$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: mxXV5wmTIqRGUTgwZkq+VUAmH3aMVy1WXpX7sC+drik= Subject key identifier: 19:FE:30:A6:5F:CD:19:AD:96:64:16:F1:A2:3C:19:41:30:7F:B2:B5 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: D4 Signing time: Wed 23 Sep 2026 06:29:20 +0000 Manifest this update: Wed 23 Sep 2026 06:29:20 +0000 Manifest next update: Wed 30 Sep 2026 06:29:20 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: 3voUBTqubbNvY6uiaVG845iLhfVSaruyrv2s0k70ofM=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: CSo2AGQqGn0kd2y3BxFVD7WYUjWebI85PFFaDCSVnE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Sep 23 06:29:20 2026 GMT Not After : Sep 30 06:29:20 2026 GMT Subject: CN=6ab371c0-ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:fc:12:25:9a:ad:90:d9:a7:b0:b3:48:c1: 28:ca:c0:a4:f0:09:39:fb:a1:2c:37:57:1f:4b:06: 61:e9:71:cf:c8:ea:64:2e:8d:b8:24:64:bc:de:a8: 00:0d:d8:2b:6e:16:79:d6:99:09:5d:29:c4:28:0b: 2b:27:d7:65:b6:80:27:f0:87:10:1f:68:60:8d:1f: df:90:01:42:4e:c8:80:52:39:73:fe:9e:4d:18:f8: 04:31:15:4b:1c:f4:73:9d:3b:9c:d1:ee:f3:13:e5: 70:34:e9:ff:f4:99:5a:13:14:6a:4e:30:c6:fe:e4: 90:94:f0:f8:72:22:55:54:2a:1e:6d:4e:92:84:ae: 41:09:52:95:80:d9:14:2f:64:db:7a:98:e8:aa:54: be:bd:e6:17:40:db:4d:47:8c:9a:a2:58:12:ae:1f: e0:1f:32:f6:64:44:39:03:54:c6:d6:09:2a:ec:ce: 24:bf:c7:c4:97:16:e4:d2:4a:24:91:f6:b6:ef:5c: f9:e3:60:d5:f6:22:72:12:43:65:07:41:fa:e4:5a: 54:70:bf:7f:76:39:1a:fb:75:2b:bd:06:8c:38:db: 31:8a:29:33:60:1b:69:31:c5:0b:82:f0:6a:38:96: c6:56:3a:cd:35:e4:a3:40:9f:3f:57:c2:89:52:1b: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:30:A6:5F:CD:19:AD:96:64:16:F1:A2:3C:19:41:30:7F:B2:B5 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:39:5b:83:1e:f2:ee:8c:8e:da:09:4c:52:e1:4a:16:8c:7d: da:fb:cd:bb:b9:7c:cf:d7:0a:a5:c9:d7:b0:a8:a3:89:35:25: 21:62:1b:82:91:9c:a9:df:e4:6f:d3:72:f7:84:ad:2e:9c:a8: 7d:1b:02:19:b9:cc:18:cc:fd:9e:1e:19:69:ab:c3:b9:15:6c: a1:5c:4d:cc:57:ea:33:8c:21:87:4b:b3:57:12:b2:37:f6:02: 1f:8d:e4:47:a2:db:75:84:48:8d:c9:b7:73:ac:78:00:b2:d7: 05:4f:0b:07:24:15:18:96:1f:25:da:0a:2b:48:ed:6d:33:d6: 98:cc:2c:d9:88:4f:e3:3d:2a:4f:ac:11:f4:f8:e5:ae:26:af: 0f:bd:75:80:4e:90:72:87:15:90:a1:70:11:25:74:29:6c:3e: 47:f0:a3:da:30:a7:00:1c:fe:d7:cb:1d:f1:55:24:53:0d:d1: 08:8b:43:ba:3f:d1:d8:96:61:6a:06:10:b8:c6:87:9a:81:ea: 75:e9:74:38:6d:93:85:54:38:ac:6f:fa:58:73:f7:c1:ab:12: e4:69:b2:76:2d:15:56:a7:ac:f2:1a:47:21:aa:86:60:56:bd: b8:54:af:14:de:6e:9d:27:75:4b:3e:63:e5:2c:cd:16:65:79: 3c:a0:4e:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw MDA2ODU3NjEwHhcNMjYwOTIzMDYyOTIwWhcNMjYwOTMwMDYyOTIwWjAYMRYwFAYD VQQDEw02YWIzNzFjMC1lYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeb8EiWarZDZp7CzSMEoysCk8Ak5+6EsN1cfSwZh6XHPyOpkLo24JGS83qgA DdgrbhZ51pkJXSnEKAsrJ9dltoAn8IcQH2hgjR/fkAFCTsiAUjlz/p5NGPgEMRVL HPRznTuc0e7zE+VwNOn/9JlaExRqTjDG/uSQlPD4ciJVVCoebU6ShK5BCVKVgNkU L2TbepjoqlS+veYXQNtNR4yaolgSrh/gHzL2ZEQ5A1TG1gkq7M4kv8fElxbk0kok kfa271z542DV9iJyEkNlB0H65FpUcL9/djka+3UrvQaMONsxiikzYBtpMcULgvBq OJbGVjrNNeSjQJ8/V8KJUhtOcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBn+MKZf zRmtlmQW8aI8GUEwf7K1MB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0 QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0 ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANTlbgx7y7oyO2glMUuFKFox92vvNu7l8z9cKpcnXsKijiTUlIWIbgpGcqd/k b9Ny94StLpyofRsCGbnMGMz9nh4ZaavDuRVsoVxNzFfqM4whh0uzVxKyN/YCH43k R6LbdYRIjcm3c6x4ALLXBU8LByQVGJYfJdoKK0jtbTPWmMws2YhP4z0qT6wR9Pjl riavD711gE6QcocVkKFwESV0KWw+R/Cj2jCnABz+18sd8VUkUw3RCItDuj/R2JZh agYQuMaHmoHqdel0OG2ThVQ4rG/6WHP3wasS5Gmydi0VVqes8hpHIaqGYFa9uFSv FN5unSd1Sz5j5SzNFmV5PKBONg== -----END CERTIFICATE-----Generated at Wed Sep 23 20:29:36 2026 by rpki-client