$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: 3UcZ18F5uOfrcGFe5YJ4SW7By9FCHuP7KnKYJVGzUVc= Subject key identifier: CB:26:3D:DC:C8:E7:7A:7D:7B:C4:23:C9:46:D8:DA:AD:86:89:77:AB Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 69 Signing time: Wed 25 Mar 2026 07:12:31 +0000 Manifest this update: Wed 25 Mar 2026 07:12:31 +0000 Manifest next update: Wed 01 Apr 2026 07:12:31 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: +9yFW3J/gSzTy71Uah7o38BM/PUD3ovMmuxOlslz5CE=) 2: EDD3FAACDB0A11F0AAAD2E0882D3641D.roa (hash: LVil25DNmm0Bpb6PzKwGKWoAwCQGcCkt4YTKOpr3JSk=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Mar 25 07:12:31 2026 GMT Not After : Apr 1 07:12:31 2026 GMT Subject: CN=69c38adf-6966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:86:72:f0:b8:cf:b7:b1:fb:2d:04:ac:4f: 34:45:ec:3e:8b:06:e7:22:ec:91:d0:7e:bb:f1:f0: 9f:5c:b9:59:89:fe:8c:74:67:4a:18:38:18:00:51: 17:d1:cd:73:47:e1:71:01:5e:06:49:da:1e:00:62: bc:da:32:60:bf:d2:79:c4:5a:e1:ad:66:57:07:27: 30:6d:95:d3:0b:a4:41:7e:21:1f:30:52:5d:79:90: 63:90:da:5a:94:72:5c:35:4c:50:dd:4e:0a:19:c5: 9f:ec:78:71:eb:51:d5:28:30:ac:e4:8f:d3:19:36: 77:e7:a0:7f:28:16:da:32:c9:7c:3b:b3:07:ce:50: 93:8f:a6:c8:29:04:30:21:f1:fb:d5:8c:6f:3c:98: b0:8d:5f:e1:58:ec:26:d2:d4:e8:fd:72:55:9f:89: d4:9e:a4:65:4e:de:a2:7a:77:8d:e6:ae:57:b5:d1: 3f:f3:b4:60:05:f2:16:4f:15:f9:31:49:b8:f5:0c: a6:9d:ad:73:61:91:2b:8a:d6:81:4f:5b:16:d0:14: 77:18:51:10:0e:0a:b4:59:d6:38:03:14:80:4c:29: 4a:d5:e3:5c:fb:8b:61:2b:b3:98:08:f1:63:36:7d: ff:6a:5d:33:ce:f8:d1:00:50:97:8a:ed:ca:c7:9d: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:26:3D:DC:C8:E7:7A:7D:7B:C4:23:C9:46:D8:DA:AD:86:89:77:AB X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:78:d7:b5:59:1e:7a:09:9d:fd:9d:c3:22:e9:32:f2:f7:0f: 17:d6:e2:cf:7d:e2:82:7a:ae:d9:3a:fd:dc:e2:a4:c7:2c:92: bb:67:34:fb:92:61:d5:b9:ed:8f:95:e9:20:05:22:ec:ab:62: c8:0b:02:05:9c:58:6e:3f:c6:2a:d7:d8:85:09:3e:5e:eb:2f: c2:87:e2:ff:81:09:f0:39:90:ba:16:13:f1:04:b7:89:59:73: ff:ef:b0:dc:cb:78:1e:82:3d:7e:56:59:23:4f:b1:61:c6:31: 44:c4:4b:9d:69:cc:d6:6c:54:f3:6d:60:8e:9a:ca:17:e3:85: e5:9c:e4:eb:a4:a3:77:5f:a0:a1:3e:0e:ed:0f:8d:22:e7:01: 13:c1:3b:cf:0e:d8:37:73:4c:af:4b:06:1e:32:64:4a:20:3b: 18:7a:15:4e:0a:5a:03:73:85:ec:36:eb:b9:7e:8f:03:ef:b4: 21:69:34:53:1c:e0:bc:81:3d:7c:42:e5:22:81:95:b8:9f:e3: 28:2d:a2:85:ed:8c:26:f3:4d:9d:f1:10:d1:df:44:02:3d:b9: c0:c7:68:4f:d6:16:d4:14:6c:a7:2a:22:13:9c:16:cd:be:e8: e5:50:31:6b:8b:52:6b:4a:1d:22:c3:92:59:c0:24:3f:fa:08: 93:28:b9:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEyNEI1MTA3QzQ0 MDU3M0M2MzAeFw0yNjAzMjUwNzEyMzFaFw0yNjA0MDEwNzEyMzFaMBgxFjAUBgNV BAMTDTY5YzM4YWRmLTY5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC704Zy8LjPt7H7LQSsTzRF7D6LBuci7JHQfrvx8J9cuVmJ/ox0Z0oYOBgAURfR zXNH4XEBXgZJ2h4AYrzaMmC/0nnEWuGtZlcHJzBtldMLpEF+IR8wUl15kGOQ2lqU clw1TFDdTgoZxZ/seHHrUdUoMKzkj9MZNnfnoH8oFtoyyXw7swfOUJOPpsgpBDAh 8fvVjG88mLCNX+FY7CbS1Oj9clWfidSepGVO3qJ6d43mrle10T/ztGAF8hZPFfkx Sbj1DKadrXNhkSuK1oFPWxbQFHcYURAOCrRZ1jgDFIBMKUrV41z7i2Ers5gI8WM2 ff9qXTPO+NEAUJeK7crHnaZJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyyY93Mjn en17xCPJRtjarYaJd6swHwYDVR0jBBgwFoAUGOkpeh8aGMuHmn4SS1EHxEBXPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1LzZCNjY2OTBBOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR09rcGVoOGFHTXVIbW40U1MxRUh4RUJYUEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011 SG1uNFNTMUVIeEVCWFBHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfeNe1WR56CZ39ncMi6TLy9w8X1uLPfeKCeq7ZOv3c4qTHLJK7ZzT7kmHVue2P lekgBSLsq2LICwIFnFhuP8Yq19iFCT5e6y/Ch+L/gQnwOZC6FhPxBLeJWXP/77Dc y3gegj1+VlkjT7FhxjFExEudaczWbFTzbWCOmsoX44XlnOTrpKN3X6ChPg7tD40i 5wETwTvPDtg3c0yvSwYeMmRKIDsYehVOCloDc4XsNuu5fo8D77QhaTRTHOC8gT18 QuUigZW4n+MoLaKF7Ywm802d8RDR30QCPbnAx2hP1hbUFGynKiITnBbNvujlUDFr i1JrSh0iw5JZwCQ/+giTKLkg -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:11 2026 by rpki-client