$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: YNmBaQYRUk6dMriiG0PSsxMQRIV3lZhV2x12WUKOXlU= Subject key identifier: 62:D7:BC:6E:B8:22:F3:A0:1A:F8:EC:21:DE:52:31:DC:F2:24:AE:8B Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 8E Signing time: Mon 11 May 2026 07:40:35 +0000 Manifest this update: Mon 11 May 2026 07:40:34 +0000 Manifest next update: Mon 18 May 2026 07:40:34 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: wvie48fy1F+LQBw3M8HMcURm/dfZo4cFiWdGg7N9jKc=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: May 11 07:40:34 2026 GMT Not After : May 18 07:40:34 2026 GMT Subject: CN=6a0187f3-d4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:fe:19:99:00:5a:ba:27:63:5a:c1:df:e4: 12:99:01:72:3a:a3:25:4c:8f:06:e8:54:37:c6:0a: 56:5a:7e:5a:36:6b:6f:4e:15:12:b7:3d:99:8a:a4: 51:39:64:53:d0:7e:b3:e2:c4:71:e9:d0:b5:de:cc: 30:71:19:99:f1:fd:db:da:cd:44:18:41:8a:46:ae: d6:30:ca:fb:42:43:d1:e2:1c:79:4f:05:6c:01:2d: 6f:60:a2:e0:81:5a:b1:cd:f4:ff:b6:77:15:42:1f: 08:30:e8:f4:87:95:a1:ee:0b:8f:d9:85:47:52:71: 0f:cb:a1:34:a6:9b:7c:d9:e2:6d:a1:0f:bc:88:24: 4d:f2:34:ed:9e:0c:cf:01:02:2d:10:93:d7:5a:6c: 69:8e:c1:77:a0:56:de:fb:07:92:b8:37:9c:c6:bb: 37:08:f5:cf:32:ed:51:02:1d:72:71:d8:2d:c2:cf: 8b:ce:4e:17:b5:3c:cd:0d:1f:f9:09:29:20:73:85: ef:60:ec:77:72:d8:9c:cb:a8:2f:26:dd:90:b9:cd: 1d:b6:37:38:b8:a4:2a:2c:f7:28:fa:4d:8e:c3:82: 5b:c2:b5:0c:9c:49:0b:a3:d7:9a:17:69:75:37:71: 4d:a4:25:b3:ab:96:fd:84:5b:c6:fc:2d:54:f0:76: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:BC:6E:B8:22:F3:A0:1A:F8:EC:21:DE:52:31:DC:F2:24:AE:8B X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ae:fa:65:df:bb:69:df:4a:59:82:c6:8c:00:93:21:fa:2a: 50:ac:73:84:4f:52:3e:8a:fe:b9:0e:91:60:a0:bb:4f:0e:0e: b1:88:48:16:74:5f:80:19:b4:4d:33:6d:ff:4e:5d:21:b1:0d: a4:d1:53:fe:53:7a:67:7a:61:23:26:56:b3:da:a2:9b:f2:8f: 00:51:bc:a2:36:58:dd:27:23:91:ab:6a:70:56:06:fe:b8:a6: 4f:23:4a:e5:8d:b7:9a:4f:7f:cb:bd:79:87:d7:d4:27:eb:58: 6f:ac:f0:86:27:f1:dd:ea:22:29:c0:39:16:59:de:8c:5e:8f: 01:29:27:dd:cd:4a:60:7e:29:cc:53:7b:73:7a:76:6a:c5:b5: 45:8c:38:bc:03:6e:e8:11:f4:33:6b:d0:95:40:18:c7:82:79: 21:2e:25:8a:43:d2:32:9e:ca:3e:ba:9d:23:00:38:69:d7:5e: b8:dc:3f:ef:0c:5c:20:fd:5d:df:19:75:86:2a:6a:6d:af:61: 1e:51:dc:fe:85:ee:3e:47:39:83:08:5c:b1:80:67:40:d5:b0: ff:5c:51:75:7e:30:c9:98:21:b8:eb:e4:6b:25:c8:85:0f:a3: eb:21:5a:b4:94:c0:82:e1:29:d3:56:f0:14:05:d9:7b:03:2d: 60:6d:90:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw MDA2ODU3NjEwHhcNMjYwNTExMDc0MDM0WhcNMjYwNTE4MDc0MDM0WjAYMRYwFAYD VQQDEw02YTAxODdmMy1kNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLr+GZkAWronY1rB3+QSmQFyOqMlTI8G6FQ3xgpWWn5aNmtvThUStz2ZiqRR OWRT0H6z4sRx6dC13swwcRmZ8f3b2s1EGEGKRq7WMMr7QkPR4hx5TwVsAS1vYKLg gVqxzfT/tncVQh8IMOj0h5Wh7guP2YVHUnEPy6E0ppt82eJtoQ+8iCRN8jTtngzP AQItEJPXWmxpjsF3oFbe+weSuDecxrs3CPXPMu1RAh1ycdgtws+Lzk4XtTzNDR/5 CSkgc4XvYOx3cticy6gvJt2Quc0dtjc4uKQqLPco+k2Ow4JbwrUMnEkLo9eaF2l1 N3FNpCWzq5b9hFvG/C1U8HaENQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLXvG64 IvOgGvjsId5SMdzyJK6LMB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0 QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0 ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU676Zd+7ad9KWYLGjACTIfoqUKxzhE9SPor+uQ6RYKC7Tw4OsYhIFnRfgBm0 TTNt/05dIbENpNFT/lN6Z3phIyZWs9qim/KPAFG8ojZY3ScjkatqcFYG/rimTyNK 5Y23mk9/y715h9fUJ+tYb6zwhifx3eoiKcA5FlnejF6PASkn3c1KYH4pzFN7c3p2 asW1RYw4vANu6BH0M2vQlUAYx4J5IS4likPSMp7KPrqdIwA4addeuNw/7wxcIP1d 3xl1hipqba9hHlHc/oXuPkc5gwhcsYBnQNWw/1xRdX4wyZghuOvkayXIhQ+j6yFa tJTAguEp01bwFAXZewMtYG2QUg== -----END CERTIFICATE-----Generated at Wed May 13 08:54:58 2026 by rpki-client