$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: MLc7UNQ9RnGHKUZ3TimiYVTqYSVxmbWUGpD8zUM52zg= Subject key identifier: 45:14:CA:F0:36:CF:0C:6A:19:0D:68:9B:B5:85:63:D2:3A:E2:CF:26 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 7B Signing time: Fri 03 Apr 2026 07:23:39 +0000 Manifest this update: Fri 03 Apr 2026 07:23:39 +0000 Manifest next update: Fri 10 Apr 2026 07:23:39 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: aePJxe/CDaHP+ZQIH8ncf3v7bJKu5lsuIjifhZLzNv4=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Apr 2026 07:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Apr 3 07:23:39 2026 GMT Not After : Apr 10 07:23:39 2026 GMT Subject: CN=69cf6afb-425f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:07:74:61:94:3e:a0:a6:a7:85:e2:16:df: 06:f8:f1:eb:b8:f7:64:4a:ee:61:3e:43:3f:cc:75: 33:19:28:4e:4e:0b:7d:7e:31:dd:23:a5:41:9e:97: aa:6b:d9:57:04:a2:c1:ed:0d:e7:6f:69:75:f5:1b: 9f:52:e2:ed:10:4c:ae:75:cb:a7:5d:c3:a5:b8:45: 0f:a7:c8:d8:e8:d4:43:22:85:7a:f7:b1:a5:9f:53: 79:70:60:47:0b:d7:a1:c2:3b:de:e8:3a:93:da:cb: e9:2d:1e:2d:11:61:85:85:82:79:d6:b9:c6:f4:a8: 9a:72:ff:e7:00:a1:c5:b3:ac:96:dd:5b:32:dc:c1: 26:0b:be:fb:0f:5a:95:2f:f4:20:1d:0a:11:9c:93: 18:79:94:a9:05:1a:1a:91:16:2f:11:7d:83:cf:6f: fe:3b:53:76:eb:0f:d9:06:51:36:e1:6f:e7:56:5a: f5:86:93:b0:56:54:b4:53:ab:0b:50:3d:cd:68:7a: 04:71:d1:75:b6:f4:44:ca:07:e4:6b:dc:d6:6c:70: 45:0b:c8:4c:ce:b8:32:f8:b2:d8:45:cb:fa:5d:85: 97:4a:59:9e:35:ee:9e:ea:e8:a3:cc:cc:d0:fb:3a: 91:6d:5f:75:a7:33:6d:6c:9c:37:b5:d7:c5:f2:27: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:14:CA:F0:36:CF:0C:6A:19:0D:68:9B:B5:85:63:D2:3A:E2:CF:26 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cb:43:42:10:c5:8a:41:90:6c:e0:4c:9d:44:a7:e3:be:03: 63:f3:65:bb:62:4b:38:86:2d:a9:04:88:22:cd:42:98:f5:19: 2c:1c:5b:96:e0:92:b3:4a:2d:7b:ab:23:0a:2c:81:50:eb:92: 01:9e:2a:2c:22:e3:c1:51:08:37:fe:73:3d:e5:ec:c7:13:4f: 6a:6d:57:b3:ed:02:62:36:9b:5f:23:80:7c:04:c8:64:fa:91: 0d:bb:16:a7:f4:af:c3:e6:65:47:14:13:f1:c9:eb:66:92:0a: e0:44:f7:6e:73:79:25:98:73:62:a4:6f:3d:19:9a:e9:b7:36: 8b:6d:80:af:fb:9c:45:8c:6c:4b:30:c6:48:90:99:55:59:66: dd:93:69:b1:78:4c:73:6b:12:b3:f9:bc:4a:35:1a:c0:29:53: f9:d5:a9:87:71:a2:51:98:c4:ef:e4:7d:20:50:a2:89:80:be: 64:51:8e:84:8e:b7:dd:a2:24:a4:1f:78:57:18:77:d7:54:d6: 48:71:a6:56:ea:40:ee:f1:92:86:da:5b:dc:81:fd:85:76:b0: 2b:22:09:9f:f0:84:0e:a1:68:40:35:a3:e3:6a:72:37:75:5d: 7b:08:ca:6f:2f:f6:a0:71:24:1c:66:ca:53:1b:a4:24:b8:d0: 91:b3:0c:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNjA0MDMwNzIzMzlaFw0yNjA0MTAwNzIzMzlaMBgxFjAUBgNV BAMTDTY5Y2Y2YWZiLTQyNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0lwd0YZQ+oKanheIW3wb48eu492RK7mE+Qz/MdTMZKE5OC31+Md0jpUGel6pr 2VcEosHtDedvaXX1G59S4u0QTK51y6ddw6W4RQ+nyNjo1EMihXr3saWfU3lwYEcL 16HCO97oOpPay+ktHi0RYYWFgnnWucb0qJpy/+cAocWzrJbdWzLcwSYLvvsPWpUv 9CAdChGckxh5lKkFGhqRFi8RfYPPb/47U3brD9kGUTbhb+dWWvWGk7BWVLRTqwtQ Pc1oegRx0XW29ETKB+Rr3NZscEULyEzOuDL4sthFy/pdhZdKWZ417p7q6KPMzND7 OpFtX3WnM21snDe118XyJ1bjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURRTK8DbP DGoZDWibtYVj0jrizyYwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdy0NCEMWKQZBs4EydRKfjvgNj82W7Yks4hi2pBIgizUKY9RksHFuW4JKzSi17 qyMKLIFQ65IBniosIuPBUQg3/nM95ezHE09qbVez7QJiNptfI4B8BMhk+pENuxan 9K/D5mVHFBPxyetmkgrgRPduc3klmHNipG89GZrptzaLbYCv+5xFjGxLMMZIkJlV WWbdk2mxeExzaxKz+bxKNRrAKVP51amHcaJRmMTv5H0gUKKJgL5kUY6EjrfdoiSk H3hXGHfXVNZIcaZW6kDu8ZKG2lvcgf2FdrArIgmf8IQOoWhANaPjanI3dV17CMpv L/agcSQcZspTG6QkuNCRswxc -----END CERTIFICATE-----Generated at Fri Apr 3 21:16:00 2026 by rpki-client