$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: RHBNXo016h7Z8hGm9YeELeUcle7GVilipka5TDsYFfo= Subject key identifier: 64:4C:A3:95:CF:F4:40:2D:B6:1A:EB:CF:FE:37:CB:A8:D4:F7:FC:55 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: C3 Signing time: Tue 25 Aug 2026 06:48:51 +0000 Manifest this update: Tue 25 Aug 2026 06:48:51 +0000 Manifest next update: Tue 01 Sep 2026 06:48:51 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: 2Gnj967fG2srPqRIA4atXGb98Q/RSc78031CRI/Is1I=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Aug 25 06:48:51 2026 GMT Not After : Sep 1 06:48:51 2026 GMT Subject: CN=6a8d3ad3-e6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:ad:7e:ec:0e:01:85:22:43:f8:7a:d3:26: 52:16:88:95:9b:18:70:85:4b:4b:34:d4:48:31:b7: d3:18:4b:10:4e:f7:23:fa:9c:01:2d:7d:e0:9c:dd: 7e:93:a9:5a:a6:2e:33:7c:0b:9b:75:40:cf:c4:96: 25:d3:68:9f:50:16:3b:af:e6:af:a9:4e:97:b8:2b: ab:84:55:7b:08:4d:2d:1e:fb:5b:ec:f3:1f:75:b5: aa:b6:ff:3a:e1:b7:85:7b:47:ef:5b:34:47:11:3c: 5a:42:7f:ff:02:cb:71:a3:b6:92:64:d8:02:c7:f4: 10:d2:84:f7:b4:da:2c:30:93:a3:99:42:8a:ce:a6: 32:49:a1:e6:83:f5:14:ed:e6:e3:24:80:57:3c:c7: 63:6e:70:3c:ed:f0:14:b6:18:7b:ae:35:ae:e9:0c: c2:22:fb:c3:4a:25:f2:44:4d:23:51:77:de:29:39: 3e:52:6f:bb:3f:da:9b:28:da:c5:65:39:3e:b5:63: a0:58:58:ec:30:b0:83:48:cf:73:33:0a:2c:dd:f0: 50:ef:38:ee:d6:43:db:a4:a4:55:3d:26:3b:16:57: 16:7c:f6:65:76:dc:7e:6f:29:64:eb:0b:50:d5:b7: 34:15:92:51:16:67:cf:06:7d:18:fd:c1:a3:c9:3d: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:A3:95:CF:F4:40:2D:B6:1A:EB:CF:FE:37:CB:A8:D4:F7:FC:55 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:56:19:19:e3:9f:0a:33:da:5d:80:02:c7:fc:93:79:1e: e5:83:13:38:65:70:db:db:57:f9:02:20:63:ff:a6:ba:0f:1a: 08:24:c9:9c:25:2c:d2:75:fd:fe:79:ef:f9:5d:af:b5:2b:79: 12:ca:dd:38:8d:7a:a1:e8:09:e4:4b:bc:03:ce:b2:a1:3c:26: 6b:09:26:36:12:ae:e0:c9:ec:9f:2f:12:3a:7c:c4:73:c4:e2: b7:18:42:46:f1:7c:b1:79:91:9f:04:43:c5:bb:7b:d6:76:4a: ac:38:b1:76:ce:a7:70:19:ea:b6:f8:ad:3f:f5:53:3b:ed:f7: 08:75:33:a9:5e:18:df:6e:89:48:ef:1e:2a:ab:16:23:5e:29: 54:11:7c:a4:b0:d5:82:1b:20:b5:97:18:3a:9f:36:14:d2:ce: 37:5a:d9:b5:4e:a6:20:6c:23:22:d8:8a:61:ef:fa:f3:13:4a: 4a:5c:c1:ac:4b:19:75:8e:a7:a9:d0:65:48:91:00:6e:b7:1e: 92:48:39:bd:e1:9c:50:88:8f:6e:10:d3:38:a3:eb:f0:15:6b: 6d:ef:42:9b:38:23:8a:34:57:1d:20:cf:98:8b:f7:f2:12:82: f7:3f:68:99:c7:ca:7a:01:22:e7:e5:54:0b:2d:72:aa:e0:e3: e1:1b:eb:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw MDA2ODU3NjEwHhcNMjYwODI1MDY0ODUxWhcNMjYwOTAxMDY0ODUxWjAYMRYwFAYD VQQDEw02YThkM2FkMy1lNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycetfuwOAYUiQ/h60yZSFoiVmxhwhUtLNNRIMbfTGEsQTvcj+pwBLX3gnN1+ k6lapi4zfAubdUDPxJYl02ifUBY7r+avqU6XuCurhFV7CE0tHvtb7PMfdbWqtv86 4beFe0fvWzRHETxaQn//Astxo7aSZNgCx/QQ0oT3tNosMJOjmUKKzqYySaHmg/UU 7ebjJIBXPMdjbnA87fAUthh7rjWu6QzCIvvDSiXyRE0jUXfeKTk+Um+7P9qbKNrF ZTk+tWOgWFjsMLCDSM9zMwos3fBQ7zju1kPbpKRVPSY7FlcWfPZldtx+bylk6wtQ 1bc0FZJRFmfPBn0Y/cGjyT2bIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRMo5XP 9EAtthrrz/43y6jU9/xVMB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0 QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0 ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADxFWGRnjnwoz2l2AAsf8k3ke5YMTOGVw29tX+QIgY/+mug8aCCTJnCUs0nX9 /nnv+V2vtSt5EsrdOI16oegJ5Eu8A86yoTwmawkmNhKu4Mnsny8SOnzEc8TitxhC RvF8sXmRnwRDxbt71nZKrDixds6ncBnqtvitP/VTO+33CHUzqV4Y326JSO8eKqsW I14pVBF8pLDVghsgtZcYOp82FNLON1rZtU6mIGwjItiKYe/68xNKSlzBrEsZdY6n qdBlSJEAbrcekkg5veGcUIiPbhDTOKPr8BVrbe9CmzgjijRXHSDPmIv38hKC9z9o mcfKegEi5+VUCy1yquDj4RvrrQ== -----END CERTIFICATE-----Generated at Wed Aug 26 10:38:21 2026 by rpki-client