$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: OLx/wSjDX7p6kYK4005PjbOVP3dBMm8UcjgSkDBPGyM= Subject key identifier: 15:AE:37:00:94:8D:93:19:D7:17:BF:D8:27:3B:1A:EB:F7:8A:22:14 Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 8F Signing time: Mon 01 Jun 2026 08:21:32 +0000 Manifest this update: Mon 01 Jun 2026 08:21:31 +0000 Manifest next update: Mon 08 Jun 2026 08:21:31 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: mRrylebZScOOvtXFKdmKezYkQJkAH9HoCHio4mjWXhY=) 2: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) 3: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Jun 1 08:21:31 2026 GMT Not After : Jun 8 08:21:31 2026 GMT Subject: CN=6a1d410c-dd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:03:7d:53:68:90:91:a5:02:00:f2:c0:44: 8b:ca:d1:8e:1e:8a:b3:9f:84:f8:49:7e:01:30:da: 46:33:86:d2:70:a7:46:a3:8e:c8:e6:03:e7:b3:3d: fd:b5:3c:5c:9b:f0:a3:dc:05:90:3f:39:71:c9:b9: 3c:23:be:0d:84:fd:fd:a8:0c:7d:02:95:51:0b:c9: 71:2f:eb:74:16:6e:05:13:87:c2:96:2c:14:a2:97: 7c:ad:ad:c6:83:42:41:19:92:63:40:2d:8b:f4:0f: 7e:58:39:31:21:c1:dd:e6:c6:76:48:4b:a2:0d:3d: 81:86:e8:75:a3:1f:cd:a9:04:a8:27:fe:05:a0:fe: 2d:5f:67:ab:6d:fe:7d:62:77:42:28:f4:fd:ff:59: 69:53:22:66:1e:cb:ab:20:d5:7b:8c:15:73:95:c9: df:22:f1:79:61:d8:45:a2:4e:fd:91:be:8c:ce:4e: c9:6a:10:19:42:63:93:c8:3b:35:25:82:24:a2:e8: 90:cc:2a:4e:f0:ca:03:bf:1e:09:13:98:0f:d0:d9: 6e:f0:a5:28:3b:05:83:e0:b8:f0:d2:e7:b4:1a:33: ba:c9:a4:30:9f:57:23:c0:63:d9:f7:5f:9a:eb:1c: 1a:3c:0f:eb:c2:26:8e:8b:ce:16:6e:f9:f2:16:76: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AE:37:00:94:8D:93:19:D7:17:BF:D8:27:3B:1A:EB:F7:8A:22:14 X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:31:18:d8:d7:3b:a7:35:c6:7f:fd:d2:f9:3e:82:42:ac:f6: 68:c6:61:13:0d:74:e9:e8:1e:76:da:4e:95:37:8e:7e:ee:c6: 11:e2:5a:d4:fb:fa:84:84:b4:3c:2d:0a:bc:aa:5a:cb:ae:d0: d7:c8:9d:83:55:4f:2c:d4:ae:c4:3e:e5:33:4c:ac:06:cf:a3: 61:71:39:fe:48:5f:50:8b:a5:ac:49:e5:3f:d8:b2:4e:25:bc: 3e:d8:d3:6d:14:82:74:34:3a:5c:e4:2b:6f:03:ed:ee:00:24: d4:b9:04:ab:9c:c2:64:53:ec:74:0f:3d:43:9d:d1:5e:e4:a1: 91:bd:92:1e:10:6b:36:4e:05:57:cb:9b:1c:20:5a:3b:39:72: e2:ae:7f:a2:84:d1:eb:02:24:a5:cb:4f:ca:94:93:53:d5:63: 23:b7:b0:47:5f:7a:71:8e:ae:25:71:f1:4b:2a:f9:f2:f0:33: 86:00:d8:1d:9f:9f:9d:0f:76:46:e0:66:47:bd:57:2c:c7:31: 3a:ff:24:cd:b3:f5:79:a9:3e:dd:00:5f:2e:3c:95:90:7b:ff: 4a:7c:07:c6:1f:50:f4:36:fb:b2:2e:59:28:2c:9a:9c:5d:c3: 30:2f:ea:c2:b7:d1:43:a3:a1:7b:40:9d:e3:a0:50:ad:cf:8a: 32:a7:1b:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0 NDA1NzNDNjMwHhcNMjYwNjAxMDgyMTMxWhcNMjYwNjA4MDgyMTMxWjAYMRYwFAYD VQQDEw02YTFkNDEwYy1kZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rUDfVNokJGlAgDywESLytGOHoqzn4T4SX4BMNpGM4bScKdGo47I5gPnsz39 tTxcm/Cj3AWQPzlxybk8I74NhP39qAx9ApVRC8lxL+t0Fm4FE4fCliwUopd8ra3G g0JBGZJjQC2L9A9+WDkxIcHd5sZ2SEuiDT2Bhuh1ox/NqQSoJ/4FoP4tX2erbf59 YndCKPT9/1lpUyJmHsurINV7jBVzlcnfIvF5YdhFok79kb6Mzk7JahAZQmOTyDs1 JYIkouiQzCpO8MoDvx4JE5gP0Nlu8KUoOwWD4Ljw0ue0GjO6yaQwn1cjwGPZ91+a 6xwaPA/rwiaOi84WbvnyFnYM7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWuNwCU jZMZ1xe/2Cc7Guv3iiIUMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzEY2Nc7pzXGf/3S+T6CQqz2aMZhEw106egedtpOlTeOfu7GEeJa1Pv6hIS0 PC0KvKpay67Q18idg1VPLNSuxD7lM0ysBs+jYXE5/khfUIulrEnlP9iyTiW8PtjT bRSCdDQ6XOQrbwPt7gAk1LkEq5zCZFPsdA89Q53RXuShkb2SHhBrNk4FV8ubHCBa Ozly4q5/ooTR6wIkpctPypSTU9VjI7ewR196cY6uJXHxSyr58vAzhgDYHZ+fnQ92 RuBmR71XLMcxOv8kzbP1eak+3QBfLjyVkHv/SnwHxh9Q9Db7si5ZKCyanF3DMC/q wrfRQ6Ohe0Cd46BQrc+KMqcb9A== -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:11 2026 by rpki-client