$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: N6SEFjDR5XNmZm3zXp9IwAcJKhRbK83bm2YWgTBwxXU= Subject key identifier: BE:C7:95:0B:FF:8A:21:A4:0C:E9:05:AB:37:B1:E0:3B:7D:26:11:15 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 76 Signing time: Wed 25 Mar 2026 07:01:01 +0000 Manifest this update: Wed 25 Mar 2026 07:01:01 +0000 Manifest next update: Wed 01 Apr 2026 07:01:01 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: dWcGwcT0ioS6qLUDPJ8IIPFjY0hGn2ouN67WfxvZVdg=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Mar 25 07:01:01 2026 GMT Not After : Apr 1 07:01:01 2026 GMT Subject: CN=69c3882d-2a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:18:6d:9b:6f:2b:52:c6:69:02:9a:07:36: 1d:bd:e5:77:44:21:16:dd:8a:b7:f3:f1:b8:e4:1c: 2a:64:49:aa:70:50:25:9a:71:39:fe:b9:ca:03:1e: 68:5e:66:e0:0a:28:26:19:f9:be:de:bb:4c:9d:da: b2:bc:84:3c:b1:18:9f:63:88:9c:aa:b9:c0:2a:97: d0:89:cc:09:25:46:31:b2:e1:c3:4f:6e:dc:7b:4d: c3:d6:ec:19:5e:ca:a2:58:4e:95:1a:8a:7c:9b:49: 35:36:4a:f0:8a:ea:43:36:19:fd:63:8f:a6:e3:df: 64:56:57:7a:49:f6:3a:d8:17:e7:54:2b:c5:66:ac: 8b:4e:fe:e8:96:6f:d7:7a:b1:60:a0:c4:64:19:a0: 22:ff:d8:06:36:23:f4:75:3c:fc:1d:cc:e2:3e:38: b3:92:4c:34:cc:dc:d1:cb:f6:49:52:44:a9:7e:3b: f0:19:8a:dd:21:98:fd:54:d2:45:8d:f4:5c:4d:fd: 68:2e:8a:9f:1a:6b:85:4d:5c:54:34:e1:32:3d:eb: 51:2f:f9:e9:bd:7a:4a:9d:ac:58:39:2c:a5:e8:28: 93:18:ed:02:30:2e:48:01:dc:cc:41:52:c2:ce:59: 23:74:64:18:c6:36:f5:09:5f:73:67:cb:06:5f:18: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C7:95:0B:FF:8A:21:A4:0C:E9:05:AB:37:B1:E0:3B:7D:26:11:15 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3d:4f:8f:ac:81:06:c0:5e:0a:37:c6:09:9f:9a:a4:6e:6c: 18:c0:73:ac:32:2b:b2:e2:8a:53:b4:ef:1d:97:81:2d:b7:c3: bb:4a:22:10:4f:20:7a:9f:2b:be:0d:1d:c1:a3:1c:af:c9:2c: c4:b8:7f:06:fd:b6:a3:58:9f:8d:35:26:69:43:15:69:b8:44: c5:d5:96:bf:68:36:57:16:4e:91:c7:bd:96:6a:d9:8c:c2:b2: 91:dc:01:e5:97:fa:32:10:ec:6a:ec:ec:48:e0:d3:c0:cb:02: 38:65:88:a2:18:00:05:4f:a9:a5:1c:3c:94:a4:8f:90:7d:ba: 8c:38:44:05:79:16:61:03:6a:60:28:47:18:b4:dc:45:29:dd: 2c:bc:d4:23:18:c0:0e:10:2e:71:b4:99:f5:27:ca:cd:c9:f3: fb:72:eb:75:de:b5:22:ca:e2:1e:b8:f2:3a:6d:ca:59:d7:3b: cf:4b:e5:72:5f:44:2a:4f:3e:31:92:d8:4e:1d:a7:54:d7:da: 11:a7:cc:e8:f8:00:4b:19:54:8c:b6:ed:0d:e5:77:af:10:72: b9:32:9d:8b:16:52:a7:63:14:0c:ad:15:26:87:19:ad:4e:0a: d4:c7:3e:50:be:b8:a3:d8:78:e1:a3:fe:a6:33:a9:cc:15:1a: af:53:10:ee -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNjAzMjUwNzAxMDFaFw0yNjA0MDEwNzAxMDFaMBgxFjAUBgNV BAMTDTY5YzM4ODJkLTJhOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOoRhtm28rUsZpApoHNh295XdEIRbdirfz8bjkHCpkSapwUCWacTn+ucoDHmhe ZuAKKCYZ+b7eu0yd2rK8hDyxGJ9jiJyqucAql9CJzAklRjGy4cNPbtx7TcPW7Ble yqJYTpUainybSTU2SvCK6kM2Gf1jj6bj32RWV3pJ9jrYF+dUK8VmrItO/uiWb9d6 sWCgxGQZoCL/2AY2I/R1PPwdzOI+OLOSTDTM3NHL9klSRKl+O/AZit0hmP1U0kWN 9FxN/Wguip8aa4VNXFQ04TI961Ev+em9ekqdrFg5LKXoKJMY7QIwLkgB3MxBUsLO WSN0ZBjGNvUJX3NnywZfGP7PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvseVC/+K IaQM6QWrN7HgO30mERUwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSPU+PrIEGwF4KN8YJn5qkbmwYwHOsMiuy4opTtO8dl4Ett8O7SiIQTyB6nyu+ DR3BoxyvySzEuH8G/bajWJ+NNSZpQxVpuETF1Za/aDZXFk6Rx72WatmMwrKR3AHl l/oyEOxq7OxI4NPAywI4ZYiiGAAFT6mlHDyUpI+QfbqMOEQFeRZhA2pgKEcYtNxF Kd0svNQjGMAOEC5xtJn1J8rNyfP7cut13rUiyuIeuPI6bcpZ1zvPS+VyX0QqTz4x kthOHadU19oRp8zo+ABLGVSMtu0N5XevEHK5Mp2LFlKnYxQMrRUmhxmtTgrUxz5Q vrij2Hjho/6mM6nMFRqvUxDu -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:58 2026 by rpki-client