$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft File: GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json) Hash identifier: BkEJy+BnMhXK0S6Y691elwIKz7JD0N0vsEiHQ+M8Nqc= Subject key identifier: CC:3B:67:76:26:E7:E3:01:25:AE:40:36:B9:66:2F:43:72:FF:E3:7C Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft Manifest number: 9D Signing time: Sun 11 Oct 2026 08:00:10 +0000 Manifest this update: Sun 11 Oct 2026 08:00:09 +0000 Manifest next update: Sun 18 Oct 2026 08:00:09 +0000 Files and hashes: 1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: MdTVjXSfKz1fLtMC8vv6+IiEQT83tcKZ6iRpQLpS8d8=) 2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: kVIQF28+VXWQvXZxpxDtZOt5V7kSBnZhEpXWdQv6LfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Validity Not Before: Oct 11 08:00:09 2026 GMT Not After : Oct 18 08:00:09 2026 GMT Subject: CN=6acb420a-fe83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:df:2a:0a:28:2a:42:3e:c1:1b:95:e7:d5: 5b:47:2c:c2:83:6c:59:a4:79:48:f5:3a:ca:d0:87: 1f:69:18:e5:20:a5:22:f9:04:71:a8:b6:3a:70:0b: 82:36:3b:c7:02:a8:4b:5b:2f:e9:a4:8e:03:ac:fc: f1:40:65:00:1a:b4:7a:9a:6c:39:cf:96:b3:ac:68: d6:0b:d3:4d:fd:15:bf:3b:16:02:a2:65:f3:74:b4: a4:54:d5:f4:97:03:6c:61:a1:94:dc:bd:6a:77:e0: c0:e9:f1:5a:b1:57:de:b4:f9:4b:86:2c:53:aa:0a: b8:a5:31:89:75:c6:e5:9a:74:e3:89:89:49:3d:27: 03:61:c7:df:b6:d7:53:42:10:ca:93:f9:7d:6d:36: 0d:06:8d:36:86:fb:b0:56:3d:4d:69:20:f5:b8:e2: a4:6e:e6:0d:7b:83:24:07:6e:8d:95:66:a0:05:d1: 1e:96:b9:e2:2a:f2:f0:0e:87:cc:55:08:c4:d4:30: 42:21:5b:13:92:6a:43:8f:1f:40:86:75:b0:56:cb: 30:cb:1c:25:b6:de:e5:7a:2b:8c:ea:71:d3:6d:a2: ce:f1:03:ce:33:8a:60:86:64:05:ef:6d:a5:a0:de: 6c:ff:e8:21:da:fc:65:df:6f:ab:c2:47:2c:a5:18: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:67:76:26:E7:E3:01:25:AE:40:36:B9:66:2F:43:72:FF:E3:7C X509v3 Authority Key Identifier: keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:78:5c:92:ca:a8:4c:a2:82:73:4f:ee:6a:44:ef:50:7a: 02:12:bb:8e:68:eb:4a:83:6a:ec:ee:ff:f8:32:8d:10:4a:3a: a1:93:5c:c5:65:f4:c2:d7:f2:86:99:84:a7:d5:dc:bf:43:c3: b9:0f:e7:cc:5c:f9:16:9d:2f:81:4c:34:ac:94:01:ec:2c:39: 9a:bc:3c:af:04:14:7d:0f:b9:a1:0f:2e:1a:32:dc:9a:5b:06: 8e:d6:18:fa:af:6d:f2:42:66:92:0e:a4:73:c3:d4:32:a8:69: 1e:7a:25:b8:53:e7:d2:dc:3f:6a:8f:f3:cf:36:6d:b2:99:49: 93:c9:87:7e:d9:fe:9b:f2:34:fa:a9:b7:3a:f4:e8:34:6e:5d: 5b:90:b9:19:7b:d6:a4:49:4f:f8:e1:c1:28:6c:57:a5:85:91: 5f:94:c6:c6:6a:c7:7b:67:37:91:ad:50:de:fd:e1:1f:81:3a: 17:af:93:4e:8a:8d:4b:56:5a:97:44:7d:9b:44:9e:fd:f3:c0: 8b:1a:50:f1:a1:a5:db:61:0c:0e:f8:3d:06:c2:45:ed:6d:25: 1a:da:1e:ee:61:0b:f8:85:37:04:a2:78:e1:18:f3:58:95:d4: 12:ad:c7:c3:c3:91:4e:d1:a7:5e:a5:6d:d5:74:41:36:ee:02: 9b:2f:9c:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxQzIxMTAvBgNVBAUTKDE4NDMyRDUxRTYyRERBNzI5RDFGRjFCRTFCODFGQkY1 NUJEOEIzNDcwHhcNMjYxMDExMDgwMDA5WhcNMjYxMDE4MDgwMDA5WjAYMRYwFAYD VQQDEw02YWNiNDIwYS1mZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvzfKgooKkI+wRuV59VbRyzCg2xZpHlI9TrK0IcfaRjlIKUi+QRxqLY6cAuC NjvHAqhLWy/ppI4DrPzxQGUAGrR6mmw5z5azrGjWC9NN/RW/OxYComXzdLSkVNX0 lwNsYaGU3L1qd+DA6fFasVfetPlLhixTqgq4pTGJdcblmnTjiYlJPScDYcffttdT QhDKk/l9bTYNBo02hvuwVj1NaSD1uOKkbuYNe4MkB26NlWagBdEelrniKvLwDofM VQjE1DBCIVsTkmpDjx9AhnWwVsswyxwltt7leiuM6nHTbaLO8QPOM4pghmQF722l oN5s/+gh2vxl32+rwkcspRge8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMw7Z3Ym 5+MBJa5ANrlmL0Ny/+N8MB8GA1UdIwQYMBaAFBhDLVHmLdpynR/xvhuB+/Vb2LNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFDMi8wNTlGN0NCQ0RD QTMxMUYwODVENkYxNUI0MzZGNTZCQy9HRU10VWVZdDJuS2RIX0ctRzRINzlWdllz MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dFTXRVZVl0Mm5LZEhfRy1HNEg3OVZ2WXMwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFDMi8wNTlGN0NCQ0RDQTMxMUYwODVENkYxNUI0MzZGNTZCQy9HRU10VWVZdDJu S2RIX0ctRzRINzlWdllzMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdV4XJLKqEyignNP7mpE71B6AhK7jmjrSoNq7O7/+DKNEEo6oZNcxWX0wtfy hpmEp9Xcv0PDuQ/nzFz5Fp0vgUw0rJQB7Cw5mrw8rwQUfQ+5oQ8uGjLcmlsGjtYY +q9t8kJmkg6kc8PUMqhpHnoluFPn0tw/ao/zzzZtsplJk8mHftn+m/I0+qm3OvTo NG5dW5C5GXvWpElP+OHBKGxXpYWRX5TGxmrHe2c3ka1Q3v3hH4E6F6+TToqNS1Za l0R9m0Se/fPAixpQ8aGl22EMDvg9BsJF7W0lGtoe7mEL+IU3BKJ44RjzWJXUEq3H w8ORTtGnXqVt1XRBNu4Cmy+cNQ== -----END CERTIFICATE-----Generated at Mon Oct 12 19:09:22 2026 by rpki-client