$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json) Hash identifier: o2pC4A4vrVsFMzBSg8XZFrsMcbbKFM1SnzRrP6bOoZA= Subject key identifier: 96:42:32:B1:D6:C9:F1:0C:2C:59:BC:FD:1E:B9:5C:48:FC:4D:78:17 Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft Manifest number: 47 Signing time: Wed 25 Mar 2026 07:36:59 +0000 Manifest this update: Wed 25 Mar 2026 07:36:59 +0000 Manifest next update: Wed 01 Apr 2026 07:36:59 +0000 Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: ZeKw87k1FLAwHdh39OJBpX+vsoOQ2SvpcnOrVDGTgo8=) 2: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=) 3: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=) 4: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Mar 25 07:36:59 2026 GMT Not After : Apr 1 07:36:59 2026 GMT Subject: CN=69c3909b-6647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:b0:b3:cf:9c:d6:83:b5:29:ae:8b:5f:8b: d2:41:05:60:d0:15:41:45:16:87:da:4f:31:95:08: 01:0c:43:02:6f:6f:58:6b:8d:c2:2d:38:bb:fe:c4: ac:a3:f8:3c:71:15:1f:b9:d0:4b:ad:87:32:12:4d: ab:0b:0b:7e:c5:1c:df:ea:be:38:5f:36:e0:5f:54: 42:61:c2:2d:ec:9f:9c:b7:4a:3e:3e:4c:fc:46:e8: 4b:00:7b:16:b9:f5:09:f6:63:ec:84:14:e1:7d:64: f0:d9:88:78:da:17:d2:54:fa:29:d5:fe:3d:0d:ba: 2b:09:fa:67:46:b5:0b:a2:d2:2c:d5:9c:22:b9:87: 5d:cb:de:be:2d:10:3d:9f:ed:e3:a0:ba:c1:28:40: dd:cb:26:4f:45:96:2f:11:af:55:2b:2e:16:c8:0f: 16:05:ec:f6:c6:66:1d:4f:7d:aa:49:cd:6d:06:0c: 83:4b:b4:ae:94:22:e8:35:b7:d5:33:db:8f:a8:69: bf:e9:43:e6:07:38:54:a3:c2:45:06:34:35:ce:cb: 6d:9a:e6:4f:73:57:a3:45:cf:c3:d1:56:52:db:86: dd:94:d4:b3:ab:1d:2b:4a:9f:4f:6f:e8:33:cb:b7: 81:92:f8:03:3d:a0:5a:3f:00:ae:44:31:7c:d2:36: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:32:B1:D6:C9:F1:0C:2C:59:BC:FD:1E:B9:5C:48:FC:4D:78:17 X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:44:47:48:b0:c5:5d:45:93:98:cd:49:8b:51:1c:14:f2:35: 2c:12:78:be:4a:bd:f3:da:60:ec:bc:3e:49:b7:c4:24:80:5c: 82:9b:50:9b:0a:ae:d7:6a:fb:d9:a9:85:dc:2e:25:fe:45:31: 3b:80:54:7b:ed:30:df:ca:e0:b5:4b:38:af:f3:f4:9b:b9:7e: 3c:0c:13:81:90:9c:d5:bc:9d:b9:77:23:70:91:8a:0d:2a:79: d4:00:1d:18:5a:7e:57:b7:c6:59:65:bf:a9:1d:ab:f7:48:ca: 8b:0a:96:d7:3b:df:38:2f:c2:ab:ca:8f:f5:10:62:27:b4:fa: 4d:5e:88:d8:a5:b9:93:10:cf:f2:40:7a:c2:21:73:c7:62:45: e0:dc:fd:b6:51:60:ef:e7:80:5b:f7:4c:77:b2:ec:7b:e7:a5: a5:4b:29:11:0f:2b:24:17:03:26:0b:fa:ae:1b:2d:4b:fb:7c: 80:21:fd:e1:e7:94:b5:24:66:c4:16:d1:45:ff:8c:6b:50:e9: 81:15:6f:1b:43:f3:c9:9e:b1:96:23:84:bc:aa:58:65:4f:6f: 0e:07:cf:ec:40:66:0d:41:11:54:25:d7:5f:63:1c:87:fa:06: 70:86:71:e5:12:80:e7:39:65:fb:da:b5:50:e5:c7:61:6c:1a: c9:95:1a:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5 QzYzRTIyMDAeFw0yNjAzMjUwNzM2NTlaFw0yNjA0MDEwNzM2NTlaMBgxFjAUBgNV BAMTDTY5YzM5MDliLTY2NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrFbCzz5zWg7Uprotfi9JBBWDQFUFFFofaTzGVCAEMQwJvb1hrjcItOLv+xKyj +DxxFR+50EuthzISTasLC37FHN/qvjhfNuBfVEJhwi3sn5y3Sj4+TPxG6EsAexa5 9Qn2Y+yEFOF9ZPDZiHjaF9JU+inV/j0NuisJ+mdGtQui0izVnCK5h13L3r4tED2f 7eOgusEoQN3LJk9Fli8Rr1UrLhbIDxYF7PbGZh1PfapJzW0GDINLtK6UIug1t9Uz 24+oab/pQ+YHOFSjwkUGNDXOy22a5k9zV6NFz8PRVlLbht2U1LOrHStKn09v6DPL t4GS+AM9oFo/AK5EMXzSNtW5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlkIysdbJ 8QwsWbz9HrlcSPxNeBcwHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0FFODgzNjY4QzhFQzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJI N3Z2N0Z1VVQtYjV4ajRpQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA2REdIsMVdRZOYzUmLURwU8jUsEni+Sr3z2mDsvD5Jt8QkgFyCm1CbCq7XavvZ qYXcLiX+RTE7gFR77TDfyuC1Sziv8/SbuX48DBOBkJzVvJ25dyNwkYoNKnnUAB0Y Wn5Xt8ZZZb+pHav3SMqLCpbXO984L8Kryo/1EGIntPpNXojYpbmTEM/yQHrCIXPH YkXg3P22UWDv54Bb90x3sux756WlSykRDyskFwMmC/quGy1L+3yAIf3h55S1JGbE FtFF/4xrUOmBFW8bQ/PJnrGWI4S8qlhlT28OB8/sQGYNQRFUJddfYxyH+gZwhnHl EoDnOWX72rVQ5cdhbBrJlRoC -----END CERTIFICATE-----Generated at Thu Mar 26 16:35:08 2026 by rpki-client