$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: SOXP/PdZ4upopzDOo9QKDR7Cw6RX1mjImANVVbcE/Z4= Subject key identifier: CE:D5:62:81:38:1E:BF:9C:12:42:2E:BE:5D:FC:0B:B4:52:4E:9D:ED Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 0216 Signing time: Sun 29 Mar 2026 02:40:47 +0000 Manifest this update: Sun 29 Mar 2026 02:40:47 +0000 Manifest next update: Sun 05 Apr 2026 02:40:47 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: SNcAbJGEkSyrLK2bycnJ3tdLSL1/lA4NYOeAvD6grRg=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Mar 29 02:40:47 2026 GMT Not After : Apr 5 02:40:47 2026 GMT Subject: CN=69c8912f-55e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:6f:60:9f:af:0f:67:76:60:4b:d4:95:3d: 07:2d:f0:c1:be:ca:42:ed:f5:ce:b7:48:ad:3f:58: 05:61:c3:02:b3:7c:5f:b7:cd:4e:2d:c5:39:3b:7b: d5:b0:74:4f:6c:8a:6f:28:da:77:02:76:de:46:35: f1:24:85:9c:a0:80:fe:26:c6:69:af:25:11:e0:3a: 23:99:31:13:c2:2d:c1:52:94:e6:c2:83:72:d8:31: 01:f8:e4:10:4b:16:51:e0:24:eb:ec:be:e2:0e:cf: c1:78:5c:b0:68:b7:ba:95:c7:0a:1a:49:fa:2e:b8: 5a:c0:36:cd:f7:71:8a:62:52:6e:5e:35:33:78:8f: cc:d0:17:d5:72:53:f3:59:59:f1:23:cc:bc:48:e6: 90:34:f6:7c:f3:01:5b:fc:1a:c2:af:52:82:3c:22: ec:1c:da:35:23:5d:a8:1f:60:17:ff:79:6c:b8:32: a9:b3:ea:a4:e0:d8:49:fb:d0:42:b2:24:50:9c:ad: 37:11:81:6a:65:a6:17:80:73:ca:c7:65:1d:9a:72: 3d:a5:cb:cd:57:77:58:5d:37:07:bc:66:aa:c8:39: 68:1d:18:82:6a:bb:1c:16:f3:c2:b8:76:60:56:27: 05:cf:74:fc:60:fd:45:07:e9:95:de:38:dd:74:8b: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D5:62:81:38:1E:BF:9C:12:42:2E:BE:5D:FC:0B:B4:52:4E:9D:ED X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c3:84:a3:71:1d:97:c7:9e:9d:ca:58:68:7b:29:c1:eb:78: 16:23:b2:f7:26:04:51:bc:70:a7:d5:70:f5:48:93:78:c9:80: 24:60:d0:10:32:eb:b5:02:b2:db:c8:38:a0:8e:5c:56:62:68: f3:45:46:2b:59:84:e6:ac:9c:2d:5c:99:fa:38:dd:cd:c1:97: ab:b8:c0:63:95:3d:f0:36:17:1a:12:33:45:c3:7f:89:37:c7: a6:06:24:ca:ac:01:09:c1:02:e2:a2:71:a7:73:e1:7b:eb:9d: ca:58:5e:21:3f:c9:1d:48:3d:af:d9:7a:c2:26:ad:35:35:17: 3c:ab:62:e3:f3:b4:3d:37:57:34:e3:91:64:1f:06:d6:ae:e8: dd:5e:a2:f3:7f:85:6d:cc:70:3f:34:80:e5:39:5c:5b:92:8e: 9a:28:42:64:9a:0b:20:b5:7f:bd:79:01:32:fc:6c:fb:22:ed: 1d:0d:c2:49:0e:23:d3:e4:18:0a:a1:00:68:63:57:36:b1:c0: 3e:6b:77:e7:03:3d:63:58:12:01:58:4a:52:49:e1:a6:d2:67: db:21:c2:54:57:2d:40:9f:ef:fd:df:8d:59:cb:37:db:51:87: fb:d1:fc:21:4d:c3:6d:fd:79:ab:00:fb:c2:0f:ab:1e:7c:1d: 29:ed:97:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjYwMzI5MDI0MDQ3WhcNMjYwNDA1MDI0MDQ3WjAYMRYwFAYD VQQDEw02OWM4OTEyZi01NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmE5vYJ+vD2d2YEvUlT0HLfDBvspC7fXOt0itP1gFYcMCs3xft81OLcU5O3vV sHRPbIpvKNp3AnbeRjXxJIWcoID+JsZpryUR4DojmTETwi3BUpTmwoNy2DEB+OQQ SxZR4CTr7L7iDs/BeFywaLe6lccKGkn6LrhawDbN93GKYlJuXjUzeI/M0BfVclPz WVnxI8y8SOaQNPZ88wFb/BrCr1KCPCLsHNo1I12oH2AX/3lsuDKps+qk4NhJ+9BC siRQnK03EYFqZaYXgHPKx2UdmnI9pcvNV3dYXTcHvGaqyDloHRiCarscFvPCuHZg VicFz3T8YP1FB+mV3jjddIs2jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7VYoE4 Hr+cEkIuvl38C7RSTp3tMB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMOEo3Edl8eencpYaHspwet4FiOy9yYEUbxwp9Vw9UiTeMmAJGDQEDLrtQKy 28g4oI5cVmJo80VGK1mE5qycLVyZ+jjdzcGXq7jAY5U98DYXGhIzRcN/iTfHpgYk yqwBCcEC4qJxp3Phe+udylheIT/JHUg9r9l6wiatNTUXPKti4/O0PTdXNOORZB8G 1q7o3V6i83+FbcxwPzSA5TlcW5KOmihCZJoLILV/vXkBMvxs+yLtHQ3CSQ4j0+QY CqEAaGNXNrHAPmt35wM9Y1gSAVhKUknhptJn2yHCVFctQJ/v/d+NWcs321GH+9H8 IU3Dbf15qwD7wg+rHnwdKe2XXw== -----END CERTIFICATE-----Generated at Sun Mar 29 18:11:26 2026 by rpki-client