$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft File: GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json) Hash identifier: pfa0xXIa8VJE/bsPvZAPKQbmcS+DTpVEVAo9KCpAeWk= Subject key identifier: 87:BB:BE:CA:98:94:B4:A7:30:C2:30:ED:2A:B1:45:35:CC:24:56:5A Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft Manifest number: 38 Signing time: Wed 25 Mar 2026 07:48:50 +0000 Manifest this update: Wed 25 Mar 2026 07:48:50 +0000 Manifest next update: Wed 01 Apr 2026 07:48:50 +0000 Files and hashes: 1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: Y3AmNlPyY0r7oIL2UnVlNkMi9qSZx+ga092hlZMHG48=) 2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: kVIQF28+VXWQvXZxpxDtZOt5V7kSBnZhEpXWdQv6LfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Validity Not Before: Mar 25 07:48:50 2026 GMT Not After : Apr 1 07:48:50 2026 GMT Subject: CN=69c39362-979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:31:9c:0d:65:46:a9:f5:2d:2d:ce:43:ed: 40:1c:69:c4:e6:4e:bd:05:98:87:08:36:bc:12:15: 93:84:8a:70:51:30:5d:df:77:0a:a8:1b:41:07:c3: 55:5f:da:30:d6:1b:b8:ca:30:da:49:b1:3e:0a:87: 85:b2:1e:a9:1d:57:c9:96:53:44:89:e5:1f:b9:13: 7c:75:d9:ad:46:2d:5f:3f:15:1f:b5:b7:26:2f:cd: e6:58:e1:58:0b:de:ad:1e:28:94:be:02:0c:70:17: 30:78:09:e8:d2:4b:97:80:d7:17:77:12:0f:83:31: 78:c6:99:0a:7d:87:5f:d5:ec:25:9d:d0:a8:a8:65: 91:3c:5c:79:10:b2:b6:b5:c2:a4:c6:fa:f8:03:fa: 4f:fb:53:b8:5d:fd:e7:53:8d:a7:02:cc:06:12:60: 85:aa:77:c7:9a:11:6c:b7:ba:70:55:77:af:65:35: af:c5:cd:ba:d9:44:61:96:33:b9:47:90:8d:ed:a8: 19:99:6d:b0:20:0f:df:12:eb:e1:ea:0c:2c:77:b9: f5:68:fb:e3:a8:b6:f6:af:56:04:cf:bb:97:6a:3c: d6:5c:0e:62:cc:38:dc:dd:5e:00:ed:7b:a9:c4:c7: 20:bc:13:73:a9:23:c1:ec:59:ce:09:a1:d2:e1:fc: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:BE:CA:98:94:B4:A7:30:C2:30:ED:2A:B1:45:35:CC:24:56:5A X509v3 Authority Key Identifier: keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:e3:cd:d4:b4:3e:8c:57:93:c4:ea:58:92:aa:ad:88:26: c8:2e:ec:a6:49:54:f8:ac:1c:c1:e6:7a:91:58:ac:cc:f0:ee: 74:1c:57:f7:b4:4b:01:b4:8d:ac:26:c1:05:49:a4:54:7e:1f: d0:30:5b:0d:71:91:c4:85:58:6f:7e:dc:4d:0f:e3:11:8b:f6: 18:dd:e5:7b:06:c1:12:c9:7c:66:c1:88:66:49:04:01:c5:b7: 06:b8:2d:dc:fd:4e:02:95:bf:b1:12:28:d7:b8:87:3d:00:18: 72:2a:2b:dd:34:16:96:32:69:58:0c:e6:7b:2f:a5:f4:c5:06: 0d:03:b4:8e:25:f0:8c:ff:d8:c8:b9:b5:3d:ca:59:2a:b5:74: 4f:9f:19:0f:7e:16:43:ae:51:63:62:2d:6b:9e:c7:25:1e:28: e1:c6:7f:77:09:d3:6c:3d:d1:83:65:31:23:cd:71:e0:60:52: 98:5e:32:02:81:a5:66:8c:a7:39:d9:d0:9f:b6:f0:80:02:75: 88:8d:72:5f:18:db:85:f9:34:1f:96:5b:34:29:c4:62:57:c9: 07:1a:c4:b4:46:41:59:ae:21:14:83:c5:d3:fd:d0:5b:ab:13: d4:8e:e1:aa:13:a2:64:bb:08:22:73:07:42:d0:76:e2:c1:65: 96:0c:96:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoMTg0MzJENTFFNjJEREE3MjlEMUZGMUJFMUI4MUZCRjU1 QkQ4QjM0NzAeFw0yNjAzMjUwNzQ4NTBaFw0yNjA0MDEwNzQ4NTBaMBgxFjAUBgNV BAMTDTY5YzM5MzYyLTk3OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6JDGcDWVGqfUtLc5D7UAcacTmTr0FmIcINrwSFZOEinBRMF3fdwqoG0EHw1Vf 2jDWG7jKMNpJsT4Kh4WyHqkdV8mWU0SJ5R+5E3x12a1GLV8/FR+1tyYvzeZY4VgL 3q0eKJS+AgxwFzB4CejSS5eA1xd3Eg+DMXjGmQp9h1/V7CWd0KioZZE8XHkQsra1 wqTG+vgD+k/7U7hd/edTjacCzAYSYIWqd8eaEWy3unBVd69lNa/FzbrZRGGWM7lH kI3tqBmZbbAgD98S6+HqDCx3ufVo++OotvavVgTPu5dqPNZcDmLMONzdXgDte6nE xyC8E3OpI8HsWc4JodLh/DYVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh7u+ypiU tKcwwjDtKrFFNcwkVlowHwYDVR0jBBgwFoAUGEMtUeYt2nKdH/G+G4H79VvYs0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzA1OUY3Q0JDRENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5LZEhfRy1HNEg3OVZ2WXMw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0VNdFVlWXQybktkSF9HLUc0SDc5VnZZczBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzA1OUY3Q0JDRENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5L ZEhfRy1HNEg3OVZ2WXMwYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAip+PN1LQ+jFeTxOpYkqqtiCbILuymSVT4rBzB5nqRWKzM8O50HFf3tEsBtI2s JsEFSaRUfh/QMFsNcZHEhVhvftxND+MRi/YY3eV7BsESyXxmwYhmSQQBxbcGuC3c /U4Clb+xEijXuIc9ABhyKivdNBaWMmlYDOZ7L6X0xQYNA7SOJfCM/9jIubU9ylkq tXRPnxkPfhZDrlFjYi1rnsclHijhxn93CdNsPdGDZTEjzXHgYFKYXjICgaVmjKc5 2dCftvCAAnWIjXJfGNuF+TQflls0KcRiV8kHGsS0RkFZriEUg8XT/dBbqxPUjuGq E6JkuwgicwdC0HbiwWWWDJaj -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:03 2026 by rpki-client