$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: Zvo6jMLx5yGnVBHuf9Ej2xUf35V+k2mqvft0cPAmAys= Subject key identifier: FB:C3:47:9F:ED:1A:B2:6A:D2:27:F0:BA:41:7E:3C:2C:41:EB:7F:24 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 04B7 Signing time: Sat 03 Oct 2026 00:11:47 +0000 Manifest this update: Sat 03 Oct 2026 00:11:46 +0000 Manifest next update: Sat 10 Oct 2026 00:11:46 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: qQw+xo+mvQZAq/gxelcPPgsZoFvpEX+lJH3RmzqWtcY=) 2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=) 3: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=) 6: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=) 7: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Oct 3 00:11:46 2026 GMT Not After : Oct 10 00:11:46 2026 GMT Subject: CN=6ac04843-f8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c4:fe:78:fa:b6:bb:30:b7:98:d0:37:71:2b: 68:69:d7:db:9c:a3:3e:e2:1e:2d:7b:1e:3a:fa:cf: 14:bd:73:3b:42:df:73:8e:71:b2:2d:bd:0d:4c:04: 80:bb:30:a9:fe:09:35:06:bf:9f:8a:d9:83:d2:fc: 32:2d:af:ad:5c:78:ff:b1:c8:0f:f4:31:e7:36:fd: 38:17:e1:66:3e:e0:8f:b5:45:b9:70:64:f9:03:d8: 80:40:88:eb:36:65:0b:d6:a5:95:9d:6b:25:48:46: a2:fd:9e:31:ad:4c:6b:d4:15:c2:13:e0:f7:93:05: 8f:15:8c:5c:14:3d:73:d3:b1:f8:44:25:d1:0d:09: 64:d3:63:7b:ce:07:74:97:32:ff:6e:ef:d3:d5:63: ba:83:bc:86:d8:c1:ab:da:67:02:e9:eb:bf:42:c3: f1:9a:38:ba:d3:12:e2:38:74:72:44:50:b9:db:08: 01:15:d3:40:69:28:5e:d2:6d:8b:47:f7:bd:d7:78: 49:02:08:f5:76:32:7d:7e:25:ca:d1:23:52:a1:dc: be:bb:b5:8f:2c:bf:5b:d6:e3:5e:89:51:e9:8b:1f: da:b9:a1:94:61:cf:b5:3f:d1:6d:08:42:59:23:01: 33:25:9b:19:6b:d1:16:dc:de:00:dc:76:7a:d9:51: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C3:47:9F:ED:1A:B2:6A:D2:27:F0:BA:41:7E:3C:2C:41:EB:7F:24 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:8b:68:6d:63:24:8f:f6:8e:ab:90:66:ca:50:7f:82:6e: d8:e9:43:a7:5a:45:1c:75:2d:4c:68:83:6c:69:a2:e2:21:f7: 06:a6:5b:03:ec:f0:3f:19:d6:90:09:7c:a2:86:54:e6:61:35: 4d:fe:91:81:f8:52:5e:31:05:0e:6c:9f:33:b4:b6:fc:d7:de: b0:04:c8:f5:60:96:32:df:2f:86:ad:a6:b1:1a:0f:ec:4f:9e: e1:f7:58:04:59:8a:47:a2:0e:d7:7b:64:18:a2:05:3f:76:2e: 4e:67:3d:a7:af:56:37:f2:57:24:ab:a4:30:f0:4e:21:09:8c: 08:4a:8a:c0:d7:e0:16:c8:88:0f:c2:1c:48:cc:5d:c6:20:5a: b2:9c:57:02:a6:29:10:f3:3c:b1:26:ab:8f:6c:a2:f0:31:00: 8d:9e:fe:dc:73:d3:58:e9:70:19:19:fd:2e:c7:ad:02:24:7a: f6:ba:8f:31:ef:4a:04:ce:28:fa:a5:74:fb:3a:3a:17:76:c7: ce:46:d7:67:2f:f0:34:db:33:23:e2:7a:f4:54:4e:c1:8a:07: 16:49:9c:00:2f:58:a6:2c:50:e2:c5:50:12:8e:b5:9e:79:23: 85:b6:69:33:99:d5:f4:fc:73:c6:f4:a4:3f:82:ec:ec:70:dd: 17:1d:9e:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYxMDAzMDAxMTQ2WhcNMjYxMDEwMDAxMTQ2WjAYMRYwFAYD VQQDEw02YWMwNDg0My1mOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+MT+ePq2uzC3mNA3cStoadfbnKM+4h4tex46+s8UvXM7Qt9zjnGyLb0NTASA uzCp/gk1Br+fitmD0vwyLa+tXHj/scgP9DHnNv04F+FmPuCPtUW5cGT5A9iAQIjr NmUL1qWVnWslSEai/Z4xrUxr1BXCE+D3kwWPFYxcFD1z07H4RCXRDQlk02N7zgd0 lzL/bu/T1WO6g7yG2MGr2mcC6eu/QsPxmji60xLiOHRyRFC52wgBFdNAaShe0m2L R/e913hJAgj1djJ9fiXK0SNSody+u7WPLL9b1uNeiVHpix/auaGUYc+1P9FtCEJZ IwEzJZsZa9EW3N4A3HZ62VF87QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvDR5/t GrJq0ifwukF+PCxB638kMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfmLaG1jJI/2jquQZspQf4Ju2OlDp1pFHHUtTGiDbGmi4iH3BqZbA+zwPxnW kAl8ooZU5mE1Tf6RgfhSXjEFDmyfM7S2/NfesATI9WCWMt8vhq2msRoP7E+e4fdY BFmKR6IO13tkGKIFP3YuTmc9p69WN/JXJKukMPBOIQmMCEqKwNfgFsiID8IcSMxd xiBaspxXAqYpEPM8sSarj2yi8DEAjZ7+3HPTWOlwGRn9LsetAiR69rqPMe9KBM4o +qV0+zo6F3bHzkbXZy/wNNszI+J69FROwYoHFkmcAC9YpixQ4sVQEo61nnkjhbZp M5nV9PxzxvSkP4Ls7HDdFx2eKg== -----END CERTIFICATE-----Generated at Sun Oct 4 17:39:07 2026 by rpki-client