$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: zY199EXbdbeYoXK1jb1A2C5p5L0DdHE5joVdgZ2ozCg= Subject key identifier: 13:63:F1:E4:C4:24:85:62:E6:2E:B9:0D:5E:2D:35:2A:DC:1E:AF:40 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1AC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A9D Signing time: Tue 24 Mar 2026 16:14:39 +0000 Manifest this update: Tue 24 Mar 2026 16:14:38 +0000 Manifest next update: Tue 31 Mar 2026 16:14:38 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: 68ro/ipDi66Cy7VEilyqOnRht+AAJQY3uASjqHSCN1A=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=) 3: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=) 4: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6856 (0x1ac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Mar 24 16:14:38 2026 GMT Not After : Mar 31 16:14:38 2026 GMT Subject: CN=69c2b86f-3610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:3a:a1:c6:8f:3d:ff:b6:fd:31:c3:5f:88: e6:15:7b:ed:8c:65:16:3a:0d:bb:f6:2e:75:69:86: 42:5f:30:73:78:53:2b:5f:e1:97:f5:53:9c:76:10: 91:7b:60:f2:f2:70:19:ff:11:0f:ba:99:ed:a9:c3: 23:b1:52:3a:f8:20:d7:c9:a2:d7:ea:8c:8e:09:ef: 27:6b:28:09:7d:80:e5:fc:3e:7b:cd:5c:25:7d:00: 62:c3:ea:70:03:df:3f:2c:a9:d4:06:da:35:e5:31: 0b:42:57:72:a4:2b:01:32:e0:24:9a:92:99:99:42: 92:38:d4:ba:c0:a6:b4:17:a1:f2:61:be:42:34:98: 68:fc:2a:92:28:7e:0b:60:40:6b:1b:25:c7:78:fd: 6a:36:8f:59:e3:ee:af:d7:83:41:d1:ac:ac:47:a9: b2:f1:da:8d:7d:f9:fd:70:3d:2c:d4:3c:d9:19:4d: 1a:6d:dc:7f:be:bc:91:ac:d2:7a:6a:a2:3f:dd:9e: 25:89:67:1f:08:4f:a6:95:ee:9a:2a:32:4f:8b:4e: a3:72:27:b0:0a:5f:92:26:03:92:3e:24:99:b7:90: df:ce:a0:2a:75:a5:a5:27:02:8b:0d:a7:cf:c3:06: 07:52:24:ec:ca:84:98:37:60:5b:d6:46:23:bd:a2: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:63:F1:E4:C4:24:85:62:E6:2E:B9:0D:5E:2D:35:2A:DC:1E:AF:40 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7b:5b:48:25:05:0a:7a:74:8e:cd:03:66:f3:22:17:26:eb: 86:f8:8d:01:21:1c:5d:57:a2:54:dd:6a:ca:07:5e:b0:6f:a3: a4:a5:a0:7d:ea:85:8e:04:eb:9c:1d:81:d7:d2:4f:45:dc:1f: 06:10:2e:e4:60:dd:ed:5f:bc:c7:a5:fc:62:db:14:fd:e2:77: cd:a2:42:6b:98:e7:a5:76:1e:24:a4:ce:fa:20:61:71:8f:3e: 66:e4:ef:46:b3:47:af:38:db:b7:bf:75:a8:49:44:77:3f:c3: 4c:a7:a5:a1:72:9c:d0:ab:f9:04:d7:d2:e6:db:22:23:2f:3e: b0:8e:5d:67:85:3b:74:14:9d:c2:15:4f:75:f5:f8:a1:9b:d1: 63:65:34:d6:8c:df:61:43:b0:01:b0:91:91:99:ba:d7:df:d3: 9d:b3:c8:5a:cf:aa:98:36:46:c1:2a:13:e9:06:d9:ca:c4:18: 68:46:86:d1:ff:db:1d:be:e9:94:66:58:b0:02:d9:c2:4f:21: 1c:3d:de:5b:39:3a:ab:4e:e8:a8:c2:4a:19:01:0b:cc:85:6d: 5a:c5:44:d8:ae:57:07:8c:a8:32:09:b8:bf:13:92:3b:c0:19: 00:ae:30:0e:a9:83:22:f3:e7:1b:ef:13:01:5e:e4:dd:9f:7e: 9b:fc:77:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjYwMzI0MTYxNDM4WhcNMjYwMzMxMTYxNDM4WjAYMRYwFAYD VQQDEw02OWMyYjg2Zi0zNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h46ocaPPf+2/THDX4jmFXvtjGUWOg279i51aYZCXzBzeFMrX+GX9VOcdhCR e2Dy8nAZ/xEPupntqcMjsVI6+CDXyaLX6oyOCe8naygJfYDl/D57zVwlfQBiw+pw A98/LKnUBto15TELQldypCsBMuAkmpKZmUKSONS6wKa0F6HyYb5CNJho/CqSKH4L YEBrGyXHeP1qNo9Z4+6v14NB0aysR6my8dqNffn9cD0s1DzZGU0abdx/vryRrNJ6 aqI/3Z4liWcfCE+mle6aKjJPi06jciewCl+SJgOSPiSZt5DfzqAqdaWlJwKLDafP wwYHUiTsyoSYN2Bb1kYjvaKWLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNj8eTE JIVi5i65DV4tNSrcHq9AMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3tbSCUFCnp0js0DZvMiFybrhviNASEcXVeiVN1qygdesG+jpKWgfeqFjgTr nB2B19JPRdwfBhAu5GDd7V+8x6X8YtsU/eJ3zaJCa5jnpXYeJKTO+iBhcY8+ZuTv RrNHrzjbt791qElEdz/DTKeloXKc0Kv5BNfS5tsiIy8+sI5dZ4U7dBSdwhVPdfX4 oZvRY2U01ozfYUOwAbCRkZm619/TnbPIWs+qmDZGwSoT6QbZysQYaEaG0f/bHb7p lGZYsALZwk8hHD3eWzk6q07oqMJKGQELzIVtWsVE2K5XB4yoMgm4vxOSO8AZAK4w DqmDIvPnG+8TAV7k3Z9+m/x3pA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:56 2026 by rpki-client