$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: Zag8+lco/Agtt1EHOfYAOvQ0rx0UF6CZwW40nvvFRRE= Subject key identifier: C7:AE:84:F4:89:26:C1:72:B2:F6:02:26:26:D8:D5:48:94:42:CD:6D Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 029F Signing time: Tue 22 Sep 2026 17:21:43 +0000 Manifest this update: Tue 22 Sep 2026 17:21:43 +0000 Manifest next update: Tue 29 Sep 2026 17:21:43 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: 5e8FDU/OPb+6UAYeTp3GRkYi1gvfYWnxxxtZEDmJLZI=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: s3pplahrtkEIiqFvq9bDswEXkbohC1ZEoUg/qiNs0L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Sep 22 17:21:43 2026 GMT Not After : Sep 29 17:21:43 2026 GMT Subject: CN=6ab2b927-cefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:ac:66:9b:e0:e8:d0:77:9e:29:6d:a4:6a: fb:c4:df:db:05:cc:21:18:b6:f0:8b:f6:15:a3:1d: 30:b0:47:80:01:64:c5:c1:e2:f9:9f:f0:32:a8:98: c8:3b:36:98:2a:bb:10:8f:a2:71:16:53:4c:47:f5: fe:37:b4:23:6e:3e:03:24:5a:14:e6:9d:22:27:8f: c7:66:f7:fb:a9:18:6d:a8:7c:d0:38:2a:67:da:6f: ac:16:ac:b4:0c:ea:f3:97:a7:47:ff:b8:04:f9:9f: 41:3a:48:e2:f6:e3:82:99:71:07:d3:2c:df:22:fa: d3:91:46:7a:08:3c:c4:5d:54:90:32:8d:a3:6e:32: 41:32:4e:24:a4:11:d0:63:23:15:b3:54:b1:66:60: c6:55:76:35:62:b2:fe:ce:67:cb:92:d9:09:f0:60: d1:cd:5e:ec:8c:cd:7b:b3:cf:27:bd:a4:6a:87:63: 52:e6:96:da:a8:e6:c3:62:9e:f0:b0:2f:b7:95:3d: 37:ee:f1:81:5d:ab:4d:ea:6e:46:9f:85:57:66:fa: 44:32:04:1c:55:f9:a2:fa:aa:4a:55:dc:e8:db:b4: f2:75:00:ac:3b:c2:ed:00:be:3e:b2:19:66:56:9b: bc:c0:d6:27:da:b4:81:9c:94:e5:c1:39:b4:ad:79: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:84:F4:89:26:C1:72:B2:F6:02:26:26:D8:D5:48:94:42:CD:6D X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c9:4f:ca:ee:0e:c7:35:0a:ee:38:6c:03:f1:a6:59:4d:31: 7f:11:22:0d:e2:df:1f:15:85:5c:eb:86:11:c7:60:19:69:08: 8e:fc:18:68:13:64:f8:1c:c2:a0:fe:13:6a:74:e5:d4:9a:02: 41:2c:7f:05:80:bb:d0:cf:4e:e0:8e:58:cd:3f:60:4c:5c:ad: c5:d0:57:10:88:33:27:5b:c0:76:5a:4c:6d:54:56:a7:bb:6b: d0:b0:3c:8f:9c:b9:07:e7:74:ce:a9:95:33:76:68:42:97:a1: c7:49:1b:e6:97:f1:24:6b:bb:a3:a0:e1:02:4e:b9:91:70:8b: 3a:3f:6a:a5:7b:f1:5a:15:73:d6:9e:12:f8:f2:43:ad:49:49: c6:f9:7d:34:db:c6:33:a8:85:a5:cb:0a:21:ea:97:1c:e3:e9: 63:53:3a:6b:ee:c9:54:28:01:39:19:90:57:7b:c0:18:6a:c2: 8e:b4:0e:22:34:49:f0:4f:29:d3:1e:1f:89:24:88:49:5f:70: 69:ad:bd:ae:7d:36:66:d2:b8:2f:77:91:a7:2b:5c:02:73:1f: 15:e2:0e:0f:d5:9c:1c:cf:98:93:f9:a0:79:60:1d:a3:06:76: 0b:95:91:ff:6f:88:c2:4c:e3:2e:c2:1a:0b:54:a2:97:61:38: 7c:f8:0a:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjYwOTIyMTcyMTQzWhcNMjYwOTI5MTcyMTQzWjAYMRYwFAYD VQQDEw02YWIyYjkyNy1jZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtasZpvg6NB3niltpGr7xN/bBcwhGLbwi/YVox0wsEeAAWTFweL5n/AyqJjI OzaYKrsQj6JxFlNMR/X+N7Qjbj4DJFoU5p0iJ4/HZvf7qRhtqHzQOCpn2m+sFqy0 DOrzl6dH/7gE+Z9BOkji9uOCmXEH0yzfIvrTkUZ6CDzEXVSQMo2jbjJBMk4kpBHQ YyMVs1SxZmDGVXY1YrL+zmfLktkJ8GDRzV7sjM17s88nvaRqh2NS5pbaqObDYp7w sC+3lT037vGBXatN6m5Gn4VXZvpEMgQcVfmi+qpKVdzo27TydQCsO8LtAL4+shlm Vpu8wNYn2rSBnJTlwTm0rXksHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMeuhPSJ JsFysvYCJibY1UiUQs1tMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQclPyu4OxzUK7jhsA/GmWU0xfxEiDeLfHxWFXOuGEcdgGWkIjvwYaBNk+BzC oP4TanTl1JoCQSx/BYC70M9O4I5YzT9gTFytxdBXEIgzJ1vAdlpMbVRWp7tr0LA8 j5y5B+d0zqmVM3ZoQpehx0kb5pfxJGu7o6DhAk65kXCLOj9qpXvxWhVz1p4S+PJD rUlJxvl9NNvGM6iFpcsKIeqXHOPpY1M6a+7JVCgBORmQV3vAGGrCjrQOIjRJ8E8p 0x4fiSSISV9waa29rn02ZtK4L3eRpytcAnMfFeIOD9WcHM+Yk/mgeWAdowZ2C5WR /2+IwkzjLsIaC1Sil2E4fPgKrA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:28:14 2026 by rpki-client