$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft File: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft (raw, json) Hash identifier: sbmIiNIUXf2k3emEs7g9oz/rmBztU+HGg94dNQWGCPo= Subject key identifier: 62:1B:4D:05:8B:C1:A5:9A:6F:97:2C:FA:92:8A:AD:ED:54:AD:3F:1C Authority key identifier: 1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 Certificate issuer: /CN=A91E1EC4/serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft Manifest number: 13 Signing time: Mon 19 Oct 2026 09:51:51 +0000 Manifest this update: Mon 19 Oct 2026 09:51:50 +0000 Manifest next update: Mon 26 Oct 2026 09:51:50 +0000 Files and hashes: 1: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl (hash: u7bh06MrIN5Lcujp4cWlEk25fYxsQyGJkZcTQwEkBh4=) 2: 1BB9B9E8B1A211F1B29B34E27011F970.roa (hash: mo10WGZmq9tNwrK2xvFXV1zwqAuzUaWpjqL/A8EcvWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC4, serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Validity Not Before: Oct 19 09:51:50 2026 GMT Not After : Oct 26 09:51:50 2026 GMT Subject: CN=6ad5e837-7eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:38:b3:34:1b:10:8c:1a:94:22:b0:ec:63: 01:1f:73:cb:5c:ac:18:db:24:f8:0c:61:52:02:54: c2:f8:b9:ad:d4:ff:39:31:46:91:99:8c:75:5e:c8: 2f:19:cd:87:65:ee:44:b8:fd:14:35:48:ca:ea:b2: 20:2f:1a:d8:fc:fe:cd:0b:fe:47:97:94:02:68:4d: 9f:64:c1:fd:fb:a3:fa:d3:81:03:61:c2:84:0f:53: 39:72:3b:69:a4:60:71:2b:68:ed:2c:f4:70:c4:30: 8e:ef:76:65:5e:80:78:f3:6d:02:29:04:74:1f:1b: fa:bb:28:87:6b:0b:80:76:e6:75:2c:1d:ac:d7:c0: 5c:73:3a:2d:86:ec:b6:3c:96:99:6a:77:1f:90:80: 71:9e:9e:e6:86:d5:d3:01:1c:c4:77:bc:f5:81:e1: ce:69:fb:c9:f6:35:a9:fa:f7:a6:db:51:71:5e:85: 0b:1b:75:76:23:c2:2d:e4:a0:cc:c9:92:8c:9c:9c: 41:00:71:f7:08:74:07:d2:ae:e0:e6:42:dd:f1:a0: 9c:66:e8:04:f1:cb:9d:00:d2:a3:7f:36:11:48:3f: 1b:42:b7:42:7c:55:f4:23:5f:c2:22:24:c6:d1:bb: 71:1f:fd:7c:3d:8c:71:4d:c3:31:d6:21:05:3f:ed: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:4D:05:8B:C1:A5:9A:6F:97:2C:FA:92:8A:AD:ED:54:AD:3F:1C X509v3 Authority Key Identifier: keyid:1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:51:ee:65:4a:62:b0:c5:a8:e8:27:d7:f8:67:81:ec:c0:12: 8e:4a:d3:f8:1a:86:f5:cb:b8:3a:74:32:64:7b:16:1a:c2:37: 9d:6e:af:c3:e1:5e:ce:3b:12:9f:7e:4f:92:4b:87:29:ba:25: a0:bb:01:84:00:a9:29:93:5a:85:04:d6:2b:c9:59:33:5b:fb: 4a:0c:78:6d:77:2d:5c:61:95:4f:4b:b4:ea:51:4a:0f:a4:88: 73:b3:35:1f:81:13:6b:18:03:d8:de:75:4b:a9:9e:4a:53:5d: a8:a5:b7:90:64:be:db:c8:ed:df:65:29:0b:32:30:54:46:63: 32:ec:f9:fc:07:ba:c1:36:d8:d1:ad:cf:a9:8f:3b:9a:1a:d4: f7:8a:06:24:02:64:40:1a:fd:bf:65:69:2c:ff:a6:a1:83:04: ba:35:65:b0:d4:ed:62:97:6d:39:6f:d5:da:21:73:b2:df:19: df:00:7b:d2:dc:09:fa:06:cd:a7:2d:81:d8:dd:a9:64:df:e9: 20:ab:12:42:29:04:84:f9:04:f2:fc:ee:9a:66:8e:ff:58:27: 44:60:e4:7f:99:c6:15:2a:f7:59:81:24:af:93:a2:33:93:44: e3:c2:ff:cf:73:71:50:14:3c:e5:6d:09:81:3c:94:ec:25:9f: 08:87:ad:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDNDExMC8GA1UEBRMoMUI3MjgxOTdEMTM2NjMxNEE2NkVEMEJGRjMxRUU5NTJE REMxMTdCNjAeFw0yNjEwMTkwOTUxNTBaFw0yNjEwMjYwOTUxNTBaMBgxFjAUBgNV BAMTDTZhZDVlODM3LTdlYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCMkzizNBsQjBqUIrDsYwEfc8tcrBjbJPgMYVICVML4ua3U/zkxRpGZjHVeyC8Z zYdl7kS4/RQ1SMrqsiAvGtj8/s0L/keXlAJoTZ9kwf37o/rTgQNhwoQPUzlyO2mk YHEraO0s9HDEMI7vdmVegHjzbQIpBHQfG/q7KIdrC4B25nUsHazXwFxzOi2G7LY8 lplqdx+QgHGenuaG1dMBHMR3vPWB4c5p+8n2Nan696bbUXFehQsbdXYjwi3koMzJ koycnEEAcfcIdAfSruDmQt3xoJxm6ATxy50A0qN/NhFIPxtCt0J8VfQjX8IiJMbR u3Ef/Xw9jHFNwzHWIQU/7acnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYhtNBYvB pZpvlyz6koqt7VStPxwwHwYDVR0jBBgwFoAUG3KBl9E2YxSmbtC/8x7pUt3BF7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUM0LzYyQzFDRUUwQjFB MDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhTbWJ0Q184eDdwVXQzQkY3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzNLQmw5RTJZeFNtYnRDXzh4N3BVdDNCRjdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUM0LzYyQzFDRUUwQjFBMDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhT bWJ0Q184eDdwVXQzQkY3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBoUe5lSmKwxajoJ9f4Z4HswBKOStP4Gob1y7g6dDJkexYawjedbq/D4V7OOxKf fk+SS4cpuiWguwGEAKkpk1qFBNYryVkzW/tKDHhtdy1cYZVPS7TqUUoPpIhzszUf gRNrGAPY3nVLqZ5KU12opbeQZL7byO3fZSkLMjBURmMy7Pn8B7rBNtjRrc+pjzua GtT3igYkAmRAGv2/ZWks/6ahgwS6NWWw1O1il205b9XaIXOy3xnfAHvS3An6Bs2n LYHY3alk3+kgqxJCKQSE+QTy/O6aZo7/WCdEYOR/mcYVKvdZgSSvk6Izk0Tjwv/P c3FQFDzlbQmBPJTsJZ8Ih61R -----END CERTIFICATE-----Generated at Tue Oct 20 22:02:46 2026 by rpki-client