$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: Ojz2wQ2JPOc3ufVhumQAErYmhyQ0c+w8nEBao6j65hI= Subject key identifier: 63:E3:6E:2C:58:CC:A8:93:64:8D:33:3D:CE:69:63:E7:DD:75:E0:ED Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 08D1 Signing time: Tue 24 Mar 2026 20:10:19 +0000 Manifest this update: Tue 24 Mar 2026 20:10:18 +0000 Manifest next update: Tue 31 Mar 2026 20:10:18 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: npnvYrWAGN15YfTSzq1+bLV/tQP/SyJSU5JOkVk/b3c=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: k0slGk6THhklii8X86eyYXN7YTIBN/mn56HfkDFdmb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Mar 24 20:10:18 2026 GMT Not After : Mar 31 20:10:18 2026 GMT Subject: CN=69c2efab-4563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:40:e1:cb:50:4c:53:e2:35:3e:98:d6:b6: 93:7d:81:f0:a0:fb:ff:92:a3:f7:f1:e7:57:d1:8c: 51:90:e6:d5:8e:04:f7:0c:9e:66:96:f0:66:11:e2: a2:cc:25:52:e1:86:9f:4a:fe:e5:f6:04:b3:43:c6: 65:8e:7d:88:ed:1b:83:5b:6f:cc:cd:c2:79:61:0e: 9b:f2:12:fa:3a:b4:cf:03:01:e2:d9:03:85:70:72: 3a:a9:1c:c3:ed:b1:e6:70:74:a4:32:15:1d:27:dd: c7:c3:97:57:a8:9b:ec:e6:4f:6a:b9:97:2b:70:c4: 94:7a:f1:0a:80:4a:01:aa:a7:eb:25:b2:fa:20:d4: 8d:16:50:5d:93:58:2e:73:7d:cc:77:82:8a:75:86: c9:5e:f6:42:a5:2b:71:f8:57:f5:aa:e9:25:bf:c7: 57:9e:f2:99:42:5d:7c:e0:77:98:fd:00:47:23:04: 3d:9e:a7:4e:9b:b5:05:e3:05:97:f5:5d:01:b3:90: 85:93:e4:bd:91:cb:83:3e:7b:b5:13:16:88:a3:02: 9e:e0:1f:b2:4c:ea:44:76:25:c2:fd:94:c6:74:1a: 3c:9a:85:63:2b:60:81:67:06:53:c0:ad:a0:d4:7e: 68:8a:8f:e0:b3:8f:50:4c:ae:7a:9f:38:d3:8b:48: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:6E:2C:58:CC:A8:93:64:8D:33:3D:CE:69:63:E7:DD:75:E0:ED X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:38:65:ed:0f:95:74:9e:92:da:0d:27:3d:23:70:b2:a8: 55:c3:69:ff:01:7f:19:ae:12:c1:db:c1:f4:45:cc:16:df:61: 36:10:bd:8b:f6:aa:a7:a9:42:37:20:ae:3c:cf:d6:ab:4c:57: 01:f5:b5:e8:30:fa:50:e9:11:5d:c4:5f:38:27:f3:27:fb:e0: 74:43:b8:fb:a3:18:7c:24:6b:c7:bd:71:b4:68:53:01:42:ec: 41:df:f6:ce:b4:da:6b:65:dd:ad:3c:cb:65:1d:f9:26:9b:e0: 7e:a6:4d:96:77:0e:30:31:13:c2:3a:21:75:4f:68:ce:72:8f: 9e:9c:5a:59:78:31:24:2a:5e:10:e6:13:85:9c:56:e5:db:61: 98:42:fc:44:2f:05:3f:e4:4a:8d:86:0c:84:cf:6d:c8:e6:4f: f1:f8:b6:ae:67:85:dd:41:2d:bd:82:91:a2:a6:8a:50:ae:f5: e2:fc:8b:4b:87:22:f9:34:27:d8:dd:a9:ae:8b:19:23:8a:30: 06:f3:50:87:1a:8a:e5:d3:7b:20:52:5f:a7:db:d0:b5:ee:5f: ac:db:cd:5f:dd:e2:c5:a0:92:5d:9d:02:e2:93:4c:2e:2d:73: 24:b8:eb:9d:5f:13:f0:8b:46:6f:b5:6a:af:de:82:e0:66:ef: dc:17:bd:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjYwMzI0MjAxMDE4WhcNMjYwMzMxMjAxMDE4WjAYMRYwFAYD VQQDEw02OWMyZWZhYi00NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6FA4ctQTFPiNT6Y1raTfYHwoPv/kqP38edX0YxRkObVjgT3DJ5mlvBmEeKi zCVS4YafSv7l9gSzQ8Zljn2I7RuDW2/MzcJ5YQ6b8hL6OrTPAwHi2QOFcHI6qRzD 7bHmcHSkMhUdJ93Hw5dXqJvs5k9quZcrcMSUevEKgEoBqqfrJbL6INSNFlBdk1gu c33Md4KKdYbJXvZCpStx+Ff1quklv8dXnvKZQl184HeY/QBHIwQ9nqdOm7UF4wWX 9V0Bs5CFk+S9kcuDPnu1ExaIowKe4B+yTOpEdiXC/ZTGdBo8moVjK2CBZwZTwK2g 1H5oio/gs49QTK56nzjTi0iOLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPjbixY zKiTZI0zPc5pY+fddeDtMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvM4Ze0PlXSektoNJz0jcLKoVcNp/wF/Ga4SwdvB9EXMFt9hNhC9i/aqp6lC NyCuPM/Wq0xXAfW16DD6UOkRXcRfOCfzJ/vgdEO4+6MYfCRrx71xtGhTAULsQd/2 zrTaa2XdrTzLZR35JpvgfqZNlncOMDETwjohdU9oznKPnpxaWXgxJCpeEOYThZxW 5dthmEL8RC8FP+RKjYYMhM9tyOZP8fi2rmeF3UEtvYKRoqaKUK714vyLS4ci+TQn 2N2prosZI4owBvNQhxqK5dN7IFJfp9vQte5frNvNX93ixaCSXZ0C4pNMLi1zJLjr nV8T8ItGb7Vqr96C4Gbv3Be9Ng== -----END CERTIFICATE-----Generated at Thu Mar 26 12:18:10 2026 by rpki-client