$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: r9C/41lHlZKOJnD5Jf4woI9FpwiYDTyajVSXlDGFl2k= Subject key identifier: 0C:DA:F7:94:11:FA:2A:08:96:09:39:CE:FB:0F:5B:A9:1F:E1:ED:30 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 0456 Signing time: Thu 26 Mar 2026 23:59:18 +0000 Manifest this update: Thu 26 Mar 2026 23:59:18 +0000 Manifest next update: Thu 02 Apr 2026 23:59:18 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: G6xyenlbKatxRpA+OUDl+n0QkUwLYKi4iJFFML0j4qw=) 2: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=) 4: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=) 5: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=) 6: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=) 7: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Mar 26 23:59:18 2026 GMT Not After : Apr 2 23:59:18 2026 GMT Subject: CN=69c5c856-13ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:a2:70:03:db:7e:63:65:cf:55:90:41:b3: 10:9f:89:7d:0b:eb:7a:c4:53:6a:3f:ba:94:70:14: 59:42:4d:49:b6:81:d3:b4:54:4c:95:31:06:94:63: 43:8a:25:8c:17:61:b2:08:8a:a8:64:11:2b:cf:bf: 03:79:ea:4d:fe:fe:de:ab:f6:7d:65:98:ff:bf:0f: ab:2f:60:20:51:0e:70:1e:f0:93:49:75:1d:33:d9: 7f:6a:e7:c5:0a:ef:1d:fe:8b:c0:5c:26:1f:6c:fc: f9:d6:66:0c:14:1b:34:d5:f5:2c:87:89:26:a2:79: 16:b0:d1:63:52:c8:73:1d:64:5c:06:df:d7:aa:82: cb:c0:cc:1f:38:62:35:47:96:4b:4c:e6:47:6e:72: 33:f6:40:d4:d9:fe:84:8a:e2:79:8d:a0:b4:ed:f6: bb:18:17:23:e5:74:ac:b4:f1:44:78:4e:14:d7:77: 35:39:a0:02:5e:d3:0d:bb:90:6f:2b:04:18:17:cc: 36:57:f5:2c:ee:9f:1f:8a:54:01:e0:4e:51:cb:db: 46:31:42:90:e3:6b:cd:f0:b9:40:62:38:72:8e:5b: ef:e6:87:36:46:87:51:b9:44:53:e3:77:77:d6:9f: 06:e6:a3:64:f8:d2:22:0d:ba:81:1b:a9:98:77:09: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:F7:94:11:FA:2A:08:96:09:39:CE:FB:0F:5B:A9:1F:E1:ED:30 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a6:77:9c:d8:0e:1f:fe:16:31:08:90:36:1d:a1:24:b6:8f: 75:0f:7e:25:ed:8b:a1:3c:7f:e6:54:e6:88:78:5e:04:69:2c: 2f:1c:65:b9:ad:6c:44:aa:c3:8c:c1:c3:62:e3:a7:22:14:3a: a4:c2:44:9c:24:b1:26:2b:17:d5:8b:c1:fa:6b:18:8f:8f:41: 20:54:95:30:5a:92:1f:2b:88:73:4e:2b:f1:f3:fa:10:a5:e1: bf:30:45:27:5c:a3:37:2b:c5:3e:50:4c:3d:ef:f0:d9:4f:f5: fe:93:b4:32:3c:3e:df:e7:9f:c9:2b:95:9e:56:ac:28:8e:92: ba:44:4f:06:ec:4f:3a:00:cf:ed:8e:8b:1d:21:ec:4a:5b:5f: 1a:d8:9e:ad:70:95:22:aa:4b:92:73:f9:47:f8:5c:ae:7d:c4: ab:3f:c4:1f:42:35:ff:f0:dc:fd:49:b2:02:ed:1d:42:30:6b: 9a:54:33:85:1d:16:04:5d:63:8b:fe:53:a7:fe:b9:ba:40:72: e0:02:75:39:f6:9c:b8:0f:9c:9a:a5:a5:01:02:3f:a5:ad:07: ea:02:92:b8:58:de:d9:56:b9:44:46:a4:22:65:e4:ec:c4:29: 84:d0:4d:da:7a:29:27:87:53:f5:48:9e:c8:46:96:6a:18:47: 5a:5f:40:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYwMzI2MjM1OTE4WhcNMjYwNDAyMjM1OTE4WjAYMRYwFAYD VQQDEw02OWM1Yzg1Ni0xM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPGicAPbfmNlz1WQQbMQn4l9C+t6xFNqP7qUcBRZQk1JtoHTtFRMlTEGlGND iiWMF2GyCIqoZBErz78DeepN/v7eq/Z9ZZj/vw+rL2AgUQ5wHvCTSXUdM9l/aufF Cu8d/ovAXCYfbPz51mYMFBs01fUsh4kmonkWsNFjUshzHWRcBt/XqoLLwMwfOGI1 R5ZLTOZHbnIz9kDU2f6EiuJ5jaC07fa7GBcj5XSstPFEeE4U13c1OaACXtMNu5Bv KwQYF8w2V/Us7p8filQB4E5Ry9tGMUKQ42vN8LlAYjhyjlvv5oc2RodRuURT43d3 1p8G5qNk+NIiDbqBG6mYdwkRpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAza95QR +ioIlgk5zvsPW6kf4e0wMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAqZ3nNgOH/4WMQiQNh2hJLaPdQ9+Je2LoTx/5lTmiHheBGksLxxlua1sRKrD jMHDYuOnIhQ6pMJEnCSxJisX1YvB+msYj49BIFSVMFqSHyuIc04r8fP6EKXhvzBF J1yjNyvFPlBMPe/w2U/1/pO0Mjw+3+efySuVnlasKI6SukRPBuxPOgDP7Y6LHSHs SltfGtierXCVIqpLknP5R/hcrn3Eqz/EH0I1//Dc/UmyAu0dQjBrmlQzhR0WBF1j i/5Tp/65ukBy4AJ1OfacuA+cmqWlAQI/pa0H6gKSuFje2Va5REakImXk7MQphNBN 2nopJ4dT9UieyEaWahhHWl9AIA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:20 2026 by rpki-client