$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: EQqZd3VSgWTtvLXYpBKTHiFf/X/9z3MvFwPPiY0I9g0= Subject key identifier: 33:4A:FF:76:E0:C8:5F:80:58:88:06:13:C9:58:71:85:72:B4:F1:01 Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 02A8 Signing time: Sat 10 Oct 2026 17:28:36 +0000 Manifest this update: Sat 10 Oct 2026 17:28:36 +0000 Manifest next update: Sat 17 Oct 2026 17:28:36 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: JXELCcDS5std34hr0lIXWzae5gF+o79Z91WwYGJlTZA=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: s3pplahrtkEIiqFvq9bDswEXkbohC1ZEoUg/qiNs0L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Oct 10 17:28:36 2026 GMT Not After : Oct 17 17:28:36 2026 GMT Subject: CN=6aca75c4-d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:e5:d2:36:e8:02:49:a0:12:f9:39:ae:b3: a6:fb:2d:da:07:65:a5:ab:2c:22:0a:9c:24:1f:ce: 1d:4e:48:10:e0:c1:0e:1a:ac:89:5f:e7:6c:bb:4c: 5a:79:63:7d:26:93:da:41:07:7b:af:58:cd:1e:0c: dc:04:8a:ae:df:83:d4:95:03:68:0b:bf:97:c8:18: 8b:16:b2:ab:df:e0:d8:ef:ab:90:e2:e7:16:fa:2f: 7d:cf:07:73:38:09:f1:b3:64:4f:28:3b:d7:0a:eb: 16:94:71:31:12:dd:87:d1:ea:ce:a5:47:0c:16:5d: 22:58:c2:a1:b0:c4:21:b1:a9:a1:ec:c7:3c:57:2e: 4b:d9:7f:1f:37:fc:25:3b:80:47:96:d2:c0:2e:fb: f9:c5:1e:75:ff:92:b7:a1:82:32:38:50:db:a1:14: cc:3c:c4:7b:a2:06:79:d6:73:2d:06:52:ce:3b:aa: 98:6f:a6:b9:f6:fe:7d:ff:70:7d:6c:f1:0a:93:1d: 4f:9a:98:24:1a:7a:f5:42:6d:bb:d1:d2:54:18:ee: 3e:98:f2:c4:68:07:b4:c4:e7:1e:cf:52:3c:37:e5: eb:0a:7e:ff:59:e0:ba:39:87:67:d2:9e:d5:67:42: 33:6f:2b:ae:bf:74:22:f3:86:20:a5:a1:b1:ae:4e: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:FF:76:E0:C8:5F:80:58:88:06:13:C9:58:71:85:72:B4:F1:01 X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e4:eb:f8:28:2a:a5:e0:cf:6b:20:b9:bc:84:b5:d5:13:a4: a9:50:d1:8b:f8:8c:24:02:10:de:8f:d4:4e:c1:f9:d1:7a:d4: 88:fb:71:22:64:52:d8:51:1f:ab:e8:0d:bf:13:e1:35:a6:f9: 1b:e8:e8:77:77:e8:27:70:65:3f:38:d5:92:ca:ab:83:9e:13: d0:5b:6d:02:49:07:b0:76:43:11:f5:23:78:b9:94:4f:0e:24: 9e:f5:23:ef:15:b8:ec:af:13:a7:61:b8:3c:36:bc:70:56:21: c4:0f:7b:e1:d9:77:1f:2b:37:e5:ec:1a:bb:59:ca:dd:f5:03: 10:40:65:40:4c:c9:ec:7a:50:e3:98:1c:8c:37:cb:e5:3f:b2: 6b:c6:56:f4:af:93:9c:cc:b0:e9:60:ac:96:3d:0a:f6:e2:97: 77:8d:3d:c3:72:86:9c:c5:52:f3:a7:86:55:e1:01:7f:6a:81: 35:b9:ae:cb:0e:c3:d2:e3:1f:33:39:8e:a3:fc:8e:98:66:ba: 3a:da:76:e1:8d:83:8d:96:e9:2e:d3:94:34:dd:63:3b:d6:0f: 52:20:be:50:e6:e4:93:33:07:31:30:59:47:3f:3a:07:0f:69: a5:91:11:1a:51:d0:24:3a:7a:13:b3:f8:db:6f:11:c4:94:8e: 5f:79:84:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjYxMDEwMTcyODM2WhcNMjYxMDE3MTcyODM2WjAYMRYwFAYD VQQDEw02YWNhNzVjNC1kNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7Tl0jboAkmgEvk5rrOm+y3aB2WlqywiCpwkH84dTkgQ4MEOGqyJX+dsu0xa eWN9JpPaQQd7r1jNHgzcBIqu34PUlQNoC7+XyBiLFrKr3+DY76uQ4ucW+i99zwdz OAnxs2RPKDvXCusWlHExEt2H0erOpUcMFl0iWMKhsMQhsamh7Mc8Vy5L2X8fN/wl O4BHltLALvv5xR51/5K3oYIyOFDboRTMPMR7ogZ51nMtBlLOO6qYb6a59v59/3B9 bPEKkx1PmpgkGnr1Qm270dJUGO4+mPLEaAe0xOcez1I8N+XrCn7/WeC6OYdn0p7V Z0Izbyuuv3Qi84YgpaGxrk59HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNK/3bg yF+AWIgGE8lYcYVytPEBMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOTr+CgqpeDPayC5vIS11ROkqVDRi/iMJAIQ3o/UTsH50XrUiPtxImRS2FEf q+gNvxPhNab5G+jod3foJ3BlPzjVksqrg54T0FttAkkHsHZDEfUjeLmUTw4knvUj 7xW47K8Tp2G4PDa8cFYhxA974dl3Hys35ewau1nK3fUDEEBlQEzJ7HpQ45gcjDfL 5T+ya8ZW9K+TnMyw6WCslj0K9uKXd409w3KGnMVS86eGVeEBf2qBNbmuyw7D0uMf MzmOo/yOmGa6Otp24Y2DjZbpLtOUNN1jO9YPUiC+UObkkzMHMTBZRz86Bw9ppZER GlHQJDp6E7P4228RxJSOX3mEFg== -----END CERTIFICATE-----Generated at Sun Oct 11 18:59:04 2026 by rpki-client