$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: Vn+BYp6HN5GcPMaZ0QCrUQMpCa6wz2tx/VpVV9p7I4M= Subject key identifier: 56:E2:E2:AE:45:56:D2:CC:24:C0:DF:52:73:54:A8:97:B2:8C:FA:AE Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 84 Signing time: Mon 11 May 2026 07:51:45 +0000 Manifest this update: Mon 11 May 2026 07:51:44 +0000 Manifest next update: Mon 18 May 2026 07:51:44 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: MhjfDYTgti1hf+NA2u/7FQKPpzoeJ4RixKlLa35REpA=) 2: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: May 11 07:51:44 2026 GMT Not After : May 18 07:51:44 2026 GMT Subject: CN=6a018a91-e4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:84:b6:75:2c:63:31:89:3d:c1:66:fc:45: d6:f9:58:a4:31:35:d6:45:e7:aa:aa:bf:88:e4:3b: e1:11:3f:c4:f1:a1:2a:3e:5e:66:fa:b7:49:3c:23: d5:61:75:87:66:36:ed:e3:ee:80:b1:3b:8e:a3:df: 02:19:c3:88:67:9a:02:03:a9:f5:b6:d3:4c:54:27: f5:00:c9:55:92:de:8f:7e:1c:47:09:9c:de:a3:b2: e1:6c:09:ca:e1:3d:aa:2b:6c:78:3e:8d:c7:4b:24: 9f:d9:9d:62:5a:d0:bd:af:0d:c7:87:23:bb:14:c7: 1e:91:f8:90:a3:95:6a:03:9e:64:a3:8f:15:ec:48: 9c:9f:c1:cb:a3:35:bf:26:8d:4f:d9:aa:4c:4e:a8: 62:6d:24:c2:0e:16:a5:b5:35:59:dd:a4:cc:94:2f: 5a:5b:cf:67:95:7f:cd:22:ad:15:02:2a:2b:1f:5a: 0f:57:9b:4f:e1:b4:bf:7d:ad:3c:08:60:57:95:2b: 43:1d:e1:f7:58:7a:00:25:2b:42:fc:b1:bd:f1:3f: 76:d4:16:32:98:fb:41:c7:b7:3d:21:e5:d7:ae:47: 2b:77:2c:6b:6d:85:4f:42:86:c1:2c:12:39:46:10: 86:87:08:c7:f2:00:17:4f:eb:c4:bb:a4:0b:98:75: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E2:E2:AE:45:56:D2:CC:24:C0:DF:52:73:54:A8:97:B2:8C:FA:AE X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:cd:e4:a5:80:4d:4d:50:ef:7b:df:5d:68:43:1d:a1:98:55: f6:bb:54:29:a6:8e:14:2a:33:d8:6e:d8:e0:f4:e6:ce:fc:ed: 70:ac:48:4c:a2:ae:14:95:55:cf:5c:0f:4b:b4:93:03:ca:ac: 07:2c:28:ce:96:b6:2e:76:ea:f7:94:fd:b9:b3:6e:e6:44:51: 31:7b:7b:87:33:c2:94:ab:9d:a7:57:59:71:2f:0b:e5:95:c3: 65:0f:bf:79:2e:d6:2b:13:35:da:15:57:e7:e5:1d:48:0d:aa: d8:55:c5:fe:53:17:b0:83:4c:1f:f9:82:45:f0:ca:c8:cb:1b: d5:73:a5:53:6e:a9:fb:dd:f7:7b:a1:c8:ec:82:3d:79:92:39: e8:39:45:8a:8c:3a:11:33:f6:16:2c:25:22:2a:43:16:bc:7e: 76:11:bc:e6:cf:ab:df:df:9c:4d:45:6a:94:2f:62:25:09:de: 0e:22:eb:a8:05:30:bf:ec:18:78:a2:d5:b2:d6:54:20:7d:08: 9f:01:2e:da:90:a6:cd:07:97:0a:9a:25:7d:d6:99:88:e3:59: 31:e9:c7:cd:72:fb:8b:50:cc:90:eb:17:15:fd:6a:0e:0c:cc: 0e:81:7a:b3:ad:86:32:b1:9b:4f:f1:da:db:52:ab:c4:49:f7: 18:8b:c1:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0 NDA1NzNDNjMwHhcNMjYwNTExMDc1MTQ0WhcNMjYwNTE4MDc1MTQ0WjAYMRYwFAYD VQQDEw02YTAxOGE5MS1lNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdSEtnUsYzGJPcFm/EXW+VikMTXWReeqqr+I5DvhET/E8aEqPl5m+rdJPCPV YXWHZjbt4+6AsTuOo98CGcOIZ5oCA6n1ttNMVCf1AMlVkt6PfhxHCZzeo7LhbAnK 4T2qK2x4Po3HSySf2Z1iWtC9rw3HhyO7FMcekfiQo5VqA55ko48V7Eicn8HLozW/ Jo1P2apMTqhibSTCDhaltTVZ3aTMlC9aW89nlX/NIq0VAiorH1oPV5tP4bS/fa08 CGBXlStDHeH3WHoAJStC/LG98T921BYymPtBx7c9IeXXrkcrdyxrbYVPQobBLBI5 RhCGhwjH8gAXT+vEu6QLmHUPxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbi4q5F VtLMJMDfUnNUqJeyjPquMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxs3kpYBNTVDve99daEMdoZhV9rtUKaaOFCoz2G7Y4PTmzvztcKxITKKuFJVV z1wPS7STA8qsBywozpa2Lnbq95T9ubNu5kRRMXt7hzPClKudp1dZcS8L5ZXDZQ+/ eS7WKxM12hVX5+UdSA2q2FXF/lMXsINMH/mCRfDKyMsb1XOlU26p+933e6HI7II9 eZI56DlFiow6ETP2FiwlIipDFrx+dhG85s+r39+cTUVqlC9iJQneDiLrqAUwv+wY eKLVstZUIH0InwEu2pCmzQeXCpolfdaZiONZMenHzXL7i1DMkOsXFf1qDgzMDoF6 s62GMrGbT/Ha21KrxEn3GIvBIg== -----END CERTIFICATE-----Generated at Wed May 13 08:23:17 2026 by rpki-client