$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft File: GzrH1RWNTKzSxkYfuudARZrT7CU.mft (raw, json) Hash identifier: k1NCD/yhWP6wHAIfnUIb0cKZzZ5BUq5xYhCwGP5+L6A= Subject key identifier: 64:84:1B:8E:96:CA:05:F9:E9:41:8E:5E:EE:65:94:5E:51:AB:BF:24 Authority key identifier: 1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25 Certificate issuer: /CN=A9198A90/serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft Manifest number: 2F Signing time: Sat 03 Oct 2026 09:27:57 +0000 Manifest this update: Sat 03 Oct 2026 09:27:57 +0000 Manifest next update: Sat 10 Oct 2026 09:27:57 +0000 Files and hashes: 1: GzrH1RWNTKzSxkYfuudARZrT7CU.crl (hash: PtyUG1ZDuchgEmX9XJGwYn1RlN5tTOYZspRNrbMm9BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198A90, serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25 Validity Not Before: Oct 3 09:27:57 2026 GMT Not After : Oct 10 09:27:57 2026 GMT Subject: CN=6ac0ca9d-621f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:fc:78:6c:37:a5:47:70:7b:e8:e0:8b:3d: a5:71:a6:0e:c7:8b:21:61:5e:93:c4:da:4b:95:3e: 1a:65:e4:6f:ee:56:da:96:1d:cf:86:22:d9:c7:0b: 3d:99:74:f0:78:ff:c5:d1:04:d8:88:7b:56:09:1b: bc:88:ee:3d:06:88:28:97:bf:83:e5:ab:e5:3f:2c: 4c:dd:92:fd:15:84:a0:c4:87:f3:92:07:fa:4a:2e: 41:ca:d7:0e:4c:51:8f:09:0f:0d:af:de:3c:49:5e: 09:54:32:be:ed:9f:71:b1:14:e5:e2:6d:3b:78:37: 9e:f4:e1:49:1e:36:2e:1d:ca:00:db:8b:ae:c0:de: 37:e5:81:5e:eb:5d:89:6f:77:22:17:5f:18:1c:fe: 64:82:20:38:ec:74:7d:b9:4d:22:ff:f9:c3:94:ef: 12:8e:e4:00:52:3f:c0:e0:88:c8:9f:28:0c:45:f6: 47:d0:9a:fd:c1:0e:ec:35:c9:5a:a4:fc:58:d5:67: 89:37:98:89:2a:1b:49:f6:03:71:d6:d7:13:f6:78: c3:f1:e5:4f:b2:65:f1:f5:1e:11:fe:fd:3a:ef:63: 67:c7:2e:c3:1e:df:8f:51:1c:9c:30:3e:64:d2:97: ed:a0:41:6b:31:b3:f3:eb:37:da:db:4f:e1:d6:49: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:1B:8E:96:CA:05:F9:E9:41:8E:5E:EE:65:94:5E:51:AB:BF:24 X509v3 Authority Key Identifier: keyid:1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:26:0c:d8:bc:ca:58:b9:ed:85:71:4d:d0:d3:c1:cd:6f:58: 83:d9:c1:41:a2:a0:76:34:5a:8f:c4:d0:85:07:f1:60:0d:d0: 11:d9:3e:84:43:a6:30:89:59:0e:2b:9a:0b:00:c5:10:52:68: 8d:00:c1:c2:9a:c3:45:7e:a4:28:d3:63:de:96:25:5b:44:61: 5e:8d:1c:48:c7:4f:23:db:6d:2a:b0:ab:ed:c4:29:6d:8b:45: a4:e8:35:55:a3:d6:72:de:ca:19:cf:c3:50:99:cb:3f:ed:6a: ea:a3:2c:7b:f6:5f:fc:5c:56:cd:0a:cb:e1:98:7d:ec:f6:76: 4e:e6:40:11:87:1a:eb:3e:7b:18:37:4e:88:e1:0b:66:a9:57: 5f:a4:ba:04:c0:f5:46:f5:56:6a:97:ca:b3:dc:c3:e4:dc:f9: e5:c9:02:97:19:df:3e:58:60:42:36:ed:e8:14:8a:8b:2f:0c: b3:96:7f:6e:6c:d0:ad:ac:13:9b:5b:ff:e4:40:f8:4d:b4:16: 8b:78:d3:23:8b:f0:24:2a:81:85:01:92:be:c6:9f:b8:96:0c: ce:72:fa:ee:0a:81:b6:04:4a:90:d3:5c:f8:95:99:92:b2:5e: b5:01:aa:10:49:66:eb:99:9b:fc:78:49:91:22:34:cf:c8:39: 16:1b:1d:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEE5MDExMC8GA1UEBRMoMUIzQUM3RDUxNThENENBQ0QyQzY0NjFGQkFFNzQwNDU5 QUQzRUMyNTAeFw0yNjEwMDMwOTI3NTdaFw0yNjEwMTAwOTI3NTdaMBgxFjAUBgNV BAMTDTZhYzBjYTlkLTYyMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqovx4bDelR3B76OCLPaVxpg7HiyFhXpPE2kuVPhpl5G/uVtqWHc+GItnHCz2Z dPB4/8XRBNiIe1YJG7yI7j0GiCiXv4Plq+U/LEzdkv0VhKDEh/OSB/pKLkHK1w5M UY8JDw2v3jxJXglUMr7tn3GxFOXibTt4N5704UkeNi4dygDbi67A3jflgV7rXYlv dyIXXxgc/mSCIDjsdH25TSL/+cOU7xKO5ABSP8DgiMifKAxF9kfQmv3BDuw1yVqk /FjVZ4k3mIkqG0n2A3HW1xP2eMPx5U+yZfH1HhH+/TrvY2fHLsMe349RHJwwPmTS l+2gQWsxs/PrN9rbT+HWSZKtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZIQbjpbK BfnpQY5e7mWUXlGrvyQwHwYDVR0jBBgwFoAUGzrH1RWNTKzSxkYfuudARZrT7CUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzU3QzdFMjJFN0I5 MzExRjFBNkU3NkQxOTZGQTMwRkJDL0d6ckgxUldOVEt6U3hrWWZ1dWRBUlpyVDdD VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3pySDFSV05US3pTeGtZZnV1ZEFSWnJUN0NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 QTkwLzU3QzdFMjJFN0I5MzExRjFBNkU3NkQxOTZGQTMwRkJDL0d6ckgxUldOVEt6 U3hrWWZ1dWRBUlpyVDdDVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVJgzYvMpYue2FcU3Q08HNb1iD2cFBoqB2NFqPxNCFB/FgDdAR2T6EQ6YwiVkO K5oLAMUQUmiNAMHCmsNFfqQo02PeliVbRGFejRxIx08j220qsKvtxClti0Wk6DVV o9Zy3soZz8NQmcs/7Wrqoyx79l/8XFbNCsvhmH3s9nZO5kARhxrrPnsYN06I4Qtm qVdfpLoEwPVG9VZql8qz3MPk3PnlyQKXGd8+WGBCNu3oFIqLLwyzln9ubNCtrBOb W//kQPhNtBaLeNMji/AkKoGFAZK+xp+4lgzOcvruCoG2BEqQ01z4lZmSsl61AaoQ SWbrmZv8eEmRIjTPyDkWGx2l -----END CERTIFICATE-----Generated at Sun Oct 4 18:41:57 2026 by rpki-client