$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: q5CZAjhZIb0sgXFnFQFNEAfRh0aKk5NTtIZ1DVh3QJ8= Subject key identifier: A9:2A:72:D2:73:1B:1E:18:89:11:C2:41:DD:CE:D5:1C:32:FF:83:04 Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: A5 Signing time: Sun 05 Apr 2026 06:37:13 +0000 Manifest this update: Sun 05 Apr 2026 06:37:13 +0000 Manifest next update: Sun 12 Apr 2026 06:37:13 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: SmjOPb2D7vTzP30GXFLLiCgs9EfLwKxTSUzVpQIgK8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Apr 5 06:37:13 2026 GMT Not After : Apr 12 06:37:13 2026 GMT Subject: CN=69d20319-c646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:53:a9:a0:39:e2:3d:fe:ad:21:4c:f7:81: 14:84:ef:03:df:02:27:34:0a:39:01:fd:4c:a5:db: ec:5d:ab:e9:8a:94:40:13:6e:29:0e:1d:44:1e:87: 0c:0c:f9:53:aa:4d:0d:a1:50:1e:b9:f5:67:b0:58: 0f:1d:da:90:96:e4:e7:46:77:5c:42:9a:da:4b:b2: 04:58:c1:81:a0:46:d1:97:16:e1:53:f8:12:75:0e: 49:a0:c1:5c:ec:f7:c1:66:c1:a8:8a:c8:d3:0d:78: 7c:72:2d:23:eb:5e:dc:7a:08:d3:13:d8:4e:07:15: 65:5a:d3:19:b8:06:03:73:5b:ae:c0:fe:e1:93:d1: be:74:88:70:50:b9:f0:9a:29:a2:bf:88:56:a6:9d: 2a:fa:56:93:22:ca:4e:b0:88:20:4b:bb:6f:0b:1e: a1:6c:63:64:96:89:9c:79:ad:12:43:d6:ef:5d:d8: 6c:66:86:55:5a:5b:7c:87:21:d8:0d:fc:a7:e9:a1: ad:36:ed:68:0f:62:3e:e5:b0:d9:dc:98:f4:ed:62: 54:49:aa:55:c4:60:90:58:31:b0:ec:73:91:62:c4: 17:9d:c0:6a:3d:03:ea:e2:e7:2a:1f:72:e5:6e:97: 60:ef:c9:b8:f0:0d:02:c9:8f:70:ce:d8:f5:e4:01: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2A:72:D2:73:1B:1E:18:89:11:C2:41:DD:CE:D5:1C:32:FF:83:04 X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d2:b5:1e:a4:15:a2:47:9c:d4:91:bd:4f:38:d0:ad:c1:66: ff:f3:a8:3e:db:96:91:6b:51:f8:39:15:37:b9:f7:b8:86:ce: ad:d4:60:a1:ff:89:98:2b:c9:08:8a:76:ef:3f:69:7b:18:bb: 8c:a3:d6:da:01:0c:99:37:c9:60:06:81:3e:d6:2e:96:2c:98: 88:83:50:23:bf:a1:cc:db:61:57:90:3d:c3:d7:d4:da:95:de: 1b:37:28:09:04:10:8c:c6:00:96:0e:9e:89:49:c5:ba:cf:94: 4c:1e:26:ca:3c:c8:07:cd:20:1f:85:b0:35:b4:20:eb:dd:36: b4:bc:ae:d7:6f:aa:f0:e1:a7:23:63:80:3a:49:3a:ab:5c:c8: 89:6b:70:2e:2e:4a:48:ba:76:20:10:88:a1:85:df:9f:00:35: c1:f4:0e:6f:67:d5:cc:89:af:9b:78:7d:01:54:de:6c:71:f4: c2:21:1f:ec:31:72:a4:fc:f7:07:37:7d:9e:1f:6a:39:ee:f9: 14:d4:7e:c7:fc:6e:fd:83:72:ad:11:30:06:90:52:0f:47:ff: 0b:b4:df:f2:75:5c:c9:db:59:86:b9:45:e9:a2:a3:3d:89:57: fc:9d:cd:bb:3e:9e:dc:4b:42:19:33:17:bf:44:e5:3b:08:ef: 43:b3:be:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDMUUxMTAvBgNVBAUTKDE4OEVGNkZGNTdGMUY1RkI0RkFCMEFBRURBQTkyRDYw NEYyNzU1MzAwHhcNMjYwNDA1MDYzNzEzWhcNMjYwNDEyMDYzNzEzWjAYMRYwFAYD VQQDEw02OWQyMDMxOS1jNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwVTqaA54j3+rSFM94EUhO8D3wInNAo5Af1MpdvsXavpipRAE24pDh1EHocM DPlTqk0NoVAeufVnsFgPHdqQluTnRndcQpraS7IEWMGBoEbRlxbhU/gSdQ5JoMFc 7PfBZsGoisjTDXh8ci0j617cegjTE9hOBxVlWtMZuAYDc1uuwP7hk9G+dIhwULnw mimiv4hWpp0q+laTIspOsIggS7tvCx6hbGNklomcea0SQ9bvXdhsZoZVWlt8hyHY Dfyn6aGtNu1oD2I+5bDZ3Jj07WJUSapVxGCQWDGw7HORYsQXncBqPQPq4ucqH3Ll bpdg78m48A0CyY9wztj15AH96wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkqctJz Gx4YiRHCQd3O1Rwy/4MEMB8GA1UdIwQYMBaAFBiO9v9X8fX7T6sKrtqpLWBPJ1Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUMxRS9FNzI1MDI0RTM1 M0ExMUYwOEM5NUMwNjdDNEY5QUUwMi9HSTcyXzFmeDlmdFBxd3F1MnFrdFlFOG5W VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUMxRS9FNzI1MDI0RTM1M0ExMUYwOEM5NUMwNjdDNEY5QUUwMi9HSTcyXzFmeDlm dFBxd3F1MnFrdFlFOG5WVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF9K1HqQVokec1JG9TzjQrcFm//OoPtuWkWtR+DkVN7n3uIbOrdRgof+JmCvJ CIp27z9pexi7jKPW2gEMmTfJYAaBPtYuliyYiINQI7+hzNthV5A9w9fU2pXeGzco CQQQjMYAlg6eiUnFus+UTB4myjzIB80gH4WwNbQg6902tLyu12+q8OGnI2OAOkk6 q1zIiWtwLi5KSLp2IBCIoYXfnwA1wfQOb2fVzImvm3h9AVTebHH0wiEf7DFypPz3 Bzd9nh9qOe75FNR+x/xu/YNyrREwBpBSD0f/C7Tf8nVcydtZhrlF6aKjPYlX/J3N uz6e3EtCGTMXv0TlOwjvQ7O+Iw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:44 2026 by rpki-client