$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: ZQTMnGhMY5T6Nls35IBV/8GAbRMbIVRF9+QoeQ1vL/A= Subject key identifier: 41:BB:A0:F9:AA:36:34:EB:AE:EB:C6:C2:30:1E:05:79:B2:4C:A2:0D Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 1233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 1225 Signing time: Thu 26 Mar 2026 17:05:51 +0000 Manifest this update: Thu 26 Mar 2026 17:05:50 +0000 Manifest next update: Thu 02 Apr 2026 17:05:50 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: KEa6bwZF7OjDKlnZ1yw4TPjiPsf1IThfAV0QRZShQLk=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: dQ31DGysxuRcz8IXxZUTh7NYyP9e4QqCfC6Tluzrj9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4659 (0x1233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Mar 26 17:05:50 2026 GMT Not After : Apr 2 17:05:50 2026 GMT Subject: CN=69c5676f-0832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8f:84:e2:24:37:1b:32:8d:dd:36:7d:f4:f4: 3c:23:9d:49:62:ac:12:cc:4d:da:d9:40:58:7a:7a: 05:5d:26:0a:ca:a1:a6:00:92:f8:dd:a4:50:0e:af: 76:43:fa:61:50:6d:25:a5:d6:5e:7e:69:cc:93:0c: 07:f1:45:c9:4f:b9:c7:6e:f6:2c:49:b0:1f:7b:6e: 3b:9e:7b:4c:e9:e1:5f:57:14:1e:2c:89:d8:b5:b6: fd:a6:4b:2f:3b:34:dd:f2:c8:44:af:55:3e:ce:67: 6e:7f:e9:78:74:fc:7a:61:2a:2e:97:de:ef:37:04: 93:84:0c:d9:4d:d0:d3:f8:1d:54:5b:6a:bc:69:e3: 30:66:28:6a:1d:6a:34:8b:01:f4:9c:96:97:43:72: 2d:86:a4:d2:7c:42:46:72:5f:fa:f1:ff:5f:65:ce: 9e:d4:c3:64:04:6c:a0:0b:04:f4:a3:14:3b:1d:02: 5a:cb:58:cf:32:2f:cb:b5:bb:21:f1:41:94:db:4a: f8:8c:55:d2:f4:99:e1:b6:05:b6:9a:0e:b2:e4:d7: 1e:a7:2f:89:97:fe:b2:49:5d:12:77:43:c5:2f:e0: 9b:d1:53:52:cc:87:c3:6a:f8:2c:2c:a0:22:64:94: 4c:19:a6:69:bd:4f:03:ed:39:24:26:01:9a:7d:e1: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:A0:F9:AA:36:34:EB:AE:EB:C6:C2:30:1E:05:79:B2:4C:A2:0D X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:b3:40:61:a2:16:e7:f3:08:e1:09:49:09:38:d6:51:65: 9a:78:b6:fa:ff:27:41:41:fa:a6:0d:c9:7a:74:4e:ca:1c:f0: 8b:71:36:b6:0d:16:74:1c:05:60:c5:5a:20:28:aa:d3:b4:3f: 8d:34:e4:62:84:b4:09:ba:0f:d7:71:af:87:2a:a9:de:77:d8: 55:fd:9f:04:5b:31:65:cb:5c:89:6c:00:cf:59:7b:1c:86:b4: c7:f1:d1:5c:ba:80:5b:9c:44:15:0a:0f:89:04:8e:16:bc:35: c5:68:a0:af:67:da:6d:99:99:0a:83:66:af:c4:d1:ab:45:09: 98:07:09:fe:9f:0c:ac:3c:ee:7b:5b:7b:3f:2b:ae:05:98:ee: 66:e0:be:4a:a2:af:f0:80:7e:22:74:fb:50:9a:7a:d4:82:ac: 6e:9f:50:53:37:38:4e:a6:a5:f6:ef:09:01:7d:90:0a:e1:9c: 1f:13:a3:b3:83:84:02:67:b9:d4:56:77:ca:3d:cf:09:e4:29: f5:74:f7:aa:2d:38:32:64:f4:86:da:6e:9b:1b:e2:c9:ca:41: ca:c5:da:05:fd:dc:a5:1c:1c:d3:89:ea:1d:f6:d9:39:b5:c4: 71:7e:83:4b:65:2e:50:65:36:a9:50:b6:48:23:dd:3b:c5:b5: 38:de:bd:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjYwMzI2MTcwNTUwWhcNMjYwNDAyMTcwNTUwWjAYMRYwFAYD VQQDEw02OWM1Njc2Zi0wODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9o+E4iQ3GzKN3TZ99PQ8I51JYqwSzE3a2UBYenoFXSYKyqGmAJL43aRQDq92 Q/phUG0lpdZefmnMkwwH8UXJT7nHbvYsSbAfe247nntM6eFfVxQeLInYtbb9pksv OzTd8shEr1U+zmduf+l4dPx6YSoul97vNwSThAzZTdDT+B1UW2q8aeMwZihqHWo0 iwH0nJaXQ3IthqTSfEJGcl/68f9fZc6e1MNkBGygCwT0oxQ7HQJay1jPMi/Ltbsh 8UGU20r4jFXS9JnhtgW2mg6y5Ncepy+Jl/6ySV0Sd0PFL+Cb0VNSzIfDavgsLKAi ZJRMGaZpvU8D7TkkJgGafeEOUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEG7oPmq NjTrruvGwjAeBXmyTKINMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZNyzQGGiFufzCOEJSQk41lFlmni2+v8nQUH6pg3JenROyhzwi3E2tg0WdBwF YMVaICiq07Q/jTTkYoS0CboP13Gvhyqp3nfYVf2fBFsxZctciWwAz1l7HIa0x/HR XLqAW5xEFQoPiQSOFrw1xWigr2fabZmZCoNmr8TRq0UJmAcJ/p8MrDzue1t7Pyuu BZjuZuC+SqKv8IB+InT7UJp61IKsbp9QUzc4Tqal9u8JAX2QCuGcHxOjs4OEAme5 1FZ3yj3PCeQp9XT3qi04MmT0htpumxviycpBysXaBf3cpRwc04nqHfbZObXEcX6D S2UuUGU2qVC2SCPdO8W1ON69Lg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:32 2026 by rpki-client