$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: BP0Cs0VW+dDnT0owISx6MVMMU4IN5h55Pg032BHjcW0= Subject key identifier: E0:68:1F:BA:A8:F9:B7:5D:B0:2C:F2:E9:A9:B5:BB:EC:63:A8:E9:80 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 03EF Signing time: Thu 21 May 2026 00:35:15 +0000 Manifest this update: Thu 21 May 2026 00:35:15 +0000 Manifest next update: Thu 28 May 2026 00:35:15 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: MsqwuEU2Oo+9lG/q7HoUUPkFMUyoB5C1TUaLVF5tnek=) 2: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: +jMfdrNgrz1Nzrt0QgBnBGHQwacuV0bREddxSJbErg4=) 3: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: tIlegLOK6K2gzpC3EMxXzCQPQ5ijkvaOZu7GF+ennV8=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: Olp3ZD+KVecOlfGoX1LPX5Wca4ynuugi2374UO2D6d4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 21 00:35:15 2026 GMT Not After : May 28 00:35:15 2026 GMT Subject: CN=6a0e5343-c2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:8e:1b:ed:fe:0b:af:11:0b:3b:c4:1a:a7: 73:ee:92:fe:10:3e:fd:1f:68:b5:00:4a:82:fb:e8: fe:da:e6:18:d3:75:81:35:67:84:07:e6:36:fa:fa: 10:e6:91:0c:c8:da:a8:df:5c:d1:d1:ef:ce:d7:82: 5d:48:cb:ae:a1:26:11:85:7b:c3:85:e0:a0:f6:b9: 88:fe:4f:85:ea:7b:3e:9d:6b:3d:bd:61:cf:d7:a9: 54:4a:61:28:e2:3f:68:d2:c7:29:bb:f0:94:24:57: dc:af:65:e6:f5:6a:5b:44:97:bf:24:7a:b3:52:87: 71:67:f8:39:eb:9e:00:af:b2:ec:d3:3b:0d:c0:49: eb:96:69:df:24:65:ca:e6:1d:92:ad:9d:03:61:70: 46:59:11:e9:b3:c6:fa:8b:9c:1a:58:f3:02:11:aa: ff:62:02:f9:d0:d8:b4:a7:31:da:66:b9:f3:dc:5a: c9:bc:44:30:d5:7d:7d:85:b2:23:9e:fc:f2:77:6d: c2:2d:74:ef:a8:a7:4c:15:24:36:cb:22:4f:d3:32: ef:d9:dc:fd:a9:1f:a3:1a:c3:62:6a:17:d4:91:95: 94:23:b7:c6:b4:b4:5f:96:bc:6c:4b:57:3e:ed:ad: 3a:6a:f4:ab:bf:d8:04:68:9f:6d:7c:a2:7f:21:40: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:1F:BA:A8:F9:B7:5D:B0:2C:F2:E9:A9:B5:BB:EC:63:A8:E9:80 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f9:cc:8d:51:b1:36:d9:fa:b6:ba:26:76:e4:32:f9:43:ef: 40:b3:f1:48:53:89:6a:65:5f:c8:2f:7b:72:92:7c:33:fe:fc: e9:0c:a3:db:39:a2:5f:91:fc:31:03:7e:07:88:8f:2f:b6:cb: b6:1b:f1:9f:28:22:6e:f3:25:8d:72:09:43:6e:c4:d3:9f:5c: 0d:96:db:87:6d:ca:fe:e0:3c:3e:22:7f:6e:76:2f:db:53:66: cb:01:2c:f0:d2:b6:13:e2:99:41:88:6c:7e:3c:01:1e:79:b4: 22:1e:74:ba:b8:77:d8:c2:67:51:0d:d2:c8:10:c4:ff:15:d2: 5a:af:00:5d:94:84:83:dc:b9:3b:70:7b:4d:e1:c1:09:0a:ce: b3:93:18:4c:c6:8f:cc:02:92:c6:1e:76:2a:97:9f:39:9c:34: d1:8e:d0:64:9d:e2:fb:f6:59:0b:8b:41:9e:d6:5d:c4:28:0c: 98:3c:3e:ac:a3:46:19:bd:c9:2c:65:5e:ec:a4:e1:10:08:1f: 07:1e:a2:00:2a:08:31:63:4d:71:5e:b0:34:cc:b2:42:55:e6: d5:3d:3d:42:0b:2d:29:6b:ab:1d:32:12:1a:36:6d:7d:d4:a4: 4e:26:85:7d:31:bf:b6:b2:d9:5f:5a:1d:3e:fa:13:db:5f:de: cf:3d:97:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjYwNTIxMDAzNTE1WhcNMjYwNTI4MDAzNTE1WjAYMRYwFAYD VQQDEw02YTBlNTM0My1jMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoWOG+3+C68RCzvEGqdz7pL+ED79H2i1AEqC++j+2uYY03WBNWeEB+Y2+voQ 5pEMyNqo31zR0e/O14JdSMuuoSYRhXvDheCg9rmI/k+F6ns+nWs9vWHP16lUSmEo 4j9o0scpu/CUJFfcr2Xm9WpbRJe/JHqzUodxZ/g5654Ar7Ls0zsNwEnrlmnfJGXK 5h2SrZ0DYXBGWRHps8b6i5waWPMCEar/YgL50Ni0pzHaZrnz3FrJvEQw1X19hbIj nvzyd23CLXTvqKdMFSQ2yyJP0zLv2dz9qR+jGsNiahfUkZWUI7fGtLRflrxsS1c+ 7a06avSrv9gEaJ9tfKJ/IUAvUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBoH7qo +bddsCzy6am1u+xjqOmAMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/nMjVGxNtn6tromduQy+UPvQLPxSFOJamVfyC97cpJ8M/786Qyj2zmiX5H8 MQN+B4iPL7bLthvxnygibvMljXIJQ27E059cDZbbh23K/uA8PiJ/bnYv21NmywEs 8NK2E+KZQYhsfjwBHnm0Ih50urh32MJnUQ3SyBDE/xXSWq8AXZSEg9y5O3B7TeHB CQrOs5MYTMaPzAKSxh52KpefOZw00Y7QZJ3i+/ZZC4tBntZdxCgMmDw+rKNGGb3J LGVe7KThEAgfBx6iACoIMWNNcV6wNMyyQlXm1T09QgstKWurHTISGjZtfdSkTiaF fTG/trLZX1odPvoT21/ezz2XCQ== -----END CERTIFICATE-----Generated at Thu May 21 16:11:27 2026 by rpki-client