$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft File: gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft (raw, json) Hash identifier: 7DSLPT5VbPqArBJRceFAiVdRcdzQvyE7Q9XqbbpfOBM= Subject key identifier: 93:E6:F6:8A:49:7F:10:DD:F5:41:E1:E2:DD:F6:EC:08:D8:1D:4A:02 Authority key identifier: 81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99 Certificate issuer: /CN=A91F3695/serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft Manifest number: 04 Signing time: Mon 31 Aug 2026 09:40:09 +0000 Manifest this update: Mon 31 Aug 2026 09:40:08 +0000 Manifest next update: Mon 07 Sep 2026 09:40:08 +0000 Files and hashes: 1: gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl (hash: z+PKC1PSqeZ9iG1Ym/yHU6wRwc6/CNRm/O6UXqEF4YY=) 2: 64898DB6A29C11F19776C6F43211F970.roa (hash: hyemipf6fhL37ipYH+N7rWJpNf7ZwBokBc6dwKfB0oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3695, serialNumber=812826E57F12496F0BB13FB2A583198AAB277D99 Validity Not Before: Aug 31 09:40:08 2026 GMT Not After : Sep 7 09:40:08 2026 GMT Subject: CN=6a954bf9-27fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:c6:f7:2a:ec:d1:7a:ed:2a:39:14:ca:bc: 16:fa:ee:02:c8:93:25:95:57:07:72:4d:04:39:36: 25:7f:d9:e6:86:53:ce:4a:7a:ec:60:08:d0:2f:19: c9:c4:54:4e:3e:39:48:d4:6d:ba:64:2d:1e:2e:1d: 3a:3a:02:02:28:74:37:31:a7:83:53:60:31:19:d2: e1:33:cb:a6:d4:5d:c5:c6:5d:25:bd:bd:d2:93:65: 69:e1:98:ac:11:ab:d6:35:72:5e:26:55:ce:22:74: f9:a0:2d:5d:a5:86:52:00:03:0e:63:1c:e3:9e:c5: 70:01:17:8a:dd:07:47:25:aa:1c:70:ae:c5:d8:cf: c9:52:de:c7:2d:dd:ac:e5:24:bc:99:7c:01:da:90: 98:7f:37:0a:0a:dc:4b:82:d7:6b:84:b5:03:90:e6: 5d:3c:ff:b8:c5:58:ec:be:e0:55:f3:b1:f2:de:f0: 19:5e:d0:96:e1:4e:b5:9c:43:c7:04:9e:1c:8a:8f: 2a:19:7a:8d:08:5f:42:98:41:18:d7:b5:5c:30:e0: 02:df:3f:f2:47:72:ae:0e:40:be:82:2d:82:d0:47: ad:67:29:56:f3:23:60:0e:88:81:09:cc:bf:a1:cf: e3:f8:f6:80:30:6a:78:c2:e5:ee:45:1b:7a:bf:3c: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:F6:8A:49:7F:10:DD:F5:41:E1:E2:DD:F6:EC:08:D8:1D:4A:02 X509v3 Authority Key Identifier: keyid:81:28:26:E5:7F:12:49:6F:0B:B1:3F:B2:A5:83:19:8A:AB:27:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gSgm5X8SSW8LsT-ypYMZiqsnfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3695/9FA5C852A29B11F1A69892D93211F970/gSgm5X8SSW8LsT-ypYMZiqsnfZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:47:3f:9d:7e:c9:87:b4:48:c9:48:10:1e:dd:68:d9:b1:ed: fa:19:b3:3d:23:c9:2d:b7:c4:c9:9a:b3:2e:7e:96:ab:34:82: ef:8e:2c:0c:b8:b7:3c:5b:72:20:17:92:15:da:70:03:85:b4: 0b:6b:59:c4:15:1b:f1:2a:e9:e3:32:6b:8c:f3:29:2a:cd:88: 9f:cf:85:2e:2b:a9:a3:85:d2:98:cf:42:a8:27:7c:ce:6b:c9: 90:7f:ac:63:f9:f6:f4:b9:44:d7:da:cb:fb:ab:87:5b:e0:c2: b0:5b:9e:b5:fd:af:14:98:28:dd:37:3f:5f:0a:cc:69:3b:e8: 1e:4d:f8:11:b4:c2:4c:b5:d3:0c:a7:fa:21:d7:52:ec:80:03: 45:bc:c2:05:c8:75:7c:83:8d:21:bc:6a:fa:40:16:6c:b3:01: b4:ae:67:6e:58:ea:ee:d7:18:16:80:e9:25:76:08:8b:0c:d1: 76:90:9e:5d:c1:56:a5:36:73:a3:17:77:3e:a9:15:db:2e:2f: e4:a5:b4:2f:d5:56:62:e2:de:59:8b:65:1b:c8:44:28:ef:9b: 4d:c4:56:9c:77:94:2a:64:1e:bb:33:23:cd:79:f0:2b:fc:9b: 5b:fc:bc:83:62:3b:07:d1:e8:65:6c:7f:59:44:09:f5:f9:a1: 81:e9:fc:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzY5NTExMC8GA1UEBRMoODEyODI2RTU3RjEyNDk2RjBCQjEzRkIyQTU4MzE5OEFB QjI3N0Q5OTAeFw0yNjA4MzEwOTQwMDhaFw0yNjA5MDcwOTQwMDhaMBgxFjAUBgNV BAMTDTZhOTU0YmY5LTI3ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl8sb3KuzReu0qORTKvBb67gLIkyWVVwdyTQQ5NiV/2eaGU85KeuxgCNAvGcnE VE4+OUjUbbpkLR4uHTo6AgIodDcxp4NTYDEZ0uEzy6bUXcXGXSW9vdKTZWnhmKwR q9Y1cl4mVc4idPmgLV2lhlIAAw5jHOOexXABF4rdB0clqhxwrsXYz8lS3sct3azl JLyZfAHakJh/NwoK3EuC12uEtQOQ5l08/7jFWOy+4FXzsfLe8Ble0JbhTrWcQ8cE nhyKjyoZeo0IX0KYQRjXtVww4ALfP/JHcq4OQL6CLYLQR61nKVbzI2AOiIEJzL+h z+P49oAwanjC5e5FG3q/PEftAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUk+b2ikl/ EN31QeHi3fbsCNgdSgIwHwYDVR0jBBgwFoAUgSgm5X8SSW8LsT+ypYMZiqsnfZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNjk1LzlGQTVDODUyQTI5 QjExRjFBNjk4OTJEOTMyMTFGOTcwL2dTZ201WDhTU1c4THNULXlwWU1aaXFzbmZa ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1NnbTVYOFNTVzhMc1QteXBZTVppcXNuZlprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Njk1LzlGQTVDODUyQTI5QjExRjFBNjk4OTJEOTMyMTFGOTcwL2dTZ201WDhTU1c4 THNULXlwWU1aaXFzbmZaay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBURz+dfsmHtEjJSBAe3WjZse36GbM9I8ktt8TJmrMufparNILvjiwMuLc8W3Ig F5IV2nADhbQLa1nEFRvxKunjMmuM8ykqzYifz4UuK6mjhdKYz0KoJ3zOa8mQf6xj +fb0uUTX2sv7q4db4MKwW561/a8UmCjdNz9fCsxpO+geTfgRtMJMtdMMp/oh11Ls gANFvMIFyHV8g40hvGr6QBZsswG0rmduWOru1xgWgOkldgiLDNF2kJ5dwValNnOj F3c+qRXbLi/kpbQv1VZi4t5Zi2UbyEQo75tNxFacd5QqZB67MyPNefAr/Jtb/LyD YjsH0ehlbH9ZRAn1+aGB6fwl -----END CERTIFICATE-----Generated at Tue Sep 1 02:29:30 2026 by rpki-client