$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: 6WYx/+NL9Of9psRzGZx1idyPScn4jUVLWxUpJbDxVxg= Subject key identifier: 31:D6:75:AA:3E:47:15:9E:2A:E5:AB:BE:C3:85:58:95:11:0A:01:73 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 04B2 Signing time: Tue 22 Sep 2026 23:33:10 +0000 Manifest this update: Tue 22 Sep 2026 23:33:10 +0000 Manifest next update: Tue 29 Sep 2026 23:33:10 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: YAZtdxybW4yVAUy1hdhyx2HKvzDyJmhTl5Hsf7AA9ow=) 2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=) 3: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=) 5: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=) 6: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=) 7: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Sep 22 23:33:10 2026 GMT Not After : Sep 29 23:33:10 2026 GMT Subject: CN=6ab31036-5922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:c3:a5:f7:67:eb:89:da:da:32:a5:59:e5: 07:10:b5:13:9d:c5:06:73:53:c0:cd:09:17:57:51: 5b:48:15:41:d9:00:04:f2:ae:76:df:86:7b:be:17: 6e:d9:df:51:69:fe:6c:52:f5:2f:42:e9:9f:b1:23: 3b:a3:6e:ae:94:51:4c:e2:ad:9e:9c:0f:fe:9d:d1: 58:10:d4:a6:c1:dc:f2:99:65:ab:8e:e0:e9:41:5d: b0:f1:46:4c:9f:ce:e9:ab:65:f3:fe:02:e6:fc:f0: 34:13:ca:2f:b1:92:74:25:20:41:15:55:6f:50:0e: 98:fd:14:76:a7:38:ef:c9:2d:e7:a0:50:f4:20:33: a9:7b:e7:5e:bc:91:14:11:39:1c:3c:ff:4a:78:47: 9b:13:39:09:03:57:59:12:0d:38:4e:d3:69:9b:ee: 3f:ab:d1:ce:37:d4:f4:20:c1:19:40:9e:96:f3:90: 7f:a4:81:b7:3b:7d:b3:62:c1:c8:12:e1:df:d2:68: 63:86:82:3b:5e:33:05:a9:fc:71:5c:ea:5a:e8:c5: e0:10:89:39:09:16:bc:d7:37:3b:42:66:f1:b5:f7: c3:30:1a:08:3a:42:55:48:71:0a:ff:50:5e:ec:2e: 94:ce:0f:c5:a8:9e:4a:33:7b:79:3f:2e:0e:2d:50: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D6:75:AA:3E:47:15:9E:2A:E5:AB:BE:C3:85:58:95:11:0A:01:73 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:14:85:bd:1a:6d:80:24:c1:f1:40:79:88:35:87:26:7f:65: 9d:d5:3b:81:ea:32:55:64:e1:fc:16:6e:74:26:34:5e:33:2d: d6:dd:90:d9:1c:fa:bf:00:7b:52:16:c9:65:b5:5c:bc:f4:e7: 1a:4c:6f:b0:d0:d5:a0:37:cf:14:6e:31:f9:f8:1f:e1:49:d5: e0:91:da:f8:e0:33:f8:00:a4:da:8f:9d:c7:c8:7c:3f:88:b4: ce:d2:57:35:71:3e:c8:2b:27:3e:92:55:be:ab:a2:89:d9:4b: 88:d7:8e:a2:e5:34:d0:d3:34:a2:f3:d3:ea:42:46:14:7c:38: 0d:d0:03:26:67:d1:b1:01:ed:01:b9:14:a7:43:37:e0:bb:48: 46:ae:6b:71:02:a2:35:01:f0:b3:8f:dd:c2:05:23:48:b5:5d: 3f:3f:1a:da:01:23:31:b8:8d:fd:9f:49:39:26:7e:02:0a:58: 88:f9:8b:1e:24:51:38:43:56:d5:74:d0:98:de:0f:34:68:a8: 2f:a5:0f:66:25:69:62:b6:f5:4b:bf:66:3f:fe:a6:e6:70:b2: 1a:97:3d:e5:93:83:f9:52:0a:a5:6c:a1:af:ce:e6:c3:9d:da: 8f:bd:bd:90:72:bb:72:4a:4a:85:4d:93:9c:71:59:b7:61:a8: b0:49:94:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYwOTIyMjMzMzEwWhcNMjYwOTI5MjMzMzEwWjAYMRYwFAYD VQQDEw02YWIzMTAzNi01OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYvDpfdn64na2jKlWeUHELUTncUGc1PAzQkXV1FbSBVB2QAE8q5234Z7vhdu 2d9Raf5sUvUvQumfsSM7o26ulFFM4q2enA/+ndFYENSmwdzymWWrjuDpQV2w8UZM n87pq2Xz/gLm/PA0E8ovsZJ0JSBBFVVvUA6Y/RR2pzjvyS3noFD0IDOpe+devJEU ETkcPP9KeEebEzkJA1dZEg04TtNpm+4/q9HON9T0IMEZQJ6W85B/pIG3O32zYsHI EuHf0mhjhoI7XjMFqfxxXOpa6MXgEIk5CRa81zc7QmbxtffDMBoIOkJVSHEK/1Be 7C6Uzg/FqJ5KM3t5Py4OLVCnlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHWdao+ RxWeKuWrvsOFWJURCgFzMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJxSFvRptgCTB8UB5iDWHJn9lndU7geoyVWTh/BZudCY0XjMt1t2Q2Rz6vwB7 UhbJZbVcvPTnGkxvsNDVoDfPFG4x+fgf4UnV4JHa+OAz+ACk2o+dx8h8P4i0ztJX NXE+yCsnPpJVvquiidlLiNeOouU00NM0ovPT6kJGFHw4DdADJmfRsQHtAbkUp0M3 4LtIRq5rcQKiNQHws4/dwgUjSLVdPz8a2gEjMbiN/Z9JOSZ+AgpYiPmLHiRROENW 1XTQmN4PNGioL6UPZiVpYrb1S79mP/6m5nCyGpc95ZOD+VIKpWyhr87mw53aj729 kHK7ckpKhU2TnHFZt2GosEmUqA== -----END CERTIFICATE-----Generated at Wed Sep 23 08:24:26 2026 by rpki-client