$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: NyMI+GMKCweo43RET0kKA+DOGhNBRJfPLdvFyTJvm4U= Subject key identifier: F5:4D:7D:FB:97:8C:5A:66:53:72:7A:25:9E:98:79:DC:88:9E:EB:FC Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 0268 Signing time: Tue 25 Aug 2026 01:28:16 +0000 Manifest this update: Tue 25 Aug 2026 01:28:15 +0000 Manifest next update: Tue 01 Sep 2026 01:28:15 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: 4oxIM9z5G4xvQ7+TFSXisCQu2rwxH5EviO7nlEO/i3w=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=) 3: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=) 4: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: Ih1eHSX5Tc/5vdlyW9LDswTRplGY8S174GyJpWgveNI=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=) 6: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=) 7: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 01:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Aug 25 01:28:15 2026 GMT Not After : Sep 1 01:28:15 2026 GMT Subject: CN=6a8cefaf-ad9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:9a:65:cd:7b:4f:87:05:f0:72:77:5e:7e: f9:f5:b7:b6:43:e2:12:9e:70:07:d5:30:f0:4a:0d: 1f:19:7d:cf:67:00:97:3c:0c:c1:1b:a7:d6:82:07: 30:a5:f7:07:8a:00:a5:e9:7f:24:28:9e:62:48:4a: 8a:e6:8b:77:ac:47:3c:92:a8:62:76:f2:3c:14:4f: e7:35:37:b5:ff:99:10:d8:c6:94:3a:32:50:bf:52: db:ef:4e:ed:5c:ef:1e:d6:fe:c4:42:bb:8b:95:ac: 80:f3:98:ee:15:48:f5:16:c2:a9:6e:46:2c:c1:ef: 0c:4b:99:e0:3b:a6:b2:28:0e:3e:8f:75:15:e6:11: 43:9c:a3:f8:30:ee:a1:66:1a:87:63:9c:2e:6b:8d: 77:b8:de:9d:ae:73:35:d3:14:0b:86:b0:95:81:54: 8f:4e:4a:c6:0e:71:6c:e6:4b:4a:e2:07:5e:81:27: cc:fc:9d:00:75:3c:40:35:97:9a:eb:38:62:79:f0: 34:7f:d0:8d:03:89:a7:ca:5d:d4:96:6c:0f:eb:24: 6a:19:fa:19:99:8b:cb:6e:64:46:ec:f2:92:d5:2c: ab:f3:54:90:17:50:c8:e3:cf:2b:f7:cc:f0:72:1b: d2:b2:b8:d0:a2:86:23:c3:a2:07:1a:5f:8b:bd:e1: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4D:7D:FB:97:8C:5A:66:53:72:7A:25:9E:98:79:DC:88:9E:EB:FC X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a0:ea:59:4e:5d:7e:a7:5f:11:fb:c3:1f:03:6a:0f:6b:53: 02:14:1e:67:3c:80:c3:fa:62:2d:1c:04:a0:0e:76:8b:e6:e2: 0a:61:f3:dd:81:8e:ea:57:12:f3:f3:90:30:90:ed:7a:c2:79: ea:c9:a6:37:5b:92:74:f7:ee:3b:33:8f:53:04:89:9c:94:23: 73:03:8b:0d:29:ee:0e:ff:42:66:58:4e:4c:f1:18:29:5f:a2: 44:7d:b3:1c:e6:62:06:1c:e1:fa:aa:93:15:92:ed:dc:b6:2d: 78:31:b0:8e:04:0b:f5:df:cc:11:fa:92:fc:fd:05:c9:08:9c: 60:5c:12:2b:bb:de:c4:28:ba:11:d0:67:64:e6:50:97:86:c4: a8:0f:79:9a:da:f7:ad:44:d7:40:1a:2a:4f:b6:76:01:ac:76: ea:e2:7c:06:8d:2e:9f:05:1b:81:0b:84:66:da:a9:56:f9:da: 8f:d9:50:78:ea:fb:f3:f0:98:eb:17:27:71:b1:1c:b3:60:f1: 2f:99:11:08:55:ed:19:e0:a0:a7:58:17:e6:80:34:04:bc:54: f5:d1:9e:56:8c:b7:58:26:46:eb:50:d3:61:d4:02:10:31:63: 15:84:43:7f:07:f9:5e:8b:11:4d:f4:58:f9:27:d7:fb:b3:ad: 41:1d:7d:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjYwODI1MDEyODE1WhcNMjYwOTAxMDEyODE1WjAYMRYwFAYD VQQDEw02YThjZWZhZi1hZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLqaZc17T4cF8HJ3Xn759be2Q+ISnnAH1TDwSg0fGX3PZwCXPAzBG6fWggcw pfcHigCl6X8kKJ5iSEqK5ot3rEc8kqhidvI8FE/nNTe1/5kQ2MaUOjJQv1Lb707t XO8e1v7EQruLlayA85juFUj1FsKpbkYswe8MS5ngO6ayKA4+j3UV5hFDnKP4MO6h ZhqHY5wua413uN6drnM10xQLhrCVgVSPTkrGDnFs5ktK4gdegSfM/J0AdTxANZea 6zhiefA0f9CNA4mnyl3UlmwP6yRqGfoZmYvLbmRG7PKS1Syr81SQF1DI488r98zw chvSsrjQooYjw6IHGl+LveHgvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVNffuX jFpmU3J6JZ6YedyInuv8MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANaDqWU5dfqdfEfvDHwNqD2tTAhQeZzyAw/piLRwEoA52i+biCmHz3YGO6lcS 8/OQMJDtesJ56smmN1uSdPfuOzOPUwSJnJQjcwOLDSnuDv9CZlhOTPEYKV+iRH2z HOZiBhzh+qqTFZLt3LYteDGwjgQL9d/MEfqS/P0FyQicYFwSK7vexCi6EdBnZOZQ l4bEqA95mtr3rUTXQBoqT7Z2Aax26uJ8Bo0unwUbgQuEZtqpVvnaj9lQeOr78/CY 6xcncbEcs2DxL5kRCFXtGeCgp1gX5oA0BLxU9dGeVoy3WCZG61DTYdQCEDFjFYRD fwf5XosRTfRY+SfX+7OtQR19Fg== -----END CERTIFICATE-----Generated at Wed Aug 26 23:59:51 2026 by rpki-client