$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: hqxukFMF25gf2djviCLx1CnGqCrHjM8RNQdtqWPewf0= Subject key identifier: B5:9C:56:B4:17:BB:69:EA:44:9A:DC:A3:9F:82:08:E9:44:96:67:13 Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: BE Signing time: Thu 03 Sep 2026 07:12:36 +0000 Manifest this update: Thu 03 Sep 2026 07:12:35 +0000 Manifest next update: Thu 10 Sep 2026 07:12:35 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: g+/6g+PXi7GPaDHq61WNL10mS2eT0TrIUxRPpAZoHWg=) 2: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 07:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Sep 3 07:12:35 2026 GMT Not After : Sep 10 07:12:35 2026 GMT Subject: CN=6a991de4-b323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:89:65:74:cb:81:bd:35:7a:f5:83:8e:8c: 0c:50:56:4e:9b:e7:b8:87:3f:f0:dc:6b:4f:3a:00: 40:ef:fb:9f:d9:db:e4:f5:b4:3a:fa:be:a2:24:e0: 7f:11:bd:5e:6d:3a:43:3c:b0:f0:2e:e7:c9:84:1b: 22:7b:08:32:32:1f:e3:62:4a:04:90:41:55:b4:84: e2:1b:c4:ab:d0:d7:8f:4b:37:64:13:ce:d1:e8:07: 0e:d3:d9:3d:e8:c5:c5:6d:8d:56:cd:f4:df:15:e2: 16:00:74:74:81:11:59:c5:08:26:32:36:5b:f3:56: 3f:ad:5f:62:92:2d:9f:a9:fe:65:c7:17:cd:01:b9: b5:e2:77:ff:5c:64:a6:75:9e:f7:7c:86:49:61:fe: f0:b3:54:7b:f6:6b:cb:6e:1a:ca:8a:5d:a0:bc:63: f7:c7:49:9a:df:f0:51:47:e6:15:25:6e:41:d8:0d: f2:42:49:42:4d:40:74:a7:48:49:f4:cd:b5:9b:28: 2d:20:a1:47:c0:36:67:7e:2a:07:17:e8:51:38:93: 6d:07:e0:fb:87:d8:92:25:6a:f1:4d:2c:a9:08:73: 60:d6:38:85:37:bf:6b:ba:a4:0c:48:5d:35:c0:e6: 91:51:80:05:58:2b:86:60:8d:7c:b4:eb:e0:08:47: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:56:B4:17:BB:69:EA:44:9A:DC:A3:9F:82:08:E9:44:96:67:13 X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9e:95:8e:fd:ff:09:fc:0f:63:93:85:85:08:e2:98:57:36: d1:20:46:0a:81:fa:e1:ac:24:64:bb:d0:6e:c5:35:aa:a7:c1: ab:1d:c1:4f:05:16:35:4d:bc:b6:d4:3a:ab:8b:79:16:39:fa: 90:8c:80:c1:42:fa:c0:59:c2:f1:ef:2e:72:b7:c3:54:5d:d3: c4:c8:cf:e4:d2:81:4c:ab:28:07:45:ed:1e:d6:77:6a:2c:17: d1:93:e2:37:1c:b5:7e:58:91:f7:ed:15:3d:2e:82:ea:39:f7: 40:ba:1f:9d:a3:ea:72:30:f1:fa:e3:c4:cf:a0:1c:e3:9a:ab: 4e:14:f9:c5:ea:50:63:e6:7f:2a:81:32:62:d6:02:7a:5e:22: 66:0a:8b:37:bc:d4:72:2f:7d:26:c8:a8:de:7f:04:65:d5:53: a5:f9:35:bc:d0:5a:1c:85:d4:cd:b9:d5:08:b1:89:2a:cd:79: 5f:90:d2:8f:65:15:c0:d8:15:bb:9f:7c:29:9a:82:8f:c9:a5: cf:de:00:5c:8b:d3:0e:80:4f:bb:b5:ee:21:37:90:bf:91:34: 94:96:be:15:fb:ad:32:11:4f:ba:ea:60:69:f4:b1:c5:dc:05: 81:a3:67:a4:1a:30:9b:25:f0:ea:9f:4b:ae:88:9f:cd:95:a9: 5d:e1:6f:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0 NDA1NzNDNjMwHhcNMjYwOTAzMDcxMjM1WhcNMjYwOTEwMDcxMjM1WjAYMRYwFAYD VQQDEw02YTk5MWRlNC1iMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoj+JZXTLgb01evWDjowMUFZOm+e4hz/w3GtPOgBA7/uf2dvk9bQ6+r6iJOB/ Eb1ebTpDPLDwLufJhBsiewgyMh/jYkoEkEFVtITiG8Sr0NePSzdkE87R6AcO09k9 6MXFbY1WzfTfFeIWAHR0gRFZxQgmMjZb81Y/rV9iki2fqf5lxxfNAbm14nf/XGSm dZ73fIZJYf7ws1R79mvLbhrKil2gvGP3x0ma3/BRR+YVJW5B2A3yQklCTUB0p0hJ 9M21mygtIKFHwDZnfioHF+hROJNtB+D7h9iSJWrxTSypCHNg1jiFN79ruqQMSF01 wOaRUYAFWCuGYI18tOvgCEd4MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWcVrQX u2nqRJrco5+CCOlElmcTMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAJ6Vjv3/CfwPY5OFhQjimFc20SBGCoH64awkZLvQbsU1qqfBqx3BTwUWNU28 ttQ6q4t5Fjn6kIyAwUL6wFnC8e8ucrfDVF3TxMjP5NKBTKsoB0XtHtZ3aiwX0ZPi Nxy1fliR9+0VPS6C6jn3QLofnaPqcjDx+uPEz6Ac45qrThT5xepQY+Z/KoEyYtYC el4iZgqLN7zUci99Jsio3n8EZdVTpfk1vNBaHIXUzbnVCLGJKs15X5DSj2UVwNgV u598KZqCj8mlz94AXIvTDoBPu7XuITeQv5E0lJa+FfutMhFPuupgafSxxdwFgaNn pBowmyXw6p9LroifzZWpXeFvGw== -----END CERTIFICATE-----Generated at Sat Sep 5 01:44:12 2026 by rpki-client