$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: hm6tuS7yGe4HZho7SCXjyEiLuLZzxBUAaWWRXArtajs= Subject key identifier: 9F:8E:F9:2B:B7:21:7D:E3:E9:B5:F2:0D:96:F5:CC:2B:C2:FE:3C:33 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 0431 Signing time: Tue 22 Sep 2026 23:53:41 +0000 Manifest this update: Tue 22 Sep 2026 23:53:41 +0000 Manifest next update: Tue 29 Sep 2026 23:53:41 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: AtDClMHxSZdfonxesiQ55GFdgpUou/r5NJXfK14G7is=) 2: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=) 3: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=) 4: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Sep 22 23:53:41 2026 GMT Not After : Sep 29 23:53:41 2026 GMT Subject: CN=6ab31505-75e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:b3:5a:81:0b:5a:68:70:86:19:8a:9a:9c: 35:97:a2:af:cc:11:c3:8e:73:f0:b1:b3:e1:8a:d4: 1d:43:f4:ac:c4:e0:02:72:80:c4:05:62:fc:bb:75: b6:66:89:d0:a3:c9:61:5c:62:21:6a:1c:86:0d:67: 18:35:09:16:bc:cf:5f:6e:e3:d2:24:a4:91:08:ff: fb:7e:16:54:27:3b:e2:59:66:ac:c2:68:da:62:6e: 22:a7:bb:86:71:d4:c1:72:ad:df:ba:21:8f:84:50: e1:24:89:f3:8c:7a:7b:33:d7:ac:9e:b4:fa:56:0b: b6:24:79:0a:a6:d8:68:d3:44:a4:80:b9:4c:16:63: 5d:85:d1:d6:95:99:ad:d8:86:7f:08:8e:f4:13:9a: df:1d:51:6e:92:6b:8f:82:08:ed:b7:50:7e:5f:3c: 4a:14:18:24:e5:f4:7a:25:d9:29:05:09:55:35:e0: 12:3e:c7:75:19:48:b5:1e:56:54:bd:ab:8a:22:5c: 97:da:c9:71:85:e9:11:d2:85:31:0e:99:d5:e3:9f: 9b:a3:12:6b:5d:ac:22:2c:03:bb:e5:5f:5f:eb:30: 3b:cc:f9:be:94:6e:b2:92:a5:87:14:94:76:79:2f: 76:77:42:36:d6:ae:38:f6:06:3d:c7:87:2b:fa:55: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8E:F9:2B:B7:21:7D:E3:E9:B5:F2:0D:96:F5:CC:2B:C2:FE:3C:33 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:06:3a:20:76:4f:dd:a1:1c:f9:01:8b:5d:e2:37:bf:b5:8d: ae:4c:5a:bd:ea:11:90:fc:b7:7a:43:51:c1:81:6a:71:f1:1b: ae:00:ed:55:a2:8b:22:dd:9f:eb:10:d1:7c:ad:ec:63:c5:da: 49:58:64:0c:96:30:12:78:9d:c8:22:d6:8f:69:2b:ab:7f:63: 98:a9:9d:79:8b:18:a8:9c:3e:75:35:d9:96:2b:72:98:53:cb: b6:53:9e:1d:c7:42:05:54:a8:f5:38:96:63:c1:94:1c:71:fe: e0:f8:1c:34:68:f3:3f:e2:ed:13:a2:1f:74:72:e4:77:a0:53: 07:21:66:db:7b:82:72:24:16:c5:3a:7b:f9:5e:6a:92:42:26: d2:4f:e1:64:21:73:ba:67:39:4c:bd:fa:52:8f:18:0c:1f:5b: 9d:15:a9:7b:cc:2b:39:ec:14:41:db:ad:c5:dd:2a:b3:a0:5d: 50:b3:7a:bb:0a:c3:c3:9b:19:3e:3c:f7:28:e9:65:e7:35:f4: f0:8a:aa:1b:6c:0f:cd:89:bd:34:45:2e:1f:09:d3:ef:1a:36: 8f:22:4a:41:1c:22:1d:bc:1c:35:3d:e0:30:3a:f9:f3:04:84: 36:05:1d:d5:86:35:54:2b:65:79:00:47:dc:62:57:c9:fe:18: b0:9f:80:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjYwOTIyMjM1MzQxWhcNMjYwOTI5MjM1MzQxWjAYMRYwFAYD VQQDEw02YWIzMTUwNS03NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWKzWoELWmhwhhmKmpw1l6KvzBHDjnPwsbPhitQdQ/SsxOACcoDEBWL8u3W2 ZonQo8lhXGIhahyGDWcYNQkWvM9fbuPSJKSRCP/7fhZUJzviWWaswmjaYm4ip7uG cdTBcq3fuiGPhFDhJInzjHp7M9esnrT6Vgu2JHkKptho00SkgLlMFmNdhdHWlZmt 2IZ/CI70E5rfHVFukmuPggjtt1B+XzxKFBgk5fR6JdkpBQlVNeASPsd1GUi1HlZU vauKIlyX2slxhekR0oUxDpnV45+boxJrXawiLAO75V9f6zA7zPm+lG6ykqWHFJR2 eS92d0I21q449gY9x4cr+lWRmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+O+Su3 IX3j6bXyDZb1zCvC/jwzMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlQY6IHZP3aEc+QGLXeI3v7WNrkxaveoRkPy3ekNRwYFqcfEbrgDtVaKLIt2f 6xDRfK3sY8XaSVhkDJYwEnidyCLWj2krq39jmKmdeYsYqJw+dTXZlitymFPLtlOe HcdCBVSo9TiWY8GUHHH+4PgcNGjzP+LtE6IfdHLkd6BTByFm23uCciQWxTp7+V5q kkIm0k/hZCFzumc5TL36Uo8YDB9bnRWpe8wrOewUQdutxd0qs6BdULN6uwrDw5sZ Pjz3KOll5zX08IqqG2wPzYm9NEUuHwnT7xo2jyJKQRwiHbwcNT3gMDr58wSENgUd 1YY1VCtleQBH3GJXyf4YsJ+ADg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:27:40 2026 by rpki-client