$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: Q7M5Cq1BiqGkLqDYN+0PrSqOb0yXdPddZRc7kuVuxhg= Subject key identifier: 8B:16:CC:54:0B:0F:01:68:B9:AD:A7:61:11:6D:09:AC:B5:D2:49:EC Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 0152 Signing time: Wed 25 Mar 2026 04:21:30 +0000 Manifest this update: Wed 25 Mar 2026 04:21:29 +0000 Manifest next update: Wed 01 Apr 2026 04:21:29 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: gVLIczbP3OULT1lHYw0UngnnHqJeAdBEbbqgvWpIQ28=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: 7pTLODEiwxdgiEvkl8qH82EnqbNP4jVD6G5IWDrN454=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Mar 25 04:21:29 2026 GMT Not After : Apr 1 04:21:29 2026 GMT Subject: CN=69c362ca-417e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:7c:12:cf:9d:24:08:8d:28:33:55:b7:7b: f8:41:36:a3:dd:43:c1:c7:ee:f6:6e:f8:b1:2f:93: 45:ac:62:a8:da:00:cf:60:f9:44:b6:0b:9e:e2:3c: d0:ac:ee:2b:63:cc:1e:c6:f2:43:00:48:ab:5b:10: 24:fa:2f:9b:83:1f:6a:0e:7d:16:82:90:08:7b:30: 2a:4b:b8:7b:fa:6d:6b:39:64:75:a6:f6:d0:74:92: 5a:a0:01:5c:e8:5f:5e:e1:e7:28:74:31:ff:31:21: a3:71:8f:c8:b7:ce:17:05:e5:17:89:e9:46:7b:66: 7c:48:23:a1:d6:b1:cf:a8:87:05:8f:40:ac:5b:64: 4d:28:18:47:01:9a:11:6a:e7:ca:d5:0a:d1:9a:cb: 8b:57:d2:d4:5e:58:16:a2:c8:c9:c7:fb:b2:ed:5a: f8:eb:b5:0c:6d:ad:74:c5:28:20:ac:17:ce:45:b4: 2c:dd:68:08:c7:b6:49:29:4d:ce:b4:57:da:a6:10: f8:14:ed:57:c8:d5:92:f1:ce:2b:db:62:06:01:8c: ff:a1:b8:99:84:f7:5a:51:91:2c:00:42:0b:3d:83: 50:4f:58:d2:5e:2c:2f:6d:b1:5e:dc:9f:a2:54:83: 8a:82:f8:d0:c5:1f:24:7a:51:a5:fa:f8:45:d6:49: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:16:CC:54:0B:0F:01:68:B9:AD:A7:61:11:6D:09:AC:B5:D2:49:EC X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2c:f3:15:f0:4c:83:aa:34:6a:c8:ca:a9:6f:3d:41:a3:f3: 8f:34:07:85:b6:0a:3d:43:4b:20:64:f5:53:e5:8d:da:a7:38: 32:de:e3:19:f7:94:27:99:a0:7a:7f:7c:a9:7a:08:93:64:a5: a2:d4:30:de:3e:f3:9c:9d:0f:ee:f1:11:54:40:88:21:a8:b8: 59:f2:63:1f:9e:f6:f8:b3:38:1a:04:51:34:b5:2d:b0:98:2f: d9:d4:48:f8:4f:6a:79:09:61:90:33:5b:6e:da:ce:fa:4e:3f: 97:80:f6:ca:42:7d:88:9a:17:ae:cc:8f:30:6d:3f:c3:cc:f0: aa:64:9d:65:21:9d:68:e5:ee:d4:3c:59:d2:4e:ee:c8:4b:48: c0:c1:44:d1:42:90:1b:5e:59:06:22:7e:7e:b6:28:70:01:d8: 0c:c4:0d:1a:b9:a2:43:af:97:ca:4f:5c:c1:eb:74:a3:ac:37: 6e:8f:22:1d:ea:06:f6:9c:72:29:9d:0f:5f:cc:84:16:f7:53: 4b:4e:36:17:fe:cc:ce:5e:11:4b:2a:a0:67:bb:6f:c3:72:3b: 0c:b2:6e:66:19:27:13:b4:a5:a0:c9:7c:ee:26:d0:a4:c4:66: 09:f7:6b:04:e9:68:4b:fd:97:76:7f:fc:1b:c0:c1:b1:d7:23: f4:fe:68:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjYwMzI1MDQyMTI5WhcNMjYwNDAxMDQyMTI5WjAYMRYwFAYD VQQDEw02OWMzNjJjYS00MTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQJ8Es+dJAiNKDNVt3v4QTaj3UPBx+72bvixL5NFrGKo2gDPYPlEtgue4jzQ rO4rY8wexvJDAEirWxAk+i+bgx9qDn0WgpAIezAqS7h7+m1rOWR1pvbQdJJaoAFc 6F9e4ecodDH/MSGjcY/It84XBeUXielGe2Z8SCOh1rHPqIcFj0CsW2RNKBhHAZoR aufK1QrRmsuLV9LUXlgWosjJx/uy7Vr467UMba10xSggrBfORbQs3WgIx7ZJKU3O tFfaphD4FO1XyNWS8c4r22IGAYz/obiZhPdaUZEsAEILPYNQT1jSXiwvbbFe3J+i VIOKgvjQxR8kelGl+vhF1km2mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsWzFQL DwFoua2nYRFtCay10knsMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfCzzFfBMg6o0asjKqW89QaPzjzQHhbYKPUNLIGT1U+WN2qc4Mt7jGfeUJ5mg en98qXoIk2SlotQw3j7znJ0P7vERVECIIai4WfJjH572+LM4GgRRNLUtsJgv2dRI +E9qeQlhkDNbbtrO+k4/l4D2ykJ9iJoXrsyPMG0/w8zwqmSdZSGdaOXu1DxZ0k7u yEtIwMFE0UKQG15ZBiJ+frYocAHYDMQNGrmiQ6+Xyk9cwet0o6w3bo8iHeoG9pxy KZ0PX8yEFvdTS042F/7Mzl4RSyqgZ7tvw3I7DLJuZhknE7SloMl87ibQpMRmCfdr BOloS/2Xdn/8G8DBsdcj9P5oXg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:46 2026 by rpki-client