$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: Bw/Ro2+GsbQ3axXi5xcyOSAhkVRVJgCRSGc0rSHIfDQ= Subject key identifier: 04:5D:0D:CB:1D:B8:23:6B:03:D1:09:FE:AC:0E:A2:AB:2D:C1:38:71 Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: A8 Signing time: Thu 23 Jul 2026 09:09:00 +0000 Manifest this update: Thu 23 Jul 2026 09:09:00 +0000 Manifest next update: Thu 30 Jul 2026 09:09:00 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: 6xGuLwo1dQym42ZGvXp5rdvdNHz3PWVrAY298a67QOE=) 2: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Jul 23 09:09:00 2026 GMT Not After : Jul 30 09:09:00 2026 GMT Subject: CN=6a61da2c-d496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:6c:c2:9a:0e:6b:0c:a2:33:d7:bb:8d:36: 79:0b:28:bc:85:a0:34:32:a0:f7:09:70:be:b2:51: cb:93:65:8d:63:fc:3c:0f:b4:e7:64:97:0f:0b:4a: 96:af:aa:44:b4:38:66:8f:4b:67:db:62:a5:8d:1b: 7a:8e:a1:b0:6a:78:5a:6c:e1:40:9e:e7:9a:5c:7c: 04:94:29:ad:e1:18:4c:86:59:d9:7b:1c:50:15:7f: 01:39:fd:20:3f:85:ba:fc:4f:5f:2f:e2:cb:bb:50: c1:ac:bd:c5:5d:b9:53:64:3f:4e:5e:ee:f1:87:0c: e4:d5:2e:84:c7:d1:1f:30:c9:a0:45:34:b1:a0:d2: e4:df:1f:1b:1f:fb:50:49:d3:93:7f:84:bd:a2:5a: 10:d3:a8:a6:4d:d4:17:8d:b3:83:65:52:02:b9:0b: af:91:76:33:0e:27:bd:4d:d3:1a:bd:52:85:d8:47: 34:20:c0:0e:66:ec:b6:19:2a:b8:54:6b:6f:3f:60: e1:ea:ef:2d:e2:da:d2:fb:29:6e:35:20:be:dc:c4: 39:34:a0:00:3d:c8:20:33:1e:18:25:f1:b0:51:11: 6f:e4:9f:4e:19:e8:7a:bc:f6:12:89:9d:92:f3:ca: 59:7f:cc:8e:0b:7c:97:26:53:aa:02:7c:21:2a:c4: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5D:0D:CB:1D:B8:23:6B:03:D1:09:FE:AC:0E:A2:AB:2D:C1:38:71 X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:af:2e:36:e6:6d:d8:ab:7a:d0:1c:d9:71:a2:60:fc:7d:8d: 02:df:9b:06:47:e3:29:b4:4e:15:53:63:bb:d2:ab:21:ae:ee: 35:45:1c:48:e8:0d:9e:42:b2:23:52:c4:b2:db:a1:16:36:41: 08:3f:4b:32:a7:a2:a1:a0:eb:93:59:8d:eb:82:37:69:5d:f0: 0c:9f:45:46:11:1a:40:af:11:57:98:c5:e9:87:d3:ad:6e:a9: 51:21:08:4d:ea:53:08:e5:0e:22:29:96:96:6b:a8:56:dc:8b: c0:c7:c9:46:c0:a9:28:2a:5b:15:ef:8f:96:3a:62:8a:23:b6: 9e:1c:26:c6:61:54:fa:28:c1:64:2b:6c:02:f8:4c:d3:d2:d0: 9d:ea:ca:97:72:f8:bb:4b:bb:08:15:fe:07:47:99:e2:6b:00: 80:bd:15:58:0a:da:4b:78:1e:97:91:f3:eb:37:b8:59:18:ee: 70:22:db:51:49:c5:36:2a:a5:9d:cd:47:84:b1:be:f4:e4:61: 31:28:4b:e0:98:91:05:4b:9e:11:48:46:e6:56:8f:0f:ad:26: 58:56:04:8d:f0:e6:43:d0:72:17:7d:ad:8b:1d:81:76:ec:f5: f2:06:ff:44:d0:f0:95:07:b4:72:b0:c1:a0:00:be:ac:2b:08: ef:e8:d0:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0 NDA1NzNDNjMwHhcNMjYwNzIzMDkwOTAwWhcNMjYwNzMwMDkwOTAwWjAYMRYwFAYD VQQDEw02YTYxZGEyYy1kNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/BswpoOawyiM9e7jTZ5Cyi8haA0MqD3CXC+slHLk2WNY/w8D7TnZJcPC0qW r6pEtDhmj0tn22KljRt6jqGwanhabOFAnueaXHwElCmt4RhMhlnZexxQFX8BOf0g P4W6/E9fL+LLu1DBrL3FXblTZD9OXu7xhwzk1S6Ex9EfMMmgRTSxoNLk3x8bH/tQ SdOTf4S9oloQ06imTdQXjbODZVICuQuvkXYzDie9TdMavVKF2Ec0IMAOZuy2GSq4 VGtvP2Dh6u8t4trS+yluNSC+3MQ5NKAAPcggMx4YJfGwURFv5J9OGeh6vPYSiZ2S 88pZf8yOC3yXJlOqAnwhKsRO4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARdDcsd uCNrA9EJ/qwOoqstwThxMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAra8uNuZt2Kt60BzZcaJg/H2NAt+bBkfjKbROFVNju9KrIa7uNUUcSOgNnkKy I1LEstuhFjZBCD9LMqeioaDrk1mN64I3aV3wDJ9FRhEaQK8RV5jF6YfTrW6pUSEI TepTCOUOIimWlmuoVtyLwMfJRsCpKCpbFe+PljpiiiO2nhwmxmFU+ijBZCtsAvhM 09LQnerKl3L4u0u7CBX+B0eZ4msAgL0VWAraS3gel5Hz6ze4WRjucCLbUUnFNiql nc1HhLG+9ORhMShL4JiRBUueEUhG5laPD60mWFYEjfDmQ9ByF32tix2Bduz18gb/ RNDwlQe0crDBoAC+rCsI7+jQqQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:35:11 2026 by rpki-client