$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: I+7T0A/XXIXfaKLk/5PnxI/suTGDhZoywoOKZZkS9Lg= Subject key identifier: 1E:FD:E1:DE:37:72:CC:2F:78:55:3C:6A:67:48:DF:17:60:17:CE:37 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 0747 Signing time: Mon 20 Apr 2026 20:15:46 +0000 Manifest this update: Mon 20 Apr 2026 20:15:46 +0000 Manifest next update: Mon 27 Apr 2026 20:15:46 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 1Ly+jZvP4R/upheXFumiy1gamVWB7drPuEm+Yq5q8+g=) 2: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=) 3: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Apr 20 20:15:46 2026 GMT Not After : Apr 27 20:15:46 2026 GMT Subject: CN=69e68972-802f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:56:a7:0e:ef:92:85:0c:35:5e:92:7c:4a: 41:17:81:04:9b:6d:1e:aa:67:3a:13:9d:d4:ff:d5: da:3c:63:50:4b:ed:c8:d1:13:0e:01:5c:ba:51:c4: 22:70:5d:09:fd:c7:17:fd:f2:42:2f:88:77:f0:76: 2f:98:c6:a6:0b:d4:aa:16:f6:c3:4d:63:b0:ca:cb: 52:44:2c:46:47:16:1d:43:9d:66:0b:6b:8c:fa:93: 03:ec:90:c4:08:fa:ff:ee:c9:3b:66:1d:41:5c:2e: cb:0a:6f:16:ea:2f:02:36:3f:20:06:f6:f3:22:ed: 2f:00:c6:31:06:82:a6:9f:25:1a:3c:d5:6f:aa:4c: e7:f6:6a:30:2c:d7:52:58:ec:e8:b1:f4:b7:82:f4: aa:1d:77:dc:70:22:47:83:b2:48:e2:ce:bb:c7:1b: af:e8:d3:fa:ae:54:fd:8a:9f:21:c8:10:5f:dd:6d: 2d:44:81:b5:9e:64:59:b2:ca:38:33:f9:1b:20:cf: 8c:d5:45:18:01:35:a0:c1:2e:a5:cb:e2:e6:3f:9a: 3e:4a:23:f9:3e:f4:53:73:33:42:c1:e6:a6:2e:2d: 9f:44:b3:01:b2:da:09:40:f2:ab:2a:c9:35:ae:17: 37:e1:c1:0c:3a:b3:c5:53:d3:cf:a4:66:59:89:7a: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FD:E1:DE:37:72:CC:2F:78:55:3C:6A:67:48:DF:17:60:17:CE:37 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:8c:ab:4b:9d:4e:43:4a:3d:55:4f:cf:70:9c:3e:e9:35:44: d4:1a:f2:17:7a:c0:0d:e2:02:a4:89:ba:dc:55:f0:0c:49:7c: 70:ab:75:60:6f:98:ad:e5:31:9f:5b:ae:bf:e1:92:1d:d1:42: 9c:5a:d6:58:dd:63:14:8a:fb:38:89:27:14:01:8c:8e:c6:69: 45:96:0a:aa:e6:c8:06:a0:d3:18:cf:bc:42:0f:f1:81:f8:26: de:14:65:fc:c0:5e:d7:6a:8a:b1:3c:69:3d:5a:74:5a:9b:60: 35:9d:3e:b6:b9:c3:ba:4f:ef:18:f5:6f:f3:d9:f7:c7:b9:d3: ae:b8:00:d6:97:4f:cc:6d:c8:6c:03:4b:16:16:43:4f:3c:e9: f0:06:d3:9c:5a:0f:6f:c3:31:61:29:ed:2d:0e:7d:a1:1b:50: 98:3f:e2:e4:a1:1f:a8:64:74:17:88:42:ac:8d:79:83:e4:0e: 10:06:f8:e8:47:af:bd:c8:9d:35:b5:ee:c1:4a:f8:dc:0b:22: 97:0a:67:65:bc:ee:c8:a8:0b:a3:8d:2f:1c:ac:cd:e5:af:43: 0a:ee:79:5f:51:fd:67:54:77:26:da:56:6d:99:72:d1:79:7e: 5c:fc:eb:33:14:e3:2e:fc:28:57:5f:b7:04:b5:3c:8a:de:f0: e8:a6:1e:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjYwNDIwMjAxNTQ2WhcNMjYwNDI3MjAxNTQ2WjAYMRYwFAYD VQQDEw02OWU2ODk3Mi04MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+xWpw7vkoUMNV6SfEpBF4EEm20eqmc6E53U/9XaPGNQS+3I0RMOAVy6UcQi cF0J/ccX/fJCL4h38HYvmMamC9SqFvbDTWOwystSRCxGRxYdQ51mC2uM+pMD7JDE CPr/7sk7Zh1BXC7LCm8W6i8CNj8gBvbzIu0vAMYxBoKmnyUaPNVvqkzn9mowLNdS WOzosfS3gvSqHXfccCJHg7JI4s67xxuv6NP6rlT9ip8hyBBf3W0tRIG1nmRZsso4 M/kbIM+M1UUYATWgwS6ly+LmP5o+SiP5PvRTczNCweamLi2fRLMBstoJQPKrKsk1 rhc34cEMOrPFU9PPpGZZiXpvSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB794d43 cswveFU8amdI3xdgF843MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQoyrS51OQ0o9VU/PcJw+6TVE1BryF3rADeICpIm63FXwDEl8cKt1YG+YreUx n1uuv+GSHdFCnFrWWN1jFIr7OIknFAGMjsZpRZYKqubIBqDTGM+8Qg/xgfgm3hRl /MBe12qKsTxpPVp0WptgNZ0+trnDuk/vGPVv89n3x7nTrrgA1pdPzG3IbANLFhZD Tzzp8AbTnFoPb8MxYSntLQ59oRtQmD/i5KEfqGR0F4hCrI15g+QOEAb46Eevvcid NbXuwUr43AsilwpnZbzuyKgLo40vHKzN5a9DCu55X1H9Z1R3JtpWbZly0Xl+XPzr MxTjLvwoV1+3BLU8it7w6KYebg== -----END CERTIFICATE-----Generated at Tue Apr 21 22:53:41 2026 by rpki-client