$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: gKHPmFCeodu+ZQqoo6H4UPloISwZgXdgLnEtATWJ8/0= Subject key identifier: D3:BF:6A:61:9C:7E:B0:6D:39:4C:8E:9C:7A:2A:F9:0E:F7:93:50:3A Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 0172 Signing time: Wed 25 Mar 2026 04:00:40 +0000 Manifest this update: Wed 25 Mar 2026 04:00:40 +0000 Manifest next update: Wed 01 Apr 2026 04:00:40 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: Dmz2GWWgRKEHMXi+mG8wgImRYaIsDwZO5fqichu1iQA=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: RetnXjaAIegseVpCIhrfkDQ+YhlmNRwZaGBLZrkdtzk=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: E/Bp+DLGRsM68zJIAcm7TyJqnOn+olB8QysLXRwz0bI=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: aYugIyHCZJwAmq9KTfLv5V2NclVJEThsuFyltYOyWPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Mar 25 04:00:40 2026 GMT Not After : Apr 1 04:00:40 2026 GMT Subject: CN=69c35de8-c722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:80:73:81:89:13:ae:6c:c1:18:9d:1a:e6: 0b:a3:ba:4c:60:8a:7b:6e:de:59:0a:1d:37:5b:a4: 62:bd:4b:74:1b:68:6f:b3:a7:31:13:b6:21:d3:bc: 2d:11:ac:db:bd:88:cf:98:f1:20:a2:f5:99:6e:b8: 5e:22:9d:52:25:7e:fb:cd:a6:1e:41:b3:a1:1a:33: 1e:c8:2e:61:c7:24:59:1a:cb:19:ce:13:70:f9:a0: 30:e0:28:56:50:24:a5:35:01:7e:cd:c0:f3:ca:93: ff:46:bc:6c:b8:00:37:62:cb:af:99:35:0e:43:3b: a5:ed:88:23:a6:07:f9:2f:38:52:b3:d5:38:1f:7e: e7:5b:33:df:e6:90:22:10:dd:14:2f:98:24:ef:a8: b1:d7:c9:08:26:69:3e:c5:bf:01:70:32:e7:ce:4e: da:3e:d9:49:77:f4:f8:8b:e7:85:cf:eb:a8:87:1f: e0:64:c3:39:4a:bc:ed:50:eb:78:48:ff:f8:df:b9: 16:b1:fa:5f:52:74:81:80:10:33:f2:7e:6c:36:b2: 49:14:ad:0c:30:55:a9:06:4d:09:d5:29:da:b3:42: 6d:33:b5:83:09:c3:b5:1d:3c:6b:fc:5c:60:cd:12: 85:d7:a5:8b:fe:95:a4:e7:4c:13:01:f6:b1:1c:f4: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:6A:61:9C:7E:B0:6D:39:4C:8E:9C:7A:2A:F9:0E:F7:93:50:3A X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:6d:c8:24:d3:2a:b0:09:47:7e:0c:05:2a:50:f3:fb:1a:dd: 3a:09:be:02:7a:6e:ae:4e:ae:d0:a2:3d:31:c4:5b:08:b9:77: 07:e2:fb:39:ea:cb:90:4a:e9:02:b7:0a:b1:b8:f7:0c:70:fe: 98:6a:9f:db:f0:99:f1:7a:15:26:7b:1f:3d:83:f8:d7:cd:7e: ad:5b:a6:dc:85:ba:7b:80:a1:51:f7:ee:f9:91:83:3b:4b:72: 01:92:fe:c5:f6:5a:54:44:07:91:ab:d3:2d:ad:dd:62:5d:a2: 17:53:01:77:e1:0b:49:ee:f7:55:ec:cd:04:2b:f0:37:64:79: f7:14:f8:c9:76:aa:dc:67:b1:c5:ce:08:93:b7:08:fb:99:14: 91:93:d2:0a:b0:2a:23:1c:c9:7c:5e:0e:ff:0b:43:ed:cb:3b: 93:81:47:56:c7:91:e9:c3:b8:a1:51:11:b2:8d:93:3c:09:bf: d9:3e:12:ab:ce:a3:e2:6b:60:12:20:10:17:3e:5c:19:e7:17: 48:5d:3c:55:8c:bb:fb:e6:c5:e6:46:58:b3:60:ec:b4:d0:42: de:24:53:95:0b:f7:2f:83:38:91:e6:02:24:d6:00:a8:f4:7e: 47:56:81:11:10:1e:82:45:1f:a8:7d:37:85:97:53:f2:63:52: ea:8a:30:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjYwMzI1MDQwMDQwWhcNMjYwNDAxMDQwMDQwWjAYMRYwFAYD VQQDEw02OWMzNWRlOC1jNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2qAc4GJE65swRidGuYLo7pMYIp7bt5ZCh03W6RivUt0G2hvs6cxE7Yh07wt EazbvYjPmPEgovWZbrheIp1SJX77zaYeQbOhGjMeyC5hxyRZGssZzhNw+aAw4ChW UCSlNQF+zcDzypP/RrxsuAA3YsuvmTUOQzul7Ygjpgf5LzhSs9U4H37nWzPf5pAi EN0UL5gk76ix18kIJmk+xb8BcDLnzk7aPtlJd/T4i+eFz+uohx/gZMM5SrztUOt4 SP/437kWsfpfUnSBgBAz8n5sNrJJFK0MMFWpBk0J1Snas0JtM7WDCcO1HTxr/Fxg zRKF16WL/pWk50wTAfaxHPQuMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNO/amGc frBtOUyOnHoq+Q73k1A6MB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApm3IJNMqsAlHfgwFKlDz+xrdOgm+Anpurk6u0KI9McRbCLl3B+L7OerLkErp ArcKsbj3DHD+mGqf2/CZ8XoVJnsfPYP4181+rVum3IW6e4ChUffu+ZGDO0tyAZL+ xfZaVEQHkavTLa3dYl2iF1MBd+ELSe73VezNBCvwN2R59xT4yXaq3Gexxc4Ik7cI +5kUkZPSCrAqIxzJfF4O/wtD7cs7k4FHVseR6cO4oVERso2TPAm/2T4Sq86j4mtg EiAQFz5cGecXSF08VYy7++bF5kZYs2DstNBC3iRTlQv3L4M4keYCJNYAqPR+R1aB ERAegkUfqH03hZdT8mNS6oowvA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:27 2026 by rpki-client