$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: faAjwUvrSPizW8BDa03g9XhAsWYHDqHhEsL5fwZhLbA= Subject key identifier: 86:98:8C:A0:9A:0D:4C:39:0F:78:8C:18:0D:A7:11:05:A3:B7:2A:C7 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 038B Signing time: Tue 29 Sep 2026 00:53:17 +0000 Manifest this update: Tue 29 Sep 2026 00:53:17 +0000 Manifest next update: Tue 06 Oct 2026 00:53:17 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: l1+aECQzzxAybKYesIxoMrMYn3thyptYPbR/q6n2Qes=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: zggpt7R4a+PI4pARo9mUAXvumVGB88Ycl82ZQK6m+OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Sep 29 00:53:17 2026 GMT Not After : Oct 6 00:53:17 2026 GMT Subject: CN=6abb0bfd-8266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:d0:d4:8c:46:e0:a7:1a:88:30:f0:d4:b5: f2:27:f6:3c:a3:29:89:58:6f:4a:c2:fd:e6:33:b7: 32:0e:0d:50:38:14:55:9b:10:c5:07:cb:a5:e5:e0: a3:6d:84:2c:fe:65:5a:0a:35:ed:cb:50:f3:82:59: 7f:c0:5b:0d:4d:46:62:ec:3e:45:94:a4:90:06:73: 36:6c:40:d2:d2:83:52:21:2d:e1:ad:17:13:5f:53: 69:0d:9d:38:19:e2:4c:a1:85:9c:0f:0d:72:e7:27: 15:df:72:64:96:7d:0d:8f:bc:8f:4a:f7:02:5e:ed: 9c:8d:61:f5:bc:f5:ff:26:35:46:e3:8d:99:67:3e: a1:48:6b:54:e7:63:24:19:16:79:a1:6d:00:a5:7d: e7:11:9d:a5:67:54:4e:5f:c9:b0:b1:4e:04:1e:71: ed:b8:4f:d7:53:ab:7b:f7:98:fb:79:7f:23:6f:a8: 81:bf:3e:33:c6:60:01:cd:b4:4b:85:c1:13:e2:01: 5d:ef:00:bc:9d:fc:3a:ee:96:bb:a0:63:ef:bb:55: 82:cf:63:dc:24:0e:6c:d0:2f:02:ec:d1:dd:34:ee: 25:87:f2:33:8f:86:4b:03:31:6e:48:d6:86:e2:28: 67:f9:b4:38:cf:0c:ea:59:d8:71:c6:20:ec:14:9d: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:98:8C:A0:9A:0D:4C:39:0F:78:8C:18:0D:A7:11:05:A3:B7:2A:C7 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a1:0e:d1:2a:a8:d5:60:02:79:33:83:c5:ee:c9:f0:57:b6: 78:c3:1d:77:00:5e:be:68:51:7e:93:cd:5a:7a:5e:fd:c1:7e: 36:80:0e:5f:85:7e:0e:5b:3e:81:2d:33:6b:7a:1f:1b:81:7e: 98:77:c4:a6:a2:c9:d6:a1:e0:57:af:93:82:89:ca:be:f8:c7: 7a:0c:54:66:df:f5:8b:fd:21:a1:43:ee:f5:b3:70:6e:d1:05: 3c:3e:55:5a:0f:68:7d:b9:d3:39:6a:f8:4f:3f:c0:fa:c9:46: c3:9f:79:0b:6f:cd:d8:27:1c:e3:82:d7:34:36:40:4c:d6:dc: 3a:65:23:2e:80:76:23:8e:91:45:d4:23:54:e5:5e:b5:14:53: c5:cb:09:a8:64:d4:62:37:82:9d:a1:41:aa:2f:6f:19:1a:46: c2:df:33:00:cb:78:f4:58:3f:88:7f:a5:ec:6f:a7:ee:83:97: 9c:90:8b:b2:a0:22:18:cb:4b:06:88:74:1e:ec:cf:12:b1:f2: 64:2d:aa:a2:08:78:93:01:ba:4d:cc:79:b6:27:83:4e:b8:65: 39:0b:fb:32:3d:8e:2f:f5:19:13:7c:03:3d:de:c0:38:2f:af: 3d:74:74:dd:6f:24:a9:5e:d7:b2:8a:95:6c:06:2d:f6:5a:f2: 9a:6b:48:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjYwOTI5MDA1MzE3WhcNMjYxMDA2MDA1MzE3WjAYMRYwFAYD VQQDEw02YWJiMGJmZC04MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxknQ1IxG4KcaiDDw1LXyJ/Y8oymJWG9Kwv3mM7cyDg1QOBRVmxDFB8ul5eCj bYQs/mVaCjXty1Dzgll/wFsNTUZi7D5FlKSQBnM2bEDS0oNSIS3hrRcTX1NpDZ04 GeJMoYWcDw1y5ycV33Jkln0Nj7yPSvcCXu2cjWH1vPX/JjVG442ZZz6hSGtU52Mk GRZ5oW0ApX3nEZ2lZ1ROX8mwsU4EHnHtuE/XU6t795j7eX8jb6iBvz4zxmABzbRL hcET4gFd7wC8nfw67pa7oGPvu1WCz2PcJA5s0C8C7NHdNO4lh/Izj4ZLAzFuSNaG 4ihn+bQ4zwzqWdhxxiDsFJ1KAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaYjKCa DUw5D3iMGA2nEQWjtyrHMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6EO0Sqo1WACeTODxe7J8Fe2eMMddwBevmhRfpPNWnpe/cF+NoAOX4V+Dls+ gS0za3ofG4F+mHfEpqLJ1qHgV6+TgonKvvjHegxUZt/1i/0hoUPu9bNwbtEFPD5V Wg9ofbnTOWr4Tz/A+slGw595C2/N2Ccc44LXNDZATNbcOmUjLoB2I46RRdQjVOVe tRRTxcsJqGTUYjeCnaFBqi9vGRpGwt8zAMt49Fg/iH+l7G+n7oOXnJCLsqAiGMtL Boh0HuzPErHyZC2qogh4kwG6Tcx5tieDTrhlOQv7Mj2OL/UZE3wDPd7AOC+vPXR0 3W8kqV7XsoqVbAYt9lrymmtIuQ== -----END CERTIFICATE-----Generated at Tue Sep 29 19:56:39 2026 by rpki-client