$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: kXwcXAYFm5xSUNIvM+QnYvfF5hUmX6ml6KLe5eDWmlM= Subject key identifier: 22:CA:44:CF:0D:5C:9D:51:F7:2D:DF:B7:80:77:81:05:64:74:E6:3A Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 01F9 Signing time: Mon 11 May 2026 03:17:28 +0000 Manifest this update: Mon 11 May 2026 03:17:28 +0000 Manifest next update: Mon 18 May 2026 03:17:28 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: b9MHNz4bNlAXAp/iQKoyGFJ1l5RSjZaZ7tjh76Yut4w=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: V94XCH+V6AH+/jsR1uuPC4R2sBLnX4SmOxfv0adXwxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: May 11 03:17:28 2026 GMT Not After : May 18 03:17:28 2026 GMT Subject: CN=6a014a48-ee6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:1b:0b:2e:3d:f2:3c:20:47:24:6a:fb:08: fc:f3:6a:7a:13:d3:8b:15:3a:d6:e4:71:74:24:f9: 83:69:b3:64:cc:c3:54:be:9a:04:d6:50:e5:12:4f: ba:12:ca:02:e6:77:51:04:95:ab:21:7e:c1:1d:b1: f8:f9:bb:60:28:15:99:ba:06:3e:83:3e:e2:0e:ef: 0a:02:0f:a2:3e:39:b9:3c:c1:a4:4e:25:41:2a:47: b3:be:ed:c4:e0:bc:a0:5a:ad:1f:0c:56:12:0a:bb: 4e:b6:a0:7b:28:4e:52:83:63:af:1b:cc:02:a0:62: b2:d4:fb:e1:66:4d:b0:77:26:63:74:43:fa:47:0b: f0:5e:90:76:88:e4:df:e1:d6:7d:f1:7b:75:c4:10: 52:ff:ef:90:7b:fa:f0:dc:60:60:21:74:a5:d1:3f: 7e:ec:02:47:b2:39:6b:8b:80:91:eb:4a:b1:80:88: d9:86:60:da:b5:01:54:d5:95:97:63:6b:66:f0:e3: 5e:9f:b2:82:ca:53:cf:bd:1d:48:c1:ac:64:d3:29: be:3a:8b:df:95:88:60:00:a9:fc:65:20:72:67:48: f1:f2:0a:9f:41:5f:d9:da:dc:dc:50:c7:7c:66:ed: f0:58:5f:28:ef:36:f6:f5:f6:a1:cb:ce:97:d1:ee: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:44:CF:0D:5C:9D:51:F7:2D:DF:B7:80:77:81:05:64:74:E6:3A X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:ab:cb:9c:ff:29:ec:0d:1b:50:8b:15:52:aa:51:1a:e1: 26:05:51:89:33:8f:74:1c:33:58:c1:d0:51:26:02:dc:79:b1: 5c:f0:14:2b:6e:de:01:ec:20:c3:c4:9c:09:ef:50:02:3e:5f: e4:08:35:4d:91:3b:4b:bd:b0:3b:e7:9f:d1:29:b9:b3:d7:24: 0b:25:56:54:79:7f:69:f3:c2:6e:04:9e:01:33:e9:28:7c:3e: af:38:76:bf:94:db:a9:df:24:ae:c6:f0:80:e8:f3:46:17:be: ea:c4:9d:90:56:99:87:24:56:ea:98:04:2c:07:e0:e7:dd:c6: 64:9d:b8:0d:27:54:06:06:92:fb:27:b8:27:c5:28:d2:ac:31: f8:d7:1b:e7:1f:d8:bd:54:6c:e8:f6:ac:39:86:bd:7e:2b:33: 42:04:41:73:3a:e7:fe:c5:46:39:26:ff:3e:c0:e6:29:3b:82: 65:55:ec:cd:77:36:2a:aa:ec:a8:c5:76:80:cc:db:42:b1:46: e8:06:30:58:e3:05:d7:06:63:17:ed:83:a9:8a:aa:45:7d:45: e6:a1:a2:f3:00:75:80:78:cf:f9:21:67:61:1a:f3:8d:69:80: 8b:7b:0e:a1:a6:bc:2c:0e:6b:23:a5:b8:75:f9:e8:3b:e8:d0: 26:d8:3e:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjYwNTExMDMxNzI4WhcNMjYwNTE4MDMxNzI4WjAYMRYwFAYD VQQDEw02YTAxNGE0OC1lZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqAbCy498jwgRyRq+wj882p6E9OLFTrW5HF0JPmDabNkzMNUvpoE1lDlEk+6 EsoC5ndRBJWrIX7BHbH4+btgKBWZugY+gz7iDu8KAg+iPjm5PMGkTiVBKkezvu3E 4LygWq0fDFYSCrtOtqB7KE5Sg2OvG8wCoGKy1PvhZk2wdyZjdEP6RwvwXpB2iOTf 4dZ98Xt1xBBS/++Qe/rw3GBgIXSl0T9+7AJHsjlri4CR60qxgIjZhmDatQFU1ZWX Y2tm8ONen7KCylPPvR1Iwaxk0ym+OovflYhgAKn8ZSByZ0jx8gqfQV/Z2tzcUMd8 Zu3wWF8o7zb29fahy86X0e465QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLKRM8N XJ1R9y3ft4B3gQVkdOY6MB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlCry5z/KewNG1CLFVKqURrhJgVRiTOPdBwzWMHQUSYC3HmxXPAUK27eAewg w8ScCe9QAj5f5Ag1TZE7S72wO+ef0Sm5s9ckCyVWVHl/afPCbgSeATPpKHw+rzh2 v5Tbqd8krsbwgOjzRhe+6sSdkFaZhyRW6pgELAfg593GZJ24DSdUBgaS+ye4J8Uo 0qwx+Ncb5x/YvVRs6PasOYa9fiszQgRBczrn/sVGOSb/PsDmKTuCZVXszXc2Kqrs qMV2gMzbQrFG6AYwWOMF1wZjF+2DqYqqRX1F5qGi8wB1gHjP+SFnYRrzjWmAi3sO oaa8LA5rI6W4dfnoO+jQJtg+5A== -----END CERTIFICATE-----Generated at Wed May 13 00:12:15 2026 by rpki-client