$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: OiudRgwmKm2qTH3QRg9BufaQ9XNvzGBbvqUKOPg9hag= Subject key identifier: B2:FE:AC:AF:3C:9B:F6:F2:FA:1C:60:50:93:A5:B5:6C:68:DF:C1:5F Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 0233 Signing time: Wed 13 May 2026 02:01:51 +0000 Manifest this update: Wed 13 May 2026 02:01:51 +0000 Manifest next update: Wed 20 May 2026 02:01:51 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: JUtFwu8zlx6sBlV2zMv+jxEaEaX6eZXOeUIoTSNyJ7s=) 2: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=) 4: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=) 6: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=) 7: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: May 13 02:01:51 2026 GMT Not After : May 20 02:01:51 2026 GMT Subject: CN=6a03db8f-8f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:ec:dc:31:f2:fa:53:fc:8b:2b:76:f0:91: 4e:c7:ff:59:b6:0a:0b:b0:7e:83:7e:02:3a:64:5f: a2:99:13:e3:ee:02:db:4c:e2:52:25:97:c4:fe:3d: 34:4c:fa:b1:b2:6f:12:05:7c:97:95:ec:2b:49:ae: 29:e9:4b:f9:c6:02:4a:4e:1b:5f:26:29:c1:e7:d6: 71:cb:c6:56:0a:c3:a3:ac:47:7a:8c:3f:c8:2d:4d: 9f:f9:f7:fa:eb:60:7e:a6:2b:a4:93:0a:a4:59:a2: 1b:37:0d:57:51:fb:f9:df:2d:0e:ce:16:c0:df:27: 76:bf:76:e3:18:e4:66:e5:19:59:f4:7d:ec:a0:69: 83:85:0a:ce:2d:90:4f:3b:33:6d:da:c9:29:c7:c5: 42:15:10:40:b6:49:b8:42:45:d4:25:ac:02:3b:97: 1a:b0:ea:88:a5:8e:62:db:cb:f5:6a:13:38:5c:41: 31:2e:7e:b1:48:38:67:05:d7:a8:40:2c:ee:b1:e7: 3c:fe:5d:ef:4d:70:2d:71:0e:c8:9c:94:73:18:d5: bb:e7:a3:9b:3b:b4:bb:ea:6b:2d:14:c2:1e:44:b8: 41:92:f7:5b:d1:2b:da:0c:8e:82:0a:5b:b6:b8:ce: 70:4e:e0:ab:65:50:df:5b:59:44:c7:8e:d3:ca:ed: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:AC:AF:3C:9B:F6:F2:FA:1C:60:50:93:A5:B5:6C:68:DF:C1:5F X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:73:73:2b:3d:00:ad:55:48:5f:f3:2f:0d:b4:6e:c0:0b:02: 6c:ff:35:e4:1f:f4:08:fa:5e:b6:76:32:bc:de:82:a8:a4:7f: d7:6a:30:de:d6:95:54:6f:6d:b1:12:09:85:5d:18:96:5d:70: 91:23:65:7a:0b:4d:16:bb:7e:92:80:fe:11:f1:62:56:99:d8: 22:5f:f6:34:24:be:cb:af:5b:4d:1b:a5:44:36:ed:87:78:c9: 37:2a:57:61:e2:81:0a:2e:1c:1f:07:a9:63:e6:7b:fc:cb:23: 2d:ce:96:08:5c:82:43:91:b8:ac:72:6a:36:54:be:2a:75:26: 7e:bc:04:50:77:b3:c8:a1:5e:fb:ec:4a:0a:02:e4:c5:ba:2e: 67:4d:a9:42:89:d2:7b:c9:90:12:45:c2:83:9f:31:da:66:cc: 30:7f:54:a8:b8:b9:27:7c:4a:ee:63:29:ec:c8:89:0f:5e:c9: a4:50:ae:7e:34:45:9e:da:df:14:9c:7c:95:59:a5:94:f1:96: bb:52:2b:2a:12:c5:c4:ae:2e:f9:57:50:2f:9c:16:db:5f:b4: 88:11:b6:55:0a:de:27:99:ae:38:e2:36:ec:f6:a6:0a:97:0c: 1c:f6:49:18:49:20:59:c1:e8:b4:f2:cd:5b:92:6f:d0:b0:11: 58:2d:e7:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjYwNTEzMDIwMTUxWhcNMjYwNTIwMDIwMTUxWjAYMRYwFAYD VQQDEw02YTAzZGI4Zi04ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviDs3DHy+lP8iyt28JFOx/9ZtgoLsH6DfgI6ZF+imRPj7gLbTOJSJZfE/j00 TPqxsm8SBXyXlewrSa4p6Uv5xgJKThtfJinB59Zxy8ZWCsOjrEd6jD/ILU2f+ff6 62B+piukkwqkWaIbNw1XUfv53y0OzhbA3yd2v3bjGORm5RlZ9H3soGmDhQrOLZBP OzNt2skpx8VCFRBAtkm4QkXUJawCO5casOqIpY5i28v1ahM4XEExLn6xSDhnBdeo QCzusec8/l3vTXAtcQ7InJRzGNW756ObO7S76mstFMIeRLhBkvdb0SvaDI6CClu2 uM5wTuCrZVDfW1lEx47Tyu1j1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLL+rK88 m/by+hxgUJOltWxo38FfMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQnNzKz0ArVVIX/MvDbRuwAsCbP815B/0CPpetnYyvN6CqKR/12ow3taVVG9t sRIJhV0Yll1wkSNlegtNFrt+koD+EfFiVpnYIl/2NCS+y69bTRulRDbth3jJNypX YeKBCi4cHwepY+Z7/MsjLc6WCFyCQ5G4rHJqNlS+KnUmfrwEUHezyKFe++xKCgLk xbouZ02pQonSe8mQEkXCg58x2mbMMH9UqLi5J3xK7mMp7MiJD17JpFCufjRFntrf FJx8lVmllPGWu1IrKhLFxK4u+VdQL5wW21+0iBG2VQreJ5muOOI27PamCpcMHPZJ GEkgWcHotPLNW5Jv0LARWC3n9w== -----END CERTIFICATE-----Generated at Wed May 13 08:55:04 2026 by rpki-client