$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: VIQ6K8VZby4NonJFbKBoMa4FhtbqRRon/Zi0hXN4FI8= Subject key identifier: 12:DB:2C:BE:2F:0E:07:42:A9:55:31:25:B8:6B:16:EA:52:01:3F:7D Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 03D2 Signing time: Wed 25 Mar 2026 00:14:41 +0000 Manifest this update: Wed 25 Mar 2026 00:14:41 +0000 Manifest next update: Wed 01 Apr 2026 00:14:41 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: jWJHlYpLkO9QMYKVSOwLxFzsnrz0M4Gz0UHdBJg6vfU=) 2: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: Olp3ZD+KVecOlfGoX1LPX5Wca4ynuugi2374UO2D6d4=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: +jMfdrNgrz1Nzrt0QgBnBGHQwacuV0bREddxSJbErg4=) 4: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: tIlegLOK6K2gzpC3EMxXzCQPQ5ijkvaOZu7GF+ennV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Mar 25 00:14:41 2026 GMT Not After : Apr 1 00:14:41 2026 GMT Subject: CN=69c328f1-aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:a7:30:d9:2f:ab:0b:e9:a5:d1:f8:9f:6d: 85:b0:da:d9:26:4b:4a:4b:c1:e4:4f:df:08:55:4c: 7d:a3:fa:41:b6:af:90:71:15:33:57:2b:ab:53:6f: ad:ef:0c:a6:67:39:d2:e0:1a:23:ec:09:2a:2c:fe: a9:f6:ca:e7:8a:04:95:23:9d:8a:b9:df:16:ee:e6: b8:5c:7e:aa:59:74:0f:f1:b4:62:18:2b:76:b7:e4: ac:76:b4:ec:2c:18:69:0d:25:66:da:13:89:3d:bc: 4c:e4:d7:75:68:50:9c:24:01:8b:63:ea:8f:a1:e6: ef:48:bb:1f:18:1e:6e:da:4f:0c:26:99:3b:3c:a1: 4d:bf:d9:4c:90:36:53:2b:3a:3b:ec:d1:70:fb:13: 27:df:9b:96:fc:cc:d6:a5:f4:82:6d:bf:74:25:d4: 4c:58:9e:a7:6b:97:3e:fd:53:5b:ad:50:c2:cf:0c: 5c:a3:cd:44:ed:7b:45:74:c4:d0:b8:21:cf:e8:df: a3:3b:60:d5:70:cf:fd:62:af:a1:d9:aa:c3:fd:ea: 6e:1f:08:70:1d:6e:7d:9f:aa:3a:27:a5:b1:b4:94: 03:0d:01:19:df:81:45:83:ac:d2:fb:9c:dc:f8:21: 78:78:a3:05:af:67:a0:fe:16:a0:b8:fd:5d:3b:b0: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:2C:BE:2F:0E:07:42:A9:55:31:25:B8:6B:16:EA:52:01:3F:7D X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5e:29:74:9c:02:0e:7a:09:68:8e:ab:d0:b7:f0:90:03:e1: ea:02:cb:00:32:5c:b3:91:b0:e8:d3:0f:48:5a:95:93:b7:b4: 20:6b:e3:2f:86:48:54:56:f0:39:5a:bf:4f:dc:99:8c:3e:02: 7f:54:95:a4:53:fa:94:f4:ca:1b:c1:94:a5:84:50:87:ed:91: 01:03:03:7c:32:8c:f0:c4:8f:6e:9b:03:aa:7e:51:6d:22:8d: d5:29:d0:19:96:3d:f7:52:b6:d7:5c:6f:0a:84:fc:41:2c:03: c4:ab:ce:21:a8:38:9c:b9:8a:b2:44:06:24:0f:a2:83:d2:4a: 65:89:ae:44:62:bf:a3:78:83:21:13:f4:c2:85:ec:c9:c8:3e: 40:bd:f7:37:df:62:01:05:bd:82:15:c0:13:07:68:3f:52:81: 5c:df:e4:68:30:e5:6a:f6:69:a9:33:eb:5f:a9:4d:0b:f3:29: 09:07:3b:ba:42:f6:d1:df:c8:f5:08:82:38:86:4e:a1:e9:31: 6b:d6:d6:26:2b:91:52:32:9a:7f:aa:0f:6f:a3:ce:b9:70:4f: a3:04:15:29:09:57:cc:46:55:48:b3:a5:cc:e2:c5:21:0d:0d: d5:5a:ad:f1:3f:67:31:11:16:6f:65:f7:bb:ee:29:fd:b9:9f: 27:2c:4c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjYwMzI1MDAxNDQxWhcNMjYwNDAxMDAxNDQxWjAYMRYwFAYD VQQDEw02OWMzMjhmMS1hYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprinMNkvqwvppdH4n22FsNrZJktKS8HkT98IVUx9o/pBtq+QcRUzVyurU2+t 7wymZznS4Boj7AkqLP6p9srnigSVI52Kud8W7ua4XH6qWXQP8bRiGCt2t+SsdrTs LBhpDSVm2hOJPbxM5Nd1aFCcJAGLY+qPoebvSLsfGB5u2k8MJpk7PKFNv9lMkDZT Kzo77NFw+xMn35uW/MzWpfSCbb90JdRMWJ6na5c+/VNbrVDCzwxco81E7XtFdMTQ uCHP6N+jO2DVcM/9Yq+h2arD/epuHwhwHW59n6o6J6WxtJQDDQEZ34FFg6zS+5zc +CF4eKMFr2eg/haguP1dO7D4GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLbLL4v DgdCqVUxJbhrFupSAT99MB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYF4pdJwCDnoJaI6r0LfwkAPh6gLLADJcs5Gw6NMPSFqVk7e0IGvjL4ZIVFbw OVq/T9yZjD4Cf1SVpFP6lPTKG8GUpYRQh+2RAQMDfDKM8MSPbpsDqn5RbSKN1SnQ GZY991K211xvCoT8QSwDxKvOIag4nLmKskQGJA+ig9JKZYmuRGK/o3iDIRP0woXs ycg+QL33N99iAQW9ghXAEwdoP1KBXN/kaDDlavZpqTPrX6lNC/MpCQc7ukL20d/I 9QiCOIZOoekxa9bWJiuRUjKaf6oPb6POuXBPowQVKQlXzEZVSLOlzOLFIQ0N1Vqt 8T9nMREWb2X3u+4p/bmfJyxMIg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:55:17 2026 by rpki-client