$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: Eq94IrNwBLq3gVxUZE1OnX4k35kZ54LtTkvcPv2mn/0= Subject key identifier: BD:58:1A:37:D7:7E:EE:6E:D1:E4:2F:67:D8:FF:EB:4D:86:62:E9:13 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 021D Signing time: Sun 05 Apr 2026 01:41:39 +0000 Manifest this update: Sun 05 Apr 2026 01:41:38 +0000 Manifest next update: Sun 12 Apr 2026 01:41:38 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: cBYFUkPxnZp4ijnRnfEA1CCs1k/47F2s6024MrdpHcQ=) 2: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=) 3: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=) 4: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=) 5: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=) 6: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: SPaCgDejvUx7FptJCD5UIANcqzATtL9+9X2RUGgGItI=) 7: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Apr 5 01:41:38 2026 GMT Not After : Apr 12 01:41:38 2026 GMT Subject: CN=69d1bdd3-8d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:1b:75:9e:f3:7f:8c:83:05:b6:a5:fa:18: c5:69:c9:82:a0:68:7d:06:2f:2f:7d:3e:11:73:f4: ea:5b:a0:f0:56:65:8b:0c:9b:79:ad:4d:73:31:bf: 02:43:db:05:b6:f2:c3:6e:88:70:3c:9e:66:80:2b: e2:40:19:b4:18:40:d0:12:d6:58:ac:79:d4:e1:dd: db:2a:c2:5e:c9:5e:8c:76:8a:e1:72:5c:0f:1a:32: d8:68:2d:98:53:b4:86:89:ac:4e:f2:53:f1:1f:4a: b9:d4:b8:a3:59:50:e1:4b:91:03:1e:14:ad:bb:0d: 02:a4:46:79:b2:4b:19:16:50:af:2d:57:32:da:80: 59:e8:fd:44:a9:66:f8:71:b8:4a:6a:bb:cf:15:41: 1c:88:32:8c:5a:b7:42:ba:41:cc:f3:56:2d:aa:0e: 96:b5:da:6f:7f:7c:a3:f8:8a:49:11:88:d1:36:16: 30:ac:33:ef:32:9f:7e:3c:6c:4d:22:91:94:5e:11: 9a:e9:07:94:b2:19:ca:5f:67:94:09:4f:a9:b1:c1: da:68:e7:9d:6e:ba:6e:67:aa:6c:8c:2d:f7:59:5f: 50:aa:a2:5a:af:93:2c:6b:1f:6a:60:90:ef:49:4b: 66:01:ac:6d:6b:96:64:1b:cd:cb:49:e9:b1:2f:ff: 3f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:58:1A:37:D7:7E:EE:6E:D1:E4:2F:67:D8:FF:EB:4D:86:62:E9:13 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0b:2d:b7:89:fb:bb:89:5a:3e:9d:59:cb:b1:d2:71:98:b2: 00:8e:93:77:87:00:e8:a2:7e:19:4a:88:17:f5:02:d1:f4:d3: 2d:f5:51:39:c0:15:ef:7e:02:fe:13:05:68:7d:d9:e2:77:9f: 28:73:80:25:37:e1:58:42:df:33:a6:27:db:0a:8a:37:f0:dd: fc:a2:1d:60:9b:d6:f3:02:e7:3c:9f:1e:e4:da:14:57:c5:14: d7:6c:e8:05:fe:2d:31:a4:53:03:d0:c4:8c:ad:7a:53:f9:00: cf:03:87:89:38:71:75:72:bd:85:54:0e:98:9e:0c:8c:27:89: ad:d2:aa:b5:87:c2:a2:2c:dc:57:d8:49:fb:18:9a:53:d6:44: 20:b5:e8:17:36:59:2c:aa:60:ba:74:e7:2e:fb:b6:69:e8:ed: 1e:61:79:7f:46:f4:24:66:95:dc:a5:b8:2e:cf:04:c7:8b:3d: f3:d4:00:45:55:08:d8:f1:37:36:26:fc:c4:92:b7:1c:be:4e: 70:89:07:25:fd:07:1e:d0:d3:12:63:f5:2e:b6:10:8f:0e:18: 02:42:c1:93:80:1e:75:20:3f:94:f4:d4:25:7f:59:ab:2f:b6: 0f:e2:f9:75:a1:42:e0:88:77:8b:c0:f1:cf:4d:cf:c3:55:64: f3:0e:b0:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjYwNDA1MDE0MTM4WhcNMjYwNDEyMDE0MTM4WjAYMRYwFAYD VQQDEw02OWQxYmRkMy04ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jgbdZ7zf4yDBbal+hjFacmCoGh9Bi8vfT4Rc/TqW6DwVmWLDJt5rU1zMb8C Q9sFtvLDbohwPJ5mgCviQBm0GEDQEtZYrHnU4d3bKsJeyV6MdorhclwPGjLYaC2Y U7SGiaxO8lPxH0q51LijWVDhS5EDHhStuw0CpEZ5sksZFlCvLVcy2oBZ6P1EqWb4 cbhKarvPFUEciDKMWrdCukHM81Ytqg6Wtdpvf3yj+IpJEYjRNhYwrDPvMp9+PGxN IpGUXhGa6QeUshnKX2eUCU+pscHaaOedbrpuZ6psjC33WV9QqqJar5Msax9qYJDv SUtmAaxta5ZkG83LSemxL/8/QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1YGjfX fu5u0eQvZ9j/602GYukTMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQstt4n7u4laPp1Zy7HScZiyAI6Td4cA6KJ+GUqIF/UC0fTTLfVROcAV734C /hMFaH3Z4nefKHOAJTfhWELfM6Yn2wqKN/Dd/KIdYJvW8wLnPJ8e5NoUV8UU12zo Bf4tMaRTA9DEjK16U/kAzwOHiThxdXK9hVQOmJ4MjCeJrdKqtYfCoizcV9hJ+xia U9ZEILXoFzZZLKpgunTnLvu2aejtHmF5f0b0JGaV3KW4Ls8Ex4s989QARVUI2PE3 Nib8xJK3HL5OcIkHJf0HHtDTEmP1LrYQjw4YAkLBk4AedSA/lPTUJX9Zqy+2D+L5 daFC4Ih3i8Dxz03Pw1Vk8w6w8Q== -----END CERTIFICATE-----Generated at Mon Apr 6 15:13:51 2026 by rpki-client