$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: LBC0+CLylV9dwPuzDP1vD2ZVjIBKMia+DCf4BPXRS7o= Subject key identifier: 6D:26:3C:0B:54:0C:6D:40:C6:2E:9D:5B:07:11:87:2C:21:EF:A5:76 Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1CE5 Signing time: Tue 18 Aug 2026 16:15:57 +0000 Manifest this update: Tue 18 Aug 2026 16:15:57 +0000 Manifest next update: Tue 25 Aug 2026 16:15:57 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: q7zOeCgqIjsJGbOA6+SLRIza+5XfM5W5KP0oz68qa8w=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 2yvcCZV+pN9jEg/q9+iV+9Rfav7HZxuqjuwplpogEBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7411 (0x1cf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Aug 18 16:15:57 2026 GMT Not After : Aug 25 16:15:57 2026 GMT Subject: CN=6a84853d-f7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:42:64:06:3c:0c:20:2b:dd:df:4e:3e:ec: 38:b6:58:99:d2:96:49:8a:a9:d4:c4:20:f7:cb:8a: 2a:9e:b4:58:90:74:a6:13:a9:c3:56:0f:a0:92:6c: 7e:9b:f9:c7:da:cc:49:0f:96:aa:5f:1a:73:9e:96: 72:64:09:7b:9e:e4:b4:c1:d0:9f:a1:88:ea:a9:73: d5:aa:97:6b:91:19:1d:cd:f0:b5:90:03:b9:ba:99: 7a:c7:31:21:3b:e8:95:03:a2:23:ce:de:86:51:8f: 18:e3:b6:71:e1:20:7a:74:f1:79:57:46:4b:22:73: fc:2e:9e:7f:2f:c1:c8:2e:d5:38:3c:2c:a1:e5:00: 46:ab:9e:07:7c:18:74:b4:b8:93:e1:f3:72:96:05: 31:a9:83:d1:6f:2c:66:16:48:f5:e5:2d:6a:b1:db: 42:ac:de:8e:68:32:18:b3:57:1f:92:26:95:ac:3c: 9e:36:d4:b3:87:d2:4e:38:1a:25:50:57:9c:79:5c: c3:9e:d9:15:ee:51:f0:8a:05:9a:41:d9:32:0c:bd: 05:dc:ac:a4:c4:20:c7:e5:78:61:fd:5b:cf:2c:5a: 43:b2:4c:0b:57:8a:7c:8a:b9:2f:f5:33:a1:14:b9: 53:b0:f2:fc:c8:ef:76:ee:2d:77:29:34:6b:17:00: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:26:3C:0B:54:0C:6D:40:C6:2E:9D:5B:07:11:87:2C:21:EF:A5:76 X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:17:cf:b3:04:da:22:bc:7e:c0:52:f4:bd:f6:3f:c0:80:12: 0b:1d:ae:a9:7a:68:77:bb:97:02:92:69:46:09:2b:56:68:be: df:89:47:dd:c7:86:c6:0c:3e:96:de:ac:30:cd:a8:83:5c:c7: 88:00:b1:b5:38:66:9a:10:cb:1f:a1:5c:d3:e4:28:1a:c1:57: 61:d5:af:72:ca:37:5d:06:1b:88:c5:7a:27:66:2e:6c:0e:b7: e0:56:09:bd:46:85:b2:3a:28:51:0a:3a:ab:66:25:49:e5:db: d3:c9:c2:4a:3b:d0:60:f5:19:36:38:4d:52:ea:b9:5f:d4:3e: 9d:1c:9c:f9:8a:d1:a2:d6:ab:78:d7:93:e0:8d:63:37:91:af: fa:04:67:b0:42:7d:ed:7e:ac:a5:66:ef:49:4a:59:7d:6e:ab: b1:dc:cf:35:08:37:35:6f:06:9d:ec:36:35:ac:15:2c:5e:92: b6:bf:98:6f:54:4e:cc:f7:9f:fa:61:fd:a1:a4:2a:71:d8:1c: 11:ad:82:78:f3:38:ec:a9:27:ca:43:93:a7:d6:d5:bf:a3:01: 89:5b:f3:b4:d2:f9:05:bd:00:87:51:6a:a2:d1:51:07:59:0a: 85:f8:1d:a2:6b:8e:4e:af:ad:7a:af:ef:28:24:6d:05:d9:39: 1d:27:e8:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjYwODE4MTYxNTU3WhcNMjYwODI1MTYxNTU3WjAYMRYwFAYD VQQDEw02YTg0ODUzZC1mN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+xCZAY8DCAr3d9OPuw4tliZ0pZJiqnUxCD3y4oqnrRYkHSmE6nDVg+gkmx+ m/nH2sxJD5aqXxpznpZyZAl7nuS0wdCfoYjqqXPVqpdrkRkdzfC1kAO5upl6xzEh O+iVA6Ijzt6GUY8Y47Zx4SB6dPF5V0ZLInP8Lp5/L8HILtU4PCyh5QBGq54HfBh0 tLiT4fNylgUxqYPRbyxmFkj15S1qsdtCrN6OaDIYs1cfkiaVrDyeNtSzh9JOOBol UFeceVzDntkV7lHwigWaQdkyDL0F3KykxCDH5Xhh/VvPLFpDskwLV4p8irkv9TOh FLlTsPL8yO927i13KTRrFwBQGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0mPAtU DG1Axi6dWwcRhywh76V2MB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxRfPswTaIrx+wFL0vfY/wIASCx2uqXpod7uXApJpRgkrVmi+34lH3ceGxgw+ lt6sMM2og1zHiACxtThmmhDLH6Fc0+QoGsFXYdWvcso3XQYbiMV6J2YubA634FYJ vUaFsjooUQo6q2YlSeXb08nCSjvQYPUZNjhNUuq5X9Q+nRyc+YrRotareNeT4I1j N5Gv+gRnsEJ97X6spWbvSUpZfW6rsdzPNQg3NW8Gnew2NawVLF6Str+Yb1ROzPef +mH9oaQqcdgcEa2CePM47KknykOTp9bVv6MBiVvztNL5Bb0Ah1FqotFRB1kKhfgd omuOTq+teq/vKCRtBdk5HSfo+w== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:40 2026 by rpki-client