$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: 7RcXlvLVYK8UsKgm67bBLv4Kxk1Aa6vQvG6ia9C3qo0= Subject key identifier: E8:42:02:6B:E1:27:BF:0D:23:36:3A:26:D6:3B:53:1B:68:B2:F7:CD Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 08A3 Signing time: Sat 04 Apr 2026 20:19:59 +0000 Manifest this update: Sat 04 Apr 2026 20:19:59 +0000 Manifest next update: Sat 11 Apr 2026 20:19:59 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: iWiACNHBh5XvCTiZArOX5eX3l/a58PMSRNkKm2dTiks=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Apr 4 20:19:59 2026 GMT Not After : Apr 11 20:19:59 2026 GMT Subject: CN=69d1726f-de23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:0c:45:69:c3:65:8f:9c:95:75:16:8a:1f: 60:54:15:3c:1f:b7:6e:56:32:ab:4b:33:37:16:80: cd:ac:2c:45:e0:43:38:eb:5f:3d:cc:91:9a:0c:6f: 90:cd:c5:c4:26:a1:93:ad:f7:65:a1:87:15:1f:d6: 30:1a:48:ed:9c:ed:06:98:ad:c6:9b:2a:b0:29:da: fd:92:e6:7f:d0:c6:38:62:40:09:c3:fb:40:93:3d: 62:6f:24:f7:56:8d:56:42:11:5b:f8:d0:d3:1a:96: 25:25:e8:3e:4c:75:2a:42:95:51:4b:5c:71:17:4b: 99:a3:a8:f0:0e:f1:6b:c5:b4:5a:73:18:22:38:24: 45:61:44:18:20:44:f1:03:5c:94:bc:0e:d9:ea:78: d6:3c:e1:d4:9f:d1:04:6d:db:9c:d9:9e:47:f0:eb: 22:fc:26:86:22:dc:dc:44:db:13:e6:d3:2b:79:c2: 67:de:50:4b:e5:37:49:2f:e4:9c:ec:60:6d:e9:ec: 82:4a:0f:bd:f0:a4:26:5b:d6:65:4d:8b:c4:38:26: be:3d:9d:a6:be:7f:91:8e:9e:fe:f8:ac:d5:69:cf: 11:57:c4:12:23:88:b7:6b:14:5b:6c:06:77:9e:0c: f6:39:ac:d0:84:6b:30:65:68:14:a3:e8:56:4e:72: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:02:6B:E1:27:BF:0D:23:36:3A:26:D6:3B:53:1B:68:B2:F7:CD X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8b:a8:98:d1:3c:b7:f9:81:a2:fa:70:15:6c:ee:f2:6e:9c: 94:bc:68:4e:c6:be:e8:8d:f8:1b:39:cf:90:de:7f:b9:e1:56: 67:8d:65:f4:92:f9:50:ab:22:25:20:68:4e:4c:a9:c4:d4:5a: 62:71:f8:52:5f:75:1d:31:8b:7b:18:46:47:7b:85:89:7e:b4: ca:c5:ba:a2:74:5b:22:e3:a8:3d:88:a3:8d:95:11:fe:fb:e5: a0:39:46:fc:6c:f1:b4:9e:b2:3e:da:d4:cd:37:04:4d:d4:7e: 83:f8:6d:5d:e6:0a:06:c6:6e:dc:48:ff:43:2c:36:a3:c9:9b: 7a:84:33:31:57:b3:7e:45:50:84:a8:a8:b4:e0:c7:7c:c8:82: 67:89:71:75:34:5b:80:16:3f:27:9a:f4:71:2a:90:cc:31:8e: 1f:c2:d5:a8:6c:56:30:86:af:ba:0b:c7:33:15:18:28:0f:77: 0b:be:c1:0d:9e:b9:3d:db:f1:bc:05:48:55:d1:73:8f:0e:d6: d8:cf:79:72:19:8b:b0:2e:bf:01:cf:0e:d1:db:28:20:3e:67: 2e:00:ba:87:a3:18:7e:9f:e5:c5:ab:23:e1:ad:e0:f2:e8:41: 85:a6:51:45:eb:b2:d3:99:31:8c:d6:d5:c7:bd:60:fd:b3:e6: d6:85:fd:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjYwNDA0MjAxOTU5WhcNMjYwNDExMjAxOTU5WjAYMRYwFAYD VQQDEw02OWQxNzI2Zi1kZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZoMRWnDZY+clXUWih9gVBU8H7duVjKrSzM3FoDNrCxF4EM46189zJGaDG+Q zcXEJqGTrfdloYcVH9YwGkjtnO0GmK3GmyqwKdr9kuZ/0MY4YkAJw/tAkz1ibyT3 Vo1WQhFb+NDTGpYlJeg+THUqQpVRS1xxF0uZo6jwDvFrxbRacxgiOCRFYUQYIETx A1yUvA7Z6njWPOHUn9EEbduc2Z5H8Osi/CaGItzcRNsT5tMrecJn3lBL5TdJL+Sc 7GBt6eyCSg+98KQmW9ZlTYvEOCa+PZ2mvn+Rjp7++KzVac8RV8QSI4i3axRbbAZ3 ngz2OazQhGswZWgUo+hWTnJggwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhCAmvh J78NIzY6JtY7UxtosvfNMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt4uomNE8t/mBovpwFWzu8m6clLxoTsa+6I34GznPkN5/ueFWZ41l9JL5UKsi JSBoTkypxNRaYnH4Ul91HTGLexhGR3uFiX60ysW6onRbIuOoPYijjZUR/vvloDlG /GzxtJ6yPtrUzTcETdR+g/htXeYKBsZu3Ej/Qyw2o8mbeoQzMVezfkVQhKiotODH fMiCZ4lxdTRbgBY/J5r0cSqQzDGOH8LVqGxWMIavugvHMxUYKA93C77BDZ65Pdvx vAVIVdFzjw7W2M95chmLsC6/Ac8O0dsoID5nLgC6h6MYfp/lxasj4a3g8uhBhaZR Reuy05kxjNbVx71g/bPm1oX9bg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:01 2026 by rpki-client