:d1:6e:90:63:92:72:2b:b8:63:63:3d:1b:6f: 16:9e:d3:3a:39:67:54:35:ba:bf:18:b7:75:40:e5:72:b3:de: 5d:88:70:b7:4f:2f:99:9c:5a:83:cf:7c:12:df:ec:30:f7:b1: 9a:3d:b6:fc:ac:1b:4d:85:57:5f:b0:27:f2:0c:1a:77:2a:be: 3c:2d:29:60:92:e2:da:6a:f5:3f:1b:83:e6:be:1c:97:ce:52: 0e:95:e5:b1:40:49:22:bf:f2:f4:70:b6:54:7e:a6:cf:64:f2: 79:48:65:79:83:70:63:9b:1a:f1:2a:33:ca:bc:78:09:4a:56: 33:a5:0e:a8:cf:73:09:09:51:d9:13:5b:0c:f1:87:dd:0d:35: c8:4e:2c:35:87:49:b6:7d:4f:2f:e3:6d:db:dd:42:c9:29:dc: b7:ff:58:7a:6e:54:d5:68:b7:4c:6d:1b:3b:47:36:c3:7a:c6: d7:45:21:23:7d:17:1e:d9:fe:a3:5e:f1:0f:45:7d:f5:ef:de: da:81:07:05:e0:64:c5:68:36:d2:75:3d:8e:f6:3a:29:2a:00: de:67:85:95:a7:a7:cb:ea:cd:3a:fa:e2:38:6e:46:d5:a5:21: b1:d2:3f:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNBNjcxMTAvBgNVBAUTKDgwRTBBQjE4OUZDRDcwMUVFRTQyQzkyQjkzQzE1QjZG NzQyNDgyNkEwHhcNMjYwNTIxMDExMTA3WhcNMjYwNTI4MDExMTA3WjAYMRYwFAYD VQQDEw02YTBlNWJhYy0yOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwimDWAuANQAgCvTDGehsl4RM7XdR2EKH4Q+AGKD+pPP8GTvT2BTaIEp8HUQC mgdk/e1zsTLDOI8i6ZPJHxzpEw0QtW4UXTSk8bsQrAZZ3AjK9k0A3uK4GuWNXvAC eFxnAaK6PiCkPe+KPqbkf1qFgOAHEyy06FXSkMBw3/Q2fgW79qjkLA4pN/m/UfZg +5g9JSYtd2YhY/+3UoHVXbGTSBMTlm6XPx68p7BOEy2HXKXE8QEtHbUqBxD3IG18 fg0Y3DlaSE6tCUmlZKs5iDPwcbNM/+1y+DsCJrRc8n81vAtsSy/y48Z/vkeH9bmQ o+uCLA214wD3YhgKg2pjzF04+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPipn8i4 1sM05V5jXn3G0h57Vay3MB8GA1UdIwQYMBaAFIDgqxifzXAe7kLJK5PBW290JIJq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0E2Ny9DODA2OTc5MjBE OUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNCN3VRc2tyazhGYmIzUWtn bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPQ3JHSl9OY0I3dVFza3JrOEZiYjNRa2dtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0E2Ny9DODA2OTc5MjBEOUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNC N3VRc2tyazhGYmIzUWtnbW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArF16cKpBjDuCX1TIQ07MsTIuoB6u/lHRbpBjknIruGNjPRtvFp7TOjlnVDW6 vxi3dUDlcrPeXYhwt08vmZxag898Et/sMPexmj22/KwbTYVXX7An8gwadyq+PC0p YJLi2mr1PxuD5r4cl85SDpXlsUBJIr/y9HC2VH6mz2TyeUhleYNwY5sa8Sozyrx4 CUpWM6UOqM9zCQlR2RNbDPGH3Q01yE4sNYdJtn1PL+Nt291CySnct/9Yem5U1Wi3 TG0bO0c2w3rG10UhI30XHtn+o17xD0V99e/e2oEHBeBkxWg20nU9jvY6KSoA3meF laeny+rNOvriOG5G1aUhsdI/Bg== -----END CERTIFICATE-----Generated at Thu May 21 10:24:02 2026 by rpki-client