$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: ZuqvVTVOXeoQBBcZEqp2qB70L/9ASbBrfU1kx4rJuJc= Subject key identifier: 8B:B0:6F:E1:CA:0E:FA:41:AA:51:40:4D:1C:F4:9F:2D:BD:7F:B1:DA Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: D9 Signing time: Tue 27 Oct 2026 06:57:39 +0000 Manifest this update: Tue 27 Oct 2026 06:57:39 +0000 Manifest next update: Tue 03 Nov 2026 06:57:39 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: C5+eTaD+qc6qqQkW4P5AmpDSWKR+RmK2Xa+g6UwOVEs=) 2: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) 3: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Oct 27 06:57:39 2026 GMT Not After : Nov 3 06:57:39 2026 GMT Subject: CN=6ae04b63-3460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:69:6d:6c:91:90:c6:26:cf:8b:0e:6e:62: 4c:5a:20:92:ba:c2:1c:5b:63:69:1c:11:e2:2a:79: d0:5b:70:20:a5:cb:97:39:1f:b2:14:8a:6e:c2:05: c1:aa:e7:a3:53:84:5e:a0:2c:f5:29:26:05:dd:e6: ec:8e:ea:6a:f5:dc:cd:ba:d9:32:52:f7:10:46:2a: 55:19:19:2f:cc:2c:35:93:d7:ac:b8:1d:e8:14:d4: 8d:f0:dd:f3:13:57:f8:1b:89:04:57:9f:b9:3e:ca: b0:bd:a4:c2:33:28:8b:91:82:ff:62:81:42:66:98: 68:1c:8a:6f:16:f7:7a:ce:1b:dc:76:c8:bc:86:e0: 6a:a1:33:74:0e:9b:1f:c8:65:7a:e5:3b:b8:52:98: fe:2b:ce:45:15:07:9d:f3:20:b9:4a:6d:60:89:5a: ec:a2:67:34:2f:25:23:a8:48:56:da:6c:de:a0:67: cc:29:13:b7:b6:05:97:cb:cb:db:34:9c:a3:71:55: 85:ae:07:3b:f9:5e:cd:cb:d9:d1:1b:d7:8d:3f:fe: 3f:ee:eb:6a:22:64:f5:ba:13:27:0a:f6:30:f8:2e: 06:6b:7f:cd:c0:6f:c2:1d:0b:42:88:23:bd:d5:ac: 0a:ec:d2:50:32:7c:76:43:eb:1b:4a:37:8d:ab:de: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B0:6F:E1:CA:0E:FA:41:AA:51:40:4D:1C:F4:9F:2D:BD:7F:B1:DA X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:d9:eb:ff:ad:18:97:b2:aa:67:82:ca:77:ee:6e:ca:43:6a: ae:04:45:f9:f7:c4:62:aa:48:79:55:bd:2c:39:67:74:14:c4: d5:df:86:a7:72:80:4c:91:c0:43:8b:4c:37:e5:d9:50:dc:aa: 2a:e5:78:c6:c0:7b:3a:22:db:ea:fd:c6:d0:f4:b1:ed:17:f7: 67:ef:ca:d6:dc:25:ab:55:95:db:fc:d8:de:b9:e2:51:9d:53: 70:eb:ad:98:33:09:73:52:22:96:4f:a8:c1:23:4e:a1:d3:46: b2:8a:4f:77:3f:70:35:ae:bb:12:c0:39:34:2e:92:39:35:a0: 8e:ca:60:cc:38:57:06:74:1a:59:39:45:61:18:d3:d5:cf:04: 8e:cf:e6:1b:08:76:04:42:75:6e:65:31:01:37:76:f3:23:49: be:74:d0:1a:4e:a8:7c:6d:cf:d3:aa:38:bf:74:47:2b:17:19: 50:97:63:09:ea:62:68:67:87:0f:a7:40:2e:da:cb:3a:5a:9c: 93:e5:2c:7a:dc:11:8d:7c:ef:79:76:21:38:4a:cf:7a:7f:17: 60:df:7c:41:45:1a:b8:4b:f4:7f:4c:79:6e:5b:51:63:c6:01: 18:ec:2b:16:55:82:fd:b3:c3:02:ef:30:df:71:19:64:c0:3b: 57:88:7d:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0 NDA1NzNDNjMwHhcNMjYxMDI3MDY1NzM5WhcNMjYxMTAzMDY1NzM5WjAYMRYwFAYD VQQDEw02YWUwNGI2My0zNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6JpbWyRkMYmz4sObmJMWiCSusIcW2NpHBHiKnnQW3AgpcuXOR+yFIpuwgXB quejU4ReoCz1KSYF3ebsjupq9dzNutkyUvcQRipVGRkvzCw1k9esuB3oFNSN8N3z E1f4G4kEV5+5PsqwvaTCMyiLkYL/YoFCZphoHIpvFvd6zhvcdsi8huBqoTN0Dpsf yGV65Tu4Upj+K85FFQed8yC5Sm1giVrsomc0LyUjqEhW2mzeoGfMKRO3tgWXy8vb NJyjcVWFrgc7+V7Ny9nRG9eNP/4/7utqImT1uhMnCvYw+C4Ga3/NwG/CHQtCiCO9 1awK7NJQMnx2Q+sbSjeNq97PVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuwb+HK DvpBqlFATRz0ny29f7HaMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA39nr/60Yl7KqZ4LKd+5uykNqrgRF+ffEYqpIeVW9LDlndBTE1d+Gp3KATJHA Q4tMN+XZUNyqKuV4xsB7OiLb6v3G0PSx7Rf3Z+/K1twlq1WV2/zY3rniUZ1TcOut mDMJc1Iilk+owSNOodNGsopPdz9wNa67EsA5NC6SOTWgjspgzDhXBnQaWTlFYRjT 1c8Ejs/mGwh2BEJ1bmUxATd28yNJvnTQGk6ofG3P06o4v3RHKxcZUJdjCepiaGeH D6dALtrLOlqck+UsetwRjXzveXYhOErPen8XYN98QUUauEv0f0x5bltRY8YBGOwr FlWC/bPDAu8w33EZZMA7V4h9Rg== -----END CERTIFICATE-----Generated at Wed Oct 28 00:48:13 2026 by rpki-client