$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: BL2r3ulN22ACmH0JcMI9d3LKN7uBO95YU/gmFTW1tW4= Subject key identifier: B5:29:11:F8:20:87:B5:C4:90:4B:A1:9C:8B:6E:0C:AD:8E:50:E8:CB Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 136A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 134E Signing time: Tue 24 Mar 2026 16:53:31 +0000 Manifest this update: Tue 24 Mar 2026 16:53:31 +0000 Manifest next update: Tue 31 Mar 2026 16:53:31 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: fb6UqPidBRmmT5RUviINl/ppsioShFlDyX500ji9Zq0=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: oSnGk4vYQJveQWXL86sB7flSt8Jy820qrGLOu1rn4Eg=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: sd9+ALp0YYtvXLfArPgRGvjlT/zp9F/rCyw3tuwyW5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4970 (0x136a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Mar 24 16:53:31 2026 GMT Not After : Mar 31 16:53:31 2026 GMT Subject: CN=69c2c18b-ec2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:28:19:39:4d:a6:00:6b:93:dd:8f:96:09: 23:4a:36:9b:0c:a2:38:84:ab:8d:06:8c:62:1b:2c: 35:52:59:72:4b:5a:44:9b:46:85:52:b7:c4:0e:fe: 88:48:b1:26:06:a2:9c:11:35:9a:ab:61:ac:c4:de: e9:b2:67:fc:bc:9f:0b:00:2d:b5:55:e9:95:7e:f5: ac:3f:4c:f6:fd:c1:84:25:13:cf:7f:fb:26:b8:f4: ff:bb:e1:85:cf:50:fb:38:05:4c:17:09:7b:2e:9e: e1:0d:ed:19:89:e8:a1:a2:f7:15:82:0e:fa:40:ad: 41:0d:43:03:c5:f6:b9:22:b4:2a:fb:17:59:14:be: 41:b6:56:6d:f4:73:33:01:7b:9d:3b:28:7b:e9:d5: 2f:f0:73:33:82:b0:9d:f0:da:a9:0f:23:2f:07:cd: 51:f1:62:6c:d0:e4:c9:60:a6:44:d0:18:05:7a:c3: d8:c7:cc:52:d0:5d:06:6d:df:56:13:a5:05:1a:fd: b7:26:d6:84:09:b0:ed:6a:4e:57:2e:07:d6:eb:cc: 07:03:7e:1a:e7:0d:ef:2f:6e:a2:82:64:c6:4d:2a: 50:14:35:02:0b:3e:ab:28:0b:d2:46:84:ce:d6:e4: 39:a1:6a:a7:45:30:82:14:4d:d2:99:f4:9c:7f:9c: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:29:11:F8:20:87:B5:C4:90:4B:A1:9C:8B:6E:0C:AD:8E:50:E8:CB X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:fd:be:fa:ea:8c:26:26:c3:43:39:88:ea:ab:87:b5:ec:d6: ee:9e:61:4c:d5:e3:27:2e:d8:e3:25:e0:87:d0:ad:ab:34:c1: 86:51:1a:3b:72:8c:6c:32:0b:8a:55:e6:07:7c:7d:d5:46:22: 43:46:e1:c0:c9:3d:68:46:aa:b8:1b:6b:d0:2a:4c:64:5b:90: ce:41:cb:45:93:2b:5b:9b:14:d7:b5:a5:60:bb:e0:82:16:60: d1:b5:6e:2c:2d:76:ee:6f:90:81:45:1b:69:54:92:05:43:9d: c6:84:51:c9:37:3a:ad:26:29:95:98:2a:92:81:dd:ad:30:6f: 9e:7d:71:8f:b4:0d:a9:51:d7:d6:20:37:81:be:ac:40:77:d8: 53:c3:c8:ab:ab:39:19:c0:1c:29:c8:01:4e:2a:19:d6:a7:3a: d5:0e:e8:be:f0:c3:33:c4:47:0c:e6:26:77:91:3b:f5:38:bf: 0e:c4:06:f9:e2:11:96:e4:18:83:b3:98:ef:58:7c:26:a1:5f: 04:33:70:4a:ff:7a:2c:b0:43:bf:80:3f:23:c3:51:8d:3c:e6: 1d:5f:14:f0:51:df:63:a7:7c:96:f7:47:0b:eb:92:4c:47:4d: 10:37:5e:54:7f:a2:98:e3:e4:0d:68:7b:47:93:67:4b:e8:96: e4:d0:89:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjYwMzI0MTY1MzMxWhcNMjYwMzMxMTY1MzMxWjAYMRYwFAYD VQQDEw02OWMyYzE4Yi1lYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eEoGTlNpgBrk92PlgkjSjabDKI4hKuNBoxiGyw1UllyS1pEm0aFUrfEDv6I SLEmBqKcETWaq2GsxN7psmf8vJ8LAC21VemVfvWsP0z2/cGEJRPPf/smuPT/u+GF z1D7OAVMFwl7Lp7hDe0ZieihovcVgg76QK1BDUMDxfa5IrQq+xdZFL5BtlZt9HMz AXudOyh76dUv8HMzgrCd8NqpDyMvB81R8WJs0OTJYKZE0BgFesPYx8xS0F0Gbd9W E6UFGv23JtaECbDtak5XLgfW68wHA34a5w3vL26igmTGTSpQFDUCCz6rKAvSRoTO 1uQ5oWqnRTCCFE3SmfScf5xKzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUpEfgg h7XEkEuhnItuDK2OUOjLMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxf2++uqMJibDQzmI6quHtezW7p5hTNXjJy7Y4yXgh9CtqzTBhlEaO3KMbDIL ilXmB3x91UYiQ0bhwMk9aEaquBtr0CpMZFuQzkHLRZMrW5sU17WlYLvgghZg0bVu LC127m+QgUUbaVSSBUOdxoRRyTc6rSYplZgqkoHdrTBvnn1xj7QNqVHX1iA3gb6s QHfYU8PIq6s5GcAcKcgBTioZ1qc61Q7ovvDDM8RHDOYmd5E79Ti/DsQG+eIRluQY g7OY71h8JqFfBDNwSv96LLBDv4A/I8NRjTzmHV8U8FHfY6d8lvdHC+uSTEdNEDde VH+imOPkDWh7R5NnS+iW5NCJMw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:24 2026 by rpki-client