$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: Wxn3pUak0t01br2QUkFoZAuChTFl5OONZzleySyDOvY= Subject key identifier: 40:45:B8:C4:7B:28:19:37:8E:F3:7F:75:1F:FB:F9:57:4F:8F:33:06 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 07B3 Signing time: Sat 14 Nov 2026 19:59:56 +0000 Manifest this update: Sat 14 Nov 2026 19:59:56 +0000 Manifest next update: Sat 21 Nov 2026 19:59:56 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: LtaAZoSfpfL1b9y9Ym7c/i4KK5jR+w5VSBKT5P2zTlI=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: UHoZmq0paQ48NlRRluqfsVDQh3Q2DcM666YtqeY10Y8=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: JgXv8es/pw1sE0Gc2Hw1RSuBorDwuU0kKpPxiQ9evCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Nov 14 19:59:56 2026 GMT Not After : Nov 21 19:59:56 2026 GMT Subject: CN=6af8bdbc-5ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:60:27:e5:15:dd:23:75:62:f7:a0:42:57:9c: 08:0d:cf:95:d0:56:31:16:ca:c1:b2:fd:e0:08:dc: 3e:77:e4:a0:32:6c:ea:2b:fb:78:af:96:2d:c3:4d: 4e:ed:12:8d:a8:8a:5c:0b:6e:19:3f:71:a4:11:62: 94:8e:f5:02:1c:83:68:bb:59:de:02:94:8d:28:80: 0a:93:33:23:f7:ad:bb:a9:09:48:72:89:53:7f:ca: ae:d6:44:82:70:0b:dc:7e:73:0b:6d:4c:e5:99:a6: f2:72:bb:a5:11:c5:fb:15:5d:c3:3e:10:bf:8c:50: e4:1a:ad:91:a8:9e:92:4c:81:ae:34:db:2f:96:96: 6b:06:ed:de:fc:08:ce:38:5f:cc:b3:87:b8:0e:bd: e3:86:24:6a:26:83:52:4a:c4:03:70:31:4e:fa:f7: 09:e8:ea:e2:b3:de:ff:32:b5:a0:a2:22:89:85:77: ee:13:f6:29:f9:76:03:ad:30:a0:49:c8:1a:04:73: 9f:a1:86:11:f1:98:93:98:69:05:0f:c8:94:a1:f9: 47:4a:c2:13:44:77:48:ce:6b:63:5a:14:48:c2:ab: d6:39:94:bc:78:c0:0a:ba:6f:d5:cd:ce:fa:6a:da: c2:03:7a:89:23:1e:db:71:ea:43:75:18:f5:e3:bc: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:45:B8:C4:7B:28:19:37:8E:F3:7F:75:1F:FB:F9:57:4F:8F:33:06 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:57:da:1f:99:cc:90:5b:26:f2:4d:9d:d4:7b:8b:17:7e:92: ac:4b:87:fa:e9:8e:1a:d3:27:86:5a:31:5d:8f:6e:ff:1a:33: 6c:88:c6:16:c3:36:aa:d1:5f:7a:45:87:c4:63:c1:2b:46:a1: 28:34:58:0b:de:ad:55:e3:84:fa:d7:0e:2a:fb:4b:7e:8b:69: bf:94:48:e3:61:ad:ae:c7:28:83:45:e4:86:fe:47:d5:db:a4: 8e:50:26:c2:cb:1a:26:f2:84:90:4c:9a:8d:66:f4:61:78:e3: 07:79:ce:e2:fb:64:fc:e1:9d:28:7a:08:a6:f6:77:eb:00:38: c5:7b:75:fb:e9:97:ef:22:51:47:9d:93:5c:ff:b4:78:e4:5b: df:55:e5:fd:2c:a6:cd:8a:4a:64:61:05:c0:4b:ed:0e:dc:d1: 29:fa:b0:32:7d:a7:bb:5a:5d:93:da:64:5c:60:2c:44:7f:3d: a8:ca:9d:78:82:8a:db:31:ac:12:d4:57:d9:3c:c6:8b:14:29: a6:a1:c4:93:27:47:ab:5e:3a:a4:55:97:75:0d:74:fc:f7:44: c9:74:46:2f:8b:27:c3:11:ee:3c:3b:a6:b0:ac:05:ab:71:df: 1a:b2:34:8f:d9:af:51:89:2c:1f:fc:60:37:a0:b1:fe:a5:2e: dc:1b:13:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjYxMTE0MTk1OTU2WhcNMjYxMTIxMTk1OTU2WjAYMRYwFAYD VQQDEw02YWY4YmRiYy01ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WAn5RXdI3Vi96BCV5wIDc+V0FYxFsrBsv3gCNw+d+SgMmzqK/t4r5Ytw01O 7RKNqIpcC24ZP3GkEWKUjvUCHINou1neApSNKIAKkzMj9627qQlIcolTf8qu1kSC cAvcfnMLbUzlmabycrulEcX7FV3DPhC/jFDkGq2RqJ6STIGuNNsvlpZrBu3e/AjO OF/Ms4e4Dr3jhiRqJoNSSsQDcDFO+vcJ6Oris97/MrWgoiKJhXfuE/Yp+XYDrTCg ScgaBHOfoYYR8ZiTmGkFD8iUoflHSsITRHdIzmtjWhRIwqvWOZS8eMAKum/Vzc76 atrCA3qJIx7bcepDdRj147yFcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBFuMR7 KBk3jvN/dR/7+VdPjzMGMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhFfaH5nMkFsm8k2d1HuLF36SrEuH+umOGtMnhloxXY9u/xozbIjGFsM2qtFf ekWHxGPBK0ahKDRYC96tVeOE+tcOKvtLfotpv5RI42Gtrscog0Xkhv5H1dukjlAm wssaJvKEkEyajWb0YXjjB3nO4vtk/OGdKHoIpvZ36wA4xXt1++mX7yJRR52TXP+0 eORb31Xl/SymzYpKZGEFwEvtDtzRKfqwMn2nu1pdk9pkXGAsRH89qMqdeIKK2zGs EtRX2TzGixQppqHEkydHq146pFWXdQ10/PdEyXRGL4snwxHuPDumsKwFq3HfGrI0 j9mvUYksH/xgN6Cx/qUu3BsTTw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:40 2026 by rpki-client