$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: gfBQseiVHrI0V0+DoccUmVlEHH5RSaXpsNwF5Vlt864= Subject key identifier: 19:D3:98:0E:2C:DA:40:EB:06:EB:E8:80:C6:1B:FF:52:2C:27:DE:8E Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 0853 Signing time: Wed 20 May 2026 20:51:46 +0000 Manifest this update: Wed 20 May 2026 20:51:45 +0000 Manifest next update: Wed 27 May 2026 20:51:45 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: PiHEppmCk95QUT2aAAdhajYuUoEtIwerW9pazZyQGn8=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: RF8k/3negR21/g9b9yA9JjL4Ez0vyNRYqOU/AL80r3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: May 20 20:51:45 2026 GMT Not After : May 27 20:51:45 2026 GMT Subject: CN=6a0e1ee1-5fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:d3:81:89:d3:e4:77:d3:92:c3:1d:13:9c: a7:8e:60:24:81:46:7d:fd:b9:ab:2f:88:5a:a1:ef: 82:72:90:fa:0d:6f:b1:1e:97:46:cf:81:db:5b:5b: 9e:9f:2b:d9:67:0d:10:29:b1:a9:35:5e:98:a8:ca: ad:ff:a6:71:e2:0d:1b:9f:13:ce:ee:64:f4:b3:0d: d9:76:c1:dd:f2:b3:35:e2:87:8f:15:28:09:9d:62: 7d:7b:b7:ee:62:c3:6c:13:cb:19:dc:94:ea:01:1b: 4c:dc:6b:2c:94:4c:e6:5b:b8:d5:6e:cd:75:5a:82: c8:5d:b8:b8:77:8c:99:49:44:67:23:88:4d:d0:8f: 82:96:7c:4e:cc:05:3b:80:d5:9f:31:c1:32:88:83: d5:ce:15:e6:68:25:5b:38:33:5c:8e:cd:c1:ef:a1: d1:0c:09:d2:1e:e3:2d:6f:30:44:f6:89:2e:1e:2b: ba:38:5a:3c:1e:01:24:48:91:34:12:47:ad:65:6f: df:0c:69:38:23:a8:d9:97:4c:08:aa:dd:fe:df:32: 6d:e6:7f:85:e2:23:73:57:8f:6f:a0:29:b0:1d:92: 52:6d:a3:66:2e:0f:de:67:7e:ae:c8:a9:d3:75:12: 24:0a:68:58:e9:ce:0b:32:d4:97:17:a4:59:52:99: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D3:98:0E:2C:DA:40:EB:06:EB:E8:80:C6:1B:FF:52:2C:27:DE:8E X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:df:eb:2c:1d:ce:2b:92:fa:6d:02:13:de:6b:d1:b2:ad:97: 8c:50:1a:1a:3d:b5:83:36:3a:5d:26:24:c0:07:78:9a:ad:aa: d6:17:64:7e:b8:34:ae:cb:2b:6b:35:1d:a0:7d:92:a6:21:1b: 4b:21:e7:52:53:c4:18:b2:3d:8f:5a:42:7c:c3:a3:5f:5a:fc: 9a:2f:59:24:1e:04:09:39:1e:a7:8d:59:d3:4d:13:5f:7f:f6: 61:99:ee:61:c4:44:72:43:b0:3b:78:da:e1:ea:bf:be:30:e0: e5:0c:a7:22:1f:ca:0d:70:2b:9e:42:81:f4:72:d2:49:e6:d1: a2:8f:78:55:4a:5c:9e:f3:6e:0e:69:0b:20:69:b1:79:f1:72: cb:5a:e1:5d:44:5c:65:20:1c:b8:81:3e:09:59:45:c7:53:e3: a2:02:f2:76:b3:d8:b8:5b:10:34:19:fa:a5:58:7e:e3:0b:4a: d6:f6:f7:bf:f7:8d:4b:c1:01:66:15:47:5f:9b:d3:fb:1c:80: 9f:a4:13:62:85:62:ea:e3:1c:72:01:8f:4d:62:27:0b:25:5e: f2:da:9b:72:d9:09:e1:8a:57:6c:9d:1e:d4:6f:3f:8e:91:db: bd:f8:11:3e:2f:ad:44:b5:09:f8:bb:c3:a1:34:b9:17:7f:b8: fb:80:e3:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjYwNTIwMjA1MTQ1WhcNMjYwNTI3MjA1MTQ1WjAYMRYwFAYD VQQDEw02YTBlMWVlMS01ZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdXTgYnT5HfTksMdE5ynjmAkgUZ9/bmrL4haoe+CcpD6DW+xHpdGz4HbW1ue nyvZZw0QKbGpNV6YqMqt/6Zx4g0bnxPO7mT0sw3ZdsHd8rM14oePFSgJnWJ9e7fu YsNsE8sZ3JTqARtM3GsslEzmW7jVbs11WoLIXbi4d4yZSURnI4hN0I+ClnxOzAU7 gNWfMcEyiIPVzhXmaCVbODNcjs3B76HRDAnSHuMtbzBE9okuHiu6OFo8HgEkSJE0 EketZW/fDGk4I6jZl0wIqt3+3zJt5n+F4iNzV49voCmwHZJSbaNmLg/eZ36uyKnT dRIkCmhY6c4LMtSXF6RZUpk85QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnTmA4s 2kDrBuvogMYb/1IsJ96OMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALN/rLB3OK5L6bQIT3mvRsq2XjFAaGj21gzY6XSYkwAd4mq2q1hdkfrg0rssr azUdoH2SpiEbSyHnUlPEGLI9j1pCfMOjX1r8mi9ZJB4ECTkep41Z000TX3/2YZnu YcREckOwO3ja4eq/vjDg5QynIh/KDXArnkKB9HLSSebRoo94VUpcnvNuDmkLIGmx efFyy1rhXURcZSAcuIE+CVlFx1PjogLydrPYuFsQNBn6pVh+4wtK1vb3v/eNS8EB ZhVHX5vT+xyAn6QTYoVi6uMccgGPTWInCyVe8tqbctkJ4YpXbJ0e1G8/jpHbvfgR Pi+tRLUJ+LvDoTS5F3+4+4Dj6g== -----END CERTIFICATE-----Generated at Thu May 21 10:19:21 2026 by rpki-client