$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: qYG2YNOozZJgQrx9fG0JWtzKok14wdFFN3iw/drKjGg= Subject key identifier: 6E:9F:37:69:58:98:F3:34:7C:3D:CE:C1:CC:4E:BE:5A:58:DC:60:FA Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 0275 Signing time: Sat 03 Oct 2026 02:39:56 +0000 Manifest this update: Sat 03 Oct 2026 02:39:55 +0000 Manifest next update: Sat 10 Oct 2026 02:39:55 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: zalKHQsP3lPykfj1Py8ZAzVGlulvIoygAD3+xmL4lBo=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Oct 3 02:39:55 2026 GMT Not After : Oct 10 02:39:55 2026 GMT Subject: CN=6ac06afb-09eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:80:8c:ae:41:74:46:88:1e:e5:0b:0a:83: fa:dc:a1:85:05:07:4e:09:1b:89:7d:63:0f:73:b5: e7:82:69:21:d7:da:1f:ec:94:65:69:f7:96:32:cb: d5:f2:a2:ec:f7:fc:7e:95:4b:b7:0e:4d:d0:4a:1c: 40:10:bd:0c:bb:4b:12:7e:f6:21:df:91:5e:89:33: 02:a4:99:04:bd:d0:ff:31:aa:5a:7a:c0:93:a9:df: 0a:ec:d7:5d:12:4b:5c:d3:0e:85:bf:b4:b0:a6:88: 2c:5f:6b:52:75:9e:b7:bd:04:48:d2:7c:2a:5a:31: 5c:9c:68:d0:1a:0c:45:81:bd:5f:57:70:d5:cb:ee: 44:e6:7c:0e:41:79:e6:3f:8e:64:b8:56:05:92:c4: 57:3c:a8:73:4d:3c:48:40:17:a1:76:b0:e6:f9:f6: 70:aa:ea:c9:3f:1b:94:87:54:fd:52:da:d7:0f:da: 74:48:2a:e6:81:f4:ef:e9:0b:ad:7d:71:55:14:22: 4b:f1:12:9c:7b:e0:52:59:1b:af:07:2f:38:4b:fc: 57:62:84:94:58:f4:1c:86:00:6c:4c:38:f4:d9:53: 08:04:e4:5f:51:aa:2f:ee:5f:46:c9:14:61:66:b7: 0b:64:a3:67:6e:2f:67:d6:4a:d9:0c:36:87:c8:02: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9F:37:69:58:98:F3:34:7C:3D:CE:C1:CC:4E:BE:5A:58:DC:60:FA X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fd:ab:e0:83:14:18:2b:af:ea:45:29:97:06:cc:f2:6d:96: f7:8a:9f:97:6b:d3:b5:94:dd:83:2f:f4:ef:8c:46:0d:77:d3: 0a:8a:93:b2:17:4e:a9:1f:1b:f2:6c:50:08:eb:60:5c:cd:ae: 83:69:82:3e:50:c4:77:06:59:de:41:dc:77:32:bb:53:31:66: b1:8a:9c:c4:94:7a:61:a9:91:3b:d9:3e:91:0d:1f:28:00:a5: 2a:f5:b6:03:e4:a6:6d:da:8f:35:27:1c:07:8b:a5:80:12:ad: 7b:1c:40:ae:b5:bb:64:50:63:6a:af:55:68:b9:4a:5e:67:96: 72:4b:4e:b8:4d:7c:2c:92:30:c8:fa:e1:56:30:78:72:69:f0: 17:0f:2c:ff:53:5b:f1:af:2c:b8:f2:10:16:1a:fa:33:e2:95: 1c:eb:e0:c0:e3:75:9f:1e:71:b7:67:c3:48:8d:e0:e5:13:dc: db:be:61:71:b4:1e:75:76:94:83:c2:3c:7b:ce:7a:1b:08:4e: 74:b9:c5:5e:dc:d6:cc:0c:3f:e5:fd:1a:29:66:65:64:13:5f: 2d:be:f3:e9:d6:4c:d5:f6:c3:91:99:3c:b8:54:17:97:94:e4: e7:87:b1:a9:e7:57:44:78:75:4e:b0:30:f3:b5:9f:14:b1:45: a6:2c:fb:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjYxMDAzMDIzOTU1WhcNMjYxMDEwMDIzOTU1WjAYMRYwFAYD VQQDEw02YWMwNmFmYi0wOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0K6AjK5BdEaIHuULCoP63KGFBQdOCRuJfWMPc7Xngmkh19of7JRlafeWMsvV 8qLs9/x+lUu3Dk3QShxAEL0Mu0sSfvYh35FeiTMCpJkEvdD/MapaesCTqd8K7Ndd Ektc0w6Fv7SwpogsX2tSdZ63vQRI0nwqWjFcnGjQGgxFgb1fV3DVy+5E5nwOQXnm P45kuFYFksRXPKhzTTxIQBehdrDm+fZwqurJPxuUh1T9UtrXD9p0SCrmgfTv6Qut fXFVFCJL8RKce+BSWRuvBy84S/xXYoSUWPQchgBsTDj02VMIBORfUaov7l9GyRRh ZrcLZKNnbi9n1krZDDaHyAJJDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6fN2lY mPM0fD3OwcxOvlpY3GD6MB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUf2r4IMUGCuv6kUplwbM8m2W94qfl2vTtZTdgy/074xGDXfTCoqTshdOqR8b 8mxQCOtgXM2ug2mCPlDEdwZZ3kHcdzK7UzFmsYqcxJR6YamRO9k+kQ0fKAClKvW2 A+SmbdqPNSccB4ulgBKtexxArrW7ZFBjaq9VaLlKXmeWcktOuE18LJIwyPrhVjB4 cmnwFw8s/1Nb8a8suPIQFhr6M+KVHOvgwON1nx5xt2fDSI3g5RPc275hcbQedXaU g8I8e856GwhOdLnFXtzWzAw/5f0aKWZlZBNfLb7z6dZM1fbDkZk8uFQXl5Tk54ex qedXRHh1TrAw87WfFLFFpiz7bg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:58:01 2026 by rpki-client