$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: QwrN1WB+POl5f4oRL+R8ZdwHCTKgxMrgUKfd4KdfPbc= Subject key identifier: B0:00:F0:FF:44:EA:E1:99:A2:7D:30:AB:89:5D:D2:60:5D:D4:A9:93 Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 0214 Signing time: Wed 25 Mar 2026 02:20:29 +0000 Manifest this update: Wed 25 Mar 2026 02:20:28 +0000 Manifest next update: Wed 01 Apr 2026 02:20:28 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: qysMkHShEAmXoAtzDI9UsXktEaKQ7FlvlygUTkK9A84=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Mar 25 02:20:28 2026 GMT Not After : Apr 1 02:20:28 2026 GMT Subject: CN=69c3466d-92f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:b2:f4:35:f5:88:d0:09:a6:9e:17:b9:ab: 80:d6:6c:96:e8:fe:fa:e6:fe:a9:1d:fc:d3:83:1c: 5d:23:1e:b6:77:ed:9b:11:da:16:ea:ef:cd:00:f1: ee:88:eb:a8:17:bc:eb:14:1e:ef:f5:39:2a:4a:3c: fc:cf:c1:cd:db:1b:f9:09:60:6a:9d:0b:8a:f2:c1: e3:0d:3e:a4:51:6b:df:79:27:f1:47:91:bd:35:3c: 2a:98:a7:db:61:f6:6b:d0:3b:6c:81:a9:b1:5d:24: b9:11:2f:8f:70:1d:eb:c4:6a:51:e7:b0:7c:63:ba: b8:00:f7:b2:2a:fb:71:a7:7d:1f:92:5d:70:df:cb: b1:42:cc:06:c2:1c:34:a8:c0:65:f9:c8:ce:8d:c8: 0c:dd:e6:74:c9:da:1d:e2:63:3b:b7:94:9b:d5:ce: 01:00:83:a1:48:29:ca:e9:65:70:85:e9:26:83:86: 50:9e:26:81:7a:94:a0:44:b5:3d:72:7e:6b:19:5b: 31:42:e8:35:6b:67:96:fa:1b:7f:63:8f:c9:d5:5f: 71:b9:17:a1:92:bf:31:f9:b3:99:9f:ac:30:36:d0: 49:e2:64:19:50:d9:4c:f8:ab:6e:7c:6b:0d:c2:86: 25:3f:23:50:82:b7:bf:2c:f8:e6:e0:5a:3e:8f:55: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:F0:FF:44:EA:E1:99:A2:7D:30:AB:89:5D:D2:60:5D:D4:A9:93 X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:82:0d:93:d2:23:95:b1:e5:33:6e:8b:42:78:29:51:03:37: 2d:6e:82:60:b5:b5:d7:5a:f9:d6:99:fc:e7:33:2f:28:a2:dd: 90:a6:99:29:4b:66:7b:7c:5c:23:36:15:2c:55:1f:23:0f:57: 1b:46:12:f1:7c:19:39:fa:1b:54:0e:2b:52:ba:c0:76:26:97: cc:c6:24:d3:3a:26:85:69:d2:a8:6b:20:6d:95:3e:94:de:22: 79:97:59:1a:6f:ca:1f:fa:e3:65:5b:67:49:27:6e:cd:c0:4a: c1:b1:3e:5d:a1:cc:6b:45:62:c9:63:cf:7e:c6:73:3b:5e:d2: 20:e6:23:2b:d7:dd:36:5e:b8:96:20:13:62:7b:fa:ee:ea:d0: 35:25:10:8d:e4:96:9b:3c:d2:fa:bb:8c:83:41:29:47:ce:b8: 84:fa:c3:cf:b4:b7:93:69:bd:de:d7:0e:69:04:00:f3:48:2a: ee:55:9e:5a:00:77:1e:bc:ee:cb:0e:33:b8:b6:4a:0b:64:26: 1f:a9:12:47:e6:c9:d7:d3:57:c4:41:fd:12:64:8e:8b:5d:51: d0:fe:fa:74:fb:df:7a:7a:b7:6e:96:a9:82:1c:bd:75:b2:07: 86:43:64:0a:84:68:e7:9a:0c:a9:00:36:b1:e4:95:a0:3b:8d: e4:a5:6a:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjYwMzI1MDIyMDI4WhcNMjYwNDAxMDIyMDI4WjAYMRYwFAYD VQQDEw02OWMzNDY2ZC05MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokKy9DX1iNAJpp4XuauA1myW6P765v6pHfzTgxxdIx62d+2bEdoW6u/NAPHu iOuoF7zrFB7v9TkqSjz8z8HN2xv5CWBqnQuK8sHjDT6kUWvfeSfxR5G9NTwqmKfb YfZr0DtsgamxXSS5ES+PcB3rxGpR57B8Y7q4APeyKvtxp30fkl1w38uxQswGwhw0 qMBl+cjOjcgM3eZ0ydod4mM7t5Sb1c4BAIOhSCnK6WVwhekmg4ZQniaBepSgRLU9 cn5rGVsxQug1a2eW+ht/Y4/J1V9xuRehkr8x+bOZn6wwNtBJ4mQZUNlM+KtufGsN woYlPyNQgre/LPjm4Fo+j1WrqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAA8P9E 6uGZon0wq4ld0mBd1KmTMB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOIINk9IjlbHlM26LQngpUQM3LW6CYLW111r51pn85zMvKKLdkKaZKUtme3xc IzYVLFUfIw9XG0YS8XwZOfobVA4rUrrAdiaXzMYk0zomhWnSqGsgbZU+lN4ieZdZ Gm/KH/rjZVtnSSduzcBKwbE+XaHMa0ViyWPPfsZzO17SIOYjK9fdNl64liATYnv6 7urQNSUQjeSWmzzS+ruMg0EpR864hPrDz7S3k2m93tcOaQQA80gq7lWeWgB3Hrzu yw4zuLZKC2QmH6kSR+bJ19NXxEH9EmSOi11R0P76dPvfenq3bpapghy9dbIHhkNk CoRo55oMqQA2seSVoDuN5KVqow== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:43 2026 by rpki-client