$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: TN5bes0NMMPYSHz9swVA3BYjHeCOrr3Ovm9JyBB9lxg= Subject key identifier: FE:BD:27:D7:E5:F6:51:07:6E:CE:11:63:1D:3A:38:4D:9A:01:57:C4 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 241E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 23BD Signing time: Mon 26 Oct 2026 15:48:20 +0000 Manifest this update: Mon 26 Oct 2026 15:48:19 +0000 Manifest next update: Mon 02 Nov 2026 15:48:19 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: a/Xq+6VysCbdfdzNtWIDB+L8o2KyE6zVLjhATDBaUOg=) 2: 07412A002D3111F1B77CD687BC833773.roa (hash: m3KakV6D8uqf1vPRe2G0m6SVTDUuzIzt+KLbrHZc+PI=) 3: 13DD1B662D3111F180CCA088BC833773.roa (hash: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=) 4: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9246 (0x241e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Oct 26 15:48:19 2026 GMT Not After : Nov 2 15:48:19 2026 GMT Subject: CN=6adf7644-f7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:e8:0e:25:b5:3d:3a:70:b9:91:40:31:ee: 88:1e:24:1a:9d:6a:3d:48:a5:8f:39:67:39:d0:c6: 00:1e:97:24:d2:a1:b4:32:8c:4e:b6:63:3e:7a:18: 52:8d:13:b1:36:dc:01:b9:c0:07:07:a9:02:f5:87: 84:e8:34:40:8c:fa:76:f8:60:22:d9:b1:aa:b0:a9: 68:66:11:e8:69:13:d3:69:dc:76:28:96:0e:a2:47: 69:d9:71:02:95:a7:f1:3a:cb:69:2f:75:29:63:04: 2e:8c:5f:46:9a:1f:95:d0:2e:e0:ca:b9:84:9f:f9: b3:49:a0:c8:0a:0e:25:9d:ec:ff:46:a0:24:cf:0d: 55:71:3d:f7:35:1c:86:a1:25:b8:4f:22:01:3d:32: d0:a7:50:f9:50:5e:6b:7b:43:c7:e6:94:30:82:98: fb:2f:e4:31:2f:fb:de:ac:58:1e:19:4e:65:27:cb: 9a:39:b2:b9:43:47:3b:48:d1:e7:77:f9:71:88:d0: 63:11:c3:ae:47:d6:f5:31:64:b0:4a:b9:a6:db:fa: 4d:bd:32:b3:5e:b6:5d:dd:96:73:45:14:36:02:0f: 01:d1:61:53:9a:f0:14:8d:19:f4:e5:dd:5e:89:da: fe:59:c4:1b:2e:d7:dd:17:6c:a3:15:8f:d1:54:70: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:27:D7:E5:F6:51:07:6E:CE:11:63:1D:3A:38:4D:9A:01:57:C4 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0f:52:f6:20:53:bf:69:5a:f8:bf:e6:d5:9f:8f:9e:74:73: 92:3d:80:94:89:c5:60:40:91:d4:59:0f:85:a2:3c:86:c5:b6: 22:c9:1f:82:2e:71:d1:38:b5:37:d1:39:ed:a8:4b:ba:0a:90: 38:0c:0d:38:1a:e5:5c:cb:12:fa:3e:78:9a:89:13:f7:20:ed: 9b:cc:7a:ab:15:2b:f0:1d:ed:fb:05:db:87:ac:44:33:46:58: d4:71:d1:77:65:2b:24:41:9f:9b:9b:c6:e3:d5:65:7b:00:b4: a5:af:68:4f:1e:b0:96:33:58:d0:e4:88:25:39:85:5f:5d:2d: ca:f9:da:db:ba:4c:f3:d9:fc:ab:83:12:5a:b5:26:c6:08:ae: e0:d8:03:7d:a3:07:7e:50:0c:3f:cc:23:3b:f4:d8:4b:71:78: 22:c4:65:42:eb:dd:f2:85:ec:69:a3:24:1b:14:dd:87:7c:fe: e6:d9:46:ab:93:46:58:1f:e5:38:1f:58:3d:d7:f1:d2:2e:26: b5:1f:e8:af:82:66:b7:9b:40:ae:99:be:34:13:90:5b:46:16: 31:0e:7e:d6:be:b9:96:85:4e:b2:20:50:c4:f5:81:88:d7:7c: 84:c0:dc:45:e9:a1:dd:3a:a7:52:c0:c0:f3:50:5e:50:9e:93: a1:e7:7a:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjYxMDI2MTU0ODE5WhcNMjYxMTAyMTU0ODE5WjAYMRYwFAYD VQQDEw02YWRmNzY0NC1mN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTLoDiW1PTpwuZFAMe6IHiQanWo9SKWPOWc50MYAHpck0qG0MoxOtmM+ehhS jROxNtwBucAHB6kC9YeE6DRAjPp2+GAi2bGqsKloZhHoaRPTadx2KJYOokdp2XEC lafxOstpL3UpYwQujF9Gmh+V0C7gyrmEn/mzSaDICg4lnez/RqAkzw1VcT33NRyG oSW4TyIBPTLQp1D5UF5re0PH5pQwgpj7L+QxL/verFgeGU5lJ8uaObK5Q0c7SNHn d/lxiNBjEcOuR9b1MWSwSrmm2/pNvTKzXrZd3ZZzRRQ2Ag8B0WFTmvAUjRn05d1e idr+WcQbLtfdF2yjFY/RVHDsqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP69J9fl 9lEHbs4RYx06OE2aAVfEMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPw9S9iBTv2la+L/m1Z+PnnRzkj2AlInFYECR1FkPhaI8hsW2Iskfgi5x0Ti1 N9E57ahLugqQOAwNOBrlXMsS+j54mokT9yDtm8x6qxUr8B3t+wXbh6xEM0ZY1HHR d2UrJEGfm5vG49VlewC0pa9oTx6wljNY0OSIJTmFX10tyvna27pM89n8q4MSWrUm xgiu4NgDfaMHflAMP8wjO/TYS3F4IsRlQuvd8oXsaaMkGxTdh3z+5tlGq5NGWB/l OB9YPdfx0i4mtR/or4Jmt5tArpm+NBOQW0YWMQ5+1r65loVOsiBQxPWBiNd8hMDc Remh3TqnUsDA81BeUJ6Toed6vA== -----END CERTIFICATE-----Generated at Wed Oct 28 11:41:31 2026 by rpki-client