$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: U6ITQ2bBS7cSFGGgkD+uxzn8igPU0+dlNOxjyJwgzds= Subject key identifier: 12:13:E1:FB:29:20:CD:39:0F:29:7D:51:0E:D1:AE:EF:7B:93:15:1A Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0F39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0F2B Signing time: Thu 08 Oct 2026 17:41:04 +0000 Manifest this update: Thu 08 Oct 2026 17:41:04 +0000 Manifest next update: Thu 15 Oct 2026 17:41:04 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: 5SgJ9EfumCfFJXKYrkT4L8G9jYzZh7JuYGFUC365mjo=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: qYFfAzLJ4mEmxJK5ZBfYrrSeoianiaMz/Ln8zWmMrHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3897 (0xf39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Oct 8 17:41:04 2026 GMT Not After : Oct 15 17:41:04 2026 GMT Subject: CN=6ac7d5b0-cd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cb:91:37:0b:6c:52:46:81:ef:16:ab:ec:e4: 00:16:d8:6d:1d:2e:fd:d0:87:81:7a:6a:3e:af:c1: b0:44:ad:9b:ee:49:dd:ca:98:5d:50:51:11:8e:69: 24:23:e7:87:7e:48:99:ef:3f:0c:ae:7e:61:81:93: 2e:26:ce:15:6e:54:20:c3:d8:9f:71:4b:ee:58:83: 57:9e:03:c4:7e:c5:b2:a0:53:50:5c:f5:29:85:2b: a0:23:20:7e:b5:7d:ac:51:04:b7:34:a5:f4:9f:70: 21:ec:32:ca:c9:a9:3b:7b:d8:6a:ca:6c:be:3d:5d: 15:c5:cf:98:36:32:25:58:5e:54:0f:8c:59:c8:f0: 87:b9:5d:65:c2:7d:9c:ed:f5:3e:bc:db:c9:29:b5: 7a:44:e4:5c:92:42:3d:be:f4:39:83:4a:c4:1e:9b: aa:29:5a:33:0c:68:39:16:5f:6d:97:70:a1:31:40: f7:b0:fe:49:b7:7d:cd:94:d3:98:47:1c:7f:1b:14: ca:35:54:36:7d:5d:9b:4e:e9:19:8a:4e:19:ea:24: fd:67:33:a8:90:61:d6:de:60:be:d9:38:46:18:ea: 63:9a:5d:f9:02:8a:ed:a9:0e:8d:65:34:c6:2e:23: 33:66:a3:cc:9a:94:8d:db:8d:c6:76:7d:29:53:95: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:E1:FB:29:20:CD:39:0F:29:7D:51:0E:D1:AE:EF:7B:93:15:1A X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:60:71:27:f6:f7:32:64:eb:8e:84:84:cd:86:b6:d4:50:12: 88:b2:cd:fd:be:62:3c:61:7f:f9:d5:c2:7d:8a:c0:6b:bb:26: 00:74:d5:ad:07:1e:f2:fb:27:76:e4:11:d1:f6:de:34:e4:30: 1b:6f:79:7a:d5:42:8f:eb:b4:81:0f:8a:e7:e7:4b:e5:72:e2: 2a:3d:bb:68:c9:50:f3:23:7d:6f:a6:a1:2d:73:9a:1d:e3:36: 42:d6:1a:a4:7d:69:36:01:5a:50:70:b0:bf:aa:bb:ae:81:89: ae:b3:57:6d:17:4c:d8:43:a5:cf:02:95:58:fa:71:80:2e:13: 7c:38:d5:bf:20:17:d2:e7:6f:21:b3:e8:ae:a9:80:0e:00:6f: d9:00:7a:fd:37:48:2e:c9:a6:eb:ba:10:0c:0c:73:70:90:58: 70:52:47:40:bd:7d:97:12:4c:17:c2:68:78:a0:3a:c5:a1:cf: 55:2b:68:7d:f9:51:5e:0f:57:46:a8:f3:75:7f:22:ad:03:0f: 8f:c5:38:77:6b:2b:d0:9e:73:a8:20:96:94:40:ee:d1:48:e8: 6b:ed:79:91:62:6b:e6:5d:40:a0:1d:30:49:a6:09:3a:f2:52: 39:76:ce:01:e4:0d:18:19:e6:c9:6e:0e:6c:5a:39:fc:f9:da: 70:26:21:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjYxMDA4MTc0MTA0WhcNMjYxMDE1MTc0MTA0WjAYMRYwFAYD VQQDEw02YWM3ZDViMC1jZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsuRNwtsUkaB7xar7OQAFthtHS790IeBemo+r8GwRK2b7kndyphdUFERjmkk I+eHfkiZ7z8Mrn5hgZMuJs4VblQgw9ifcUvuWINXngPEfsWyoFNQXPUphSugIyB+ tX2sUQS3NKX0n3Ah7DLKyak7e9hqymy+PV0Vxc+YNjIlWF5UD4xZyPCHuV1lwn2c 7fU+vNvJKbV6RORckkI9vvQ5g0rEHpuqKVozDGg5Fl9tl3ChMUD3sP5Jt33NlNOY Rxx/GxTKNVQ2fV2bTukZik4Z6iT9ZzOokGHW3mC+2ThGGOpjml35AortqQ6NZTTG LiMzZqPMmpSN243Gdn0pU5ULkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIT4fsp IM05Dyl9UQ7Rru97kxUaMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXmBxJ/b3MmTrjoSEzYa21FASiLLN/b5iPGF/+dXCfYrAa7smAHTVrQce8vsn duQR0fbeNOQwG295etVCj+u0gQ+K5+dL5XLiKj27aMlQ8yN9b6ahLXOaHeM2QtYa pH1pNgFaUHCwv6q7roGJrrNXbRdM2EOlzwKVWPpxgC4TfDjVvyAX0udvIbPorqmA DgBv2QB6/TdILsmm67oQDAxzcJBYcFJHQL19lxJMF8JoeKA6xaHPVStofflRXg9X RqjzdX8irQMPj8U4d2sr0J5zqCCWlEDu0Ujoa+15kWJr5l1AoB0wSaYJOvJSOXbO AeQNGBnmyW4ObFo5/PnacCYh3A== -----END CERTIFICATE-----Generated at Thu Oct 8 23:30:58 2026 by rpki-client