$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json) Hash identifier: 1XOLRpECZK5hPSZWYmc10ZNkTq4Rw3vibq3vhIU9gLA= Subject key identifier: D3:04:ED:83:A8:A9:3E:64:90:AA:A0:6B:ED:60:5C:47:D7:28:DA:DD Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft Manifest number: 4D Signing time: Mon 11 May 2026 08:33:25 +0000 Manifest this update: Mon 11 May 2026 08:33:25 +0000 Manifest next update: Mon 18 May 2026 08:33:25 +0000 Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: 2CIID86I5Zam9gTcYs3VSU7DCh4x8+bPq1Yr06Og8vw=) 2: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=) 3: 18EB15B84C6C11F1A78F0F88C2833773.roa (hash: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Validity Not Before: May 11 08:33:25 2026 GMT Not After : May 18 08:33:25 2026 GMT Subject: CN=6a019455-c78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:30:2f:21:18:35:99:b5:e7:73:96:d2:be: e6:61:65:8e:81:e0:96:3d:3a:1c:0e:68:6f:67:db: d5:11:84:90:df:1a:64:24:bf:1f:cd:72:e8:ab:50: d5:58:33:8c:1e:8e:66:c9:50:03:78:0d:aa:73:b7: a2:91:b7:a2:da:09:a6:ad:ba:75:b1:3d:b6:60:73: ad:85:8c:c0:c3:93:1f:ee:a7:d5:8d:f9:03:0b:09: 8d:df:57:f0:96:a2:75:84:51:06:73:64:37:bd:18: aa:f3:46:21:a9:e5:79:b8:63:53:c3:48:17:f9:4f: 28:d7:f3:17:28:fa:ab:28:c4:8a:35:29:3f:44:56: c6:e1:04:95:ba:85:6b:24:de:3f:be:4e:7e:7a:13: 45:13:95:cc:ee:c0:0c:33:18:2c:6c:fb:1b:5c:6a: 23:34:3f:73:c2:1d:6d:d7:37:14:1b:c3:34:4a:06: 0b:85:44:71:7c:46:b0:ec:65:29:d3:46:aa:f0:7e: 95:f7:a0:3f:82:b6:f8:c8:2e:74:b7:fa:e5:71:7e: 2b:68:0c:b7:52:3a:f7:c4:a6:fc:73:ae:48:d3:27: e8:29:a2:50:9b:32:29:81:67:32:b6:33:39:f7:1f: 66:55:62:70:37:c4:54:53:9e:a8:5f:67:8f:2d:d1: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:04:ED:83:A8:A9:3E:64:90:AA:A0:6B:ED:60:5C:47:D7:28:DA:DD X509v3 Authority Key Identifier: keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e8:94:3f:21:71:d6:90:b6:53:ac:c9:6a:f8:d2:fa:ea:0e: db:7a:15:ad:a6:21:2d:ef:f1:97:b1:ff:c9:22:d3:82:bf:f8: 7d:8b:09:fd:04:a4:0c:63:a4:4a:4b:84:a2:03:f6:02:64:db: b5:a1:76:1f:83:5e:8e:ee:7f:b7:e6:94:18:30:35:f1:7d:0a: 37:d5:f8:57:7f:1c:87:f5:ae:f0:56:21:bd:7f:65:71:48:2f: d1:b3:b0:f0:a3:38:73:13:fd:64:58:7f:bf:ad:8c:bc:0e:d6: 6c:1b:77:1b:f5:09:67:1a:7c:3a:45:03:47:e9:c8:43:3a:81: a7:04:13:e5:aa:3f:c5:fb:2e:03:72:22:d4:29:e2:93:65:34: 8e:08:d5:f2:69:a5:66:b8:a0:c1:6d:8e:25:33:f8:ce:f9:ba: 85:bc:cc:1c:1f:c5:bb:4e:6e:5a:5c:dd:47:e2:cf:bb:38:a2: c5:cc:7a:fb:94:f3:f6:b9:bf:46:fd:95:fb:36:78:0d:bb:0c: 09:61:3e:5f:1d:91:90:57:40:f3:d4:34:d0:c4:f4:07:28:aa: 62:71:5f:06:c9:65:ba:28:37:eb:bc:ed:c8:d2:3d:c1:a8:9f: ed:00:51:8e:27:93:4f:14:62:7b:fe:bf:50:e7:93:97:90:b0: 91:50:92:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD OUQ3QjUyRjAeFw0yNjA1MTEwODMzMjVaFw0yNjA1MTgwODMzMjVaMBgxFjAUBgNV BAMTDTZhMDE5NDU1LWM3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPwjAvIRg1mbXnc5bSvuZhZY6B4JY9OhwOaG9n29URhJDfGmQkvx/NcuirUNVY M4wejmbJUAN4Dapzt6KRt6LaCaatunWxPbZgc62FjMDDkx/up9WN+QMLCY3fV/CW onWEUQZzZDe9GKrzRiGp5Xm4Y1PDSBf5TyjX8xco+qsoxIo1KT9EVsbhBJW6hWsk 3j++Tn56E0UTlczuwAwzGCxs+xtcaiM0P3PCHW3XNxQbwzRKBguFRHF8RrDsZSnT RqrwfpX3oD+CtvjILnS3+uVxfitoDLdSOvfEpvxzrkjTJ+gpolCbMimBZzK2Mzn3 H2ZVYnA3xFRTnqhfZ48t0fF3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0wTtg6ip PmSQqqBr7WBcR9co2t0wHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC Q0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2 a0ZwckM2LTNINXNuWHRTOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA96JQ/IXHWkLZTrMlq+NL66g7behWtpiEt7/GXsf/JItOCv/h9iwn9BKQMY6RK S4SiA/YCZNu1oXYfg16O7n+35pQYMDXxfQo31fhXfxyH9a7wViG9f2VxSC/Rs7Dw ozhzE/1kWH+/rYy8DtZsG3cb9QlnGnw6RQNH6chDOoGnBBPlqj/F+y4DciLUKeKT ZTSOCNXyaaVmuKDBbY4lM/jO+bqFvMwcH8W7Tm5aXN1H4s+7OKLFzHr7lPP2ub9G /ZX7NngNuwwJYT5fHZGQV0Dz1DTQxPQHKKpicV8GyWW6KDfrvO3I0j3BqJ/tAFGO J5NPFGJ7/r9Q55OXkLCRUJL8 -----END CERTIFICATE-----Generated at Wed May 13 09:16:19 2026 by rpki-client