$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: 2M4gYJaHXUe1RhvYMVdmAy6qCBokUDl5jG2dCmb9Z0w= Subject key identifier: C4:23:5F:9F:75:63:26:20:95:63:CE:C1:60:DE:FB:4F:DD:3F:44:36 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 1A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 20C5 Signing time: Mon 28 Sep 2026 16:22:48 +0000 Manifest this update: Mon 28 Sep 2026 16:22:47 +0000 Manifest next update: Mon 05 Oct 2026 16:22:47 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: 5am9JkTo/mMrMDccXGQOhZi8wgkrZr/1FTPju3N0I0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6721 (0x1a41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: Sep 28 16:22:47 2026 GMT Not After : Oct 5 16:22:47 2026 GMT Subject: CN=6aba9458-6513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:fe:62:cd:64:6b:dc:85:19:09:8e:30:15: 4a:e3:b4:1f:23:bf:25:a6:d6:f5:20:d8:a0:88:38: 17:3c:b0:16:d8:c5:72:71:18:6e:91:26:90:37:79: 41:db:bc:de:d2:05:13:d4:2f:4b:85:73:0d:0e:e0: 30:36:f2:8f:7f:ae:3a:de:81:27:c9:ce:d0:25:56: 05:3f:97:5c:1b:25:a0:e1:00:27:b3:54:00:28:36: 55:d0:1e:9a:34:2d:e7:37:ad:b1:e9:64:ae:e3:48: ab:8a:28:8d:d4:5d:e0:1e:e8:79:bc:df:9d:b4:13: 72:59:b3:23:a3:2b:92:99:8f:f1:1a:eb:b9:4c:39: 92:23:12:98:4d:64:dd:4b:6c:0f:f2:0b:f9:41:ac: 9c:8e:35:3b:1b:b0:20:2c:c2:9a:a5:30:ab:91:21: 5d:17:2e:6c:5e:59:2d:fe:d8:1a:6a:7c:55:a5:8d: 13:61:c7:8f:9e:09:63:65:ac:8e:38:1e:c3:41:4b: 1b:63:2b:eb:36:88:fd:7d:ec:48:2d:45:6c:ca:c4: f5:47:f5:50:77:57:04:84:0e:bf:95:42:57:76:d9: 18:36:82:3b:68:e3:23:7e:38:f4:ae:e0:3c:c6:9a: 1e:ed:22:63:9b:f3:d8:a9:88:73:b7:f6:c8:20:b2: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:5F:9F:75:63:26:20:95:63:CE:C1:60:DE:FB:4F:DD:3F:44:36 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:de:72:4d:71:20:30:37:b8:3e:c8:5b:55:f9:62:01:8d:f3: 5f:81:6d:da:cd:33:2f:01:3c:74:0e:db:26:49:22:5d:88:ad: e5:06:99:d4:55:1c:60:e1:01:ae:a7:4f:f9:c1:4b:3b:f5:15: 75:41:98:ac:76:cf:75:b2:40:72:4b:8f:11:e4:d8:d5:be:31: f3:5b:b8:b5:38:92:db:5b:b3:82:69:03:b2:38:d1:8c:1e:34: 46:99:78:01:42:79:cd:0b:63:e8:c6:63:a2:6c:90:c4:a4:ff: ca:49:a1:10:03:cd:f7:04:8d:d0:c4:09:8a:2f:c6:cd:bc:01: 2d:4f:3f:00:d0:a2:28:83:f3:09:56:df:7d:ff:ef:00:53:93: a2:c9:dc:62:4e:c4:56:fa:e5:51:7e:58:6e:d1:07:b4:06:38: 18:b5:8a:69:9a:a1:f5:d8:c1:30:50:b6:94:a5:3c:6d:a8:a1: 81:8f:97:1f:7d:71:67:ed:42:3c:4e:b8:8a:5f:57:66:ec:e0: 4f:14:3a:f8:48:a4:98:52:55:03:60:f0:37:79:6b:1f:ad:10: 54:c6:eb:73:3b:7d:a0:03:38:f8:6c:3e:f3:e7:d1:a4:8f:e3: 6d:67:6c:3b:d5:2c:3e:9e:82:b8:d2:de:64:2e:89:d4:83:46: d0:46:fc:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjYwOTI4MTYyMjQ3WhcNMjYxMDA1MTYyMjQ3WjAYMRYwFAYD VQQDEw02YWJhOTQ1OC02NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmb+Ys1ka9yFGQmOMBVK47QfI78lptb1INigiDgXPLAW2MVycRhukSaQN3lB 27ze0gUT1C9LhXMNDuAwNvKPf6463oEnyc7QJVYFP5dcGyWg4QAns1QAKDZV0B6a NC3nN62x6WSu40iriiiN1F3gHuh5vN+dtBNyWbMjoyuSmY/xGuu5TDmSIxKYTWTd S2wP8gv5QaycjjU7G7AgLMKapTCrkSFdFy5sXlkt/tgaanxVpY0TYcePngljZayO OB7DQUsbYyvrNoj9fexILUVsysT1R/VQd1cEhA6/lUJXdtkYNoI7aOMjfjj0ruA8 xpoe7SJjm/PYqYhzt/bIILLSMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQjX591 YyYglWPOwWDe+0/dP0Q2MB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAid5yTXEgMDe4PshbVfliAY3zX4Ft2s0zLwE8dA7bJkkiXYit5QaZ1FUcYOEB rqdP+cFLO/UVdUGYrHbPdbJAckuPEeTY1b4x81u4tTiS21uzgmkDsjjRjB40Rpl4 AUJ5zQtj6MZjomyQxKT/ykmhEAPN9wSN0MQJii/GzbwBLU8/ANCiKIPzCVbfff/v AFOTosncYk7EVvrlUX5YbtEHtAY4GLWKaZqh9djBMFC2lKU8baihgY+XH31xZ+1C PE64il9XZuzgTxQ6+EikmFJVA2DwN3lrH60QVMbrczt9oAM4+Gw+8+fRpI/jbWds O9UsPp6CuNLeZC6J1ING0Eb8ZQ== -----END CERTIFICATE-----Generated at Wed Sep 30 01:05:41 2026 by rpki-client