$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft File: GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json) Hash identifier: TCBAjDT1zfBXFoE5Vbr2w4anrCUNtKGmAvKRmg8g1vI= Subject key identifier: 63:7A:41:CA:34:13:52:41:68:8C:B1:F4:96:74:BF:96:AD:02:7B:48 Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft Manifest number: 74 Signing time: Thu 23 Jul 2026 09:50:03 +0000 Manifest this update: Thu 23 Jul 2026 09:50:03 +0000 Manifest next update: Thu 30 Jul 2026 09:50:03 +0000 Files and hashes: 1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: iKuUXSDOH9NQ7fgC/yxgvNWRYPeI4p/pccu9th+r6bs=) 2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: kVIQF28+VXWQvXZxpxDtZOt5V7kSBnZhEpXWdQv6LfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347 Validity Not Before: Jul 23 09:50:03 2026 GMT Not After : Jul 30 09:50:03 2026 GMT Subject: CN=6a61e3cb-e8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:89:1c:76:ec:42:fe:59:c2:08:c9:78:d0:c2: d8:b0:32:e1:40:58:a3:9c:e3:a3:22:2f:83:da:2d: 2d:e6:15:d6:ac:1e:7a:70:6c:ef:eb:39:b5:d9:c1: 7e:c1:00:fe:bf:7e:fc:0d:87:d1:23:e9:f7:10:5e: 12:e1:fb:4f:75:44:0e:b6:43:af:a9:e7:a4:7b:f0: 20:56:3b:08:6e:80:2a:9b:da:5a:9e:86:ea:a5:40: 27:b7:05:21:17:d9:14:6c:93:c8:a0:18:5a:93:1a: 6b:15:53:21:de:89:2a:39:37:fc:b9:8d:5b:85:8e: 49:b8:f2:b7:22:dc:6b:af:40:f8:72:8d:19:c6:56: 5e:27:8a:f2:8b:89:b7:0d:b3:1b:41:bd:47:11:72: 40:c3:db:d7:94:fe:92:9e:20:6c:20:a0:1d:d4:7d: ad:dc:65:d7:a0:27:1d:21:cc:ce:9b:93:1b:04:a8: 64:dc:7c:b9:ca:c2:d2:44:fa:a4:ed:bc:a3:a3:91: 5f:1f:f4:77:5a:46:be:07:de:98:eb:03:72:33:46: 2d:8f:b4:92:79:e5:87:d5:6a:08:aa:ce:7e:e4:d9: 37:2e:57:64:74:c6:a7:97:4b:6f:26:72:1b:65:be: d7:9a:f9:e6:91:ad:e9:fe:fa:4e:4c:eb:bd:1a:5f: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:41:CA:34:13:52:41:68:8C:B1:F4:96:74:BF:96:AD:02:7B:48 X509v3 Authority Key Identifier: keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ca:4f:19:b0:b4:59:05:c7:74:33:d8:02:18:d8:be:5c:49: 93:90:8c:1b:24:00:93:ac:a8:9b:b9:bc:5f:ba:b9:b8:4b:6f: a7:f0:d7:61:b6:fb:15:d0:a4:a7:14:f9:5a:b2:84:f4:05:7e: 1f:14:9f:92:5d:37:d6:fb:13:f3:17:ea:fd:ed:a5:50:8a:b6: 47:0e:b4:a5:06:af:70:9d:6c:2b:65:13:28:36:a7:38:aa:27: 73:b5:ec:a1:df:31:38:72:95:c5:33:92:ab:fb:04:b5:68:26: b2:d1:bf:b2:8d:2c:6b:34:f4:87:d6:b5:61:e9:36:f8:fa:bd: c9:ee:1b:2d:00:47:82:07:a9:6d:3b:b5:f8:1a:03:ce:95:5f: 5c:df:64:fc:a8:27:1b:2b:ac:2b:5d:98:03:a8:04:97:65:4a: 3e:29:94:f1:4f:57:1b:9c:d6:8c:6e:05:2a:bb:40:1d:86:8a: f1:ff:62:43:c4:2b:05:e8:e6:95:6b:bf:67:93:a6:61:bd:4b: 00:ce:23:60:58:57:0c:6b:2d:a9:98:2b:18:42:53:45:cf:2a: a1:77:d7:18:43:a9:02:d4:44:68:c8:58:80:e2:85:dc:38:eb: 5d:d8:15:ed:80:a8:47:fb:36:90:83:7c:fe:4b:62:a0:92:ad: 44:0f:0a:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoMTg0MzJENTFFNjJEREE3MjlEMUZGMUJFMUI4MUZCRjU1 QkQ4QjM0NzAeFw0yNjA3MjMwOTUwMDNaFw0yNjA3MzAwOTUwMDNaMBgxFjAUBgNV BAMTDTZhNjFlM2NiLWU4ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJiRx27EL+WcIIyXjQwtiwMuFAWKOc46MiL4PaLS3mFdasHnpwbO/rObXZwX7B AP6/fvwNh9Ej6fcQXhLh+091RA62Q6+p56R78CBWOwhugCqb2lqehuqlQCe3BSEX 2RRsk8igGFqTGmsVUyHeiSo5N/y5jVuFjkm48rci3GuvQPhyjRnGVl4nivKLibcN sxtBvUcRckDD29eU/pKeIGwgoB3Ufa3cZdegJx0hzM6bkxsEqGTcfLnKwtJE+qTt vKOjkV8f9HdaRr4H3pjrA3IzRi2PtJJ55YfVagiqzn7k2TcuV2R0xqeXS28mchtl vtea+eaRren++k5M670aX1fnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY3pByjQT UkFojLH0lnS/lq0Ce0gwHwYDVR0jBBgwFoAUGEMtUeYt2nKdH/G+G4H79VvYs0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzA1OUY3Q0JDRENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5LZEhfRy1HNEg3OVZ2WXMw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0VNdFVlWXQybktkSF9HLUc0SDc5VnZZczBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzA1OUY3Q0JDRENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5L ZEhfRy1HNEg3OVZ2WXMwYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCoyk8ZsLRZBcd0M9gCGNi+XEmTkIwbJACTrKibubxfurm4S2+n8NdhtvsV0KSn FPlasoT0BX4fFJ+SXTfW+xPzF+r97aVQirZHDrSlBq9wnWwrZRMoNqc4qidzteyh 3zE4cpXFM5Kr+wS1aCay0b+yjSxrNPSH1rVh6Tb4+r3J7hstAEeCB6ltO7X4GgPO lV9c32T8qCcbK6wrXZgDqASXZUo+KZTxT1cbnNaMbgUqu0Adhorx/2JDxCsF6OaV a79nk6ZhvUsAziNgWFcMay2pmCsYQlNFzyqhd9cYQ6kC1ERoyFiA4oXcOOtd2BXt gKhH+zaQg3z+S2Kgkq1EDwpG -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:26 2026 by rpki-client