$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: F0nCyW2jXBRik4aC6j73vTycDT/AbfpoGP+F0G8sgBk= Subject key identifier: D0:A2:BF:70:BC:B5:A1:05:92:AB:22:79:B6:F7:95:84:42:36:F2:DC Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 023D Signing time: Wed 23 Sep 2026 02:27:14 +0000 Manifest this update: Wed 23 Sep 2026 02:27:13 +0000 Manifest next update: Wed 30 Sep 2026 02:27:13 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: jjAbn3rvDljdEjeBZZsAAcgNsIxp8aNSSSFsfMgZmJE=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: V94XCH+V6AH+/jsR1uuPC4R2sBLnX4SmOxfv0adXwxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Sep 23 02:27:13 2026 GMT Not After : Sep 30 02:27:13 2026 GMT Subject: CN=6ab33902-ef9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:cb:3b:85:2c:4a:3d:6f:72:97:e9:f8:aa: 9a:a2:05:d0:3b:d7:0a:86:02:c1:85:b6:21:d4:c7: 1b:bf:e9:a1:12:29:72:e6:21:8b:4b:ce:d8:fc:14: 3a:10:2b:d3:6e:cc:c4:cc:28:a5:a6:fb:7a:5b:bf: d5:07:58:bb:a7:fd:ff:a6:b8:aa:b5:3e:81:1a:8a: 7e:e1:a8:c3:4c:61:d3:09:7b:7d:86:29:ac:82:a9: b6:96:d4:4a:e0:2d:9b:d2:ef:a2:b4:1d:a0:7e:42: 95:17:48:23:65:4c:24:cd:09:ff:88:e8:37:25:5d: 71:8e:04:9f:43:df:e0:6c:cd:48:ea:0f:af:e3:b6: 76:44:f3:dd:93:66:31:51:96:e2:69:f4:27:f5:29: 3c:1d:70:ee:f9:ad:1a:99:92:2e:68:19:62:52:c1: c8:f6:3f:ed:fb:eb:b9:7c:8c:e5:cf:7f:a3:37:39: 9d:8b:11:e8:3e:61:0c:40:58:6f:09:4a:28:9c:ee: 43:2a:d0:0a:59:74:7b:91:d6:03:e3:44:02:73:29: d6:b2:88:5e:ed:05:9d:13:bf:5d:a7:fd:e3:da:6b: 58:1c:5c:ca:61:c8:f3:87:07:0f:ed:77:61:bb:d3: ef:33:35:0e:27:c1:e6:e9:a1:3b:27:b1:de:84:e9: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:BF:70:BC:B5:A1:05:92:AB:22:79:B6:F7:95:84:42:36:F2:DC X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:12:74:dd:4d:b1:8e:3e:13:da:43:7c:09:b4:89:20:dc:35: a0:55:bb:62:2d:91:1c:23:a1:a1:1b:6b:23:86:eb:60:62:ab: c4:2d:3a:5a:37:3a:24:b0:2b:c0:8b:7f:c8:0d:03:e4:b4:e5: 14:d1:59:c6:c8:cd:8c:06:31:d0:74:e8:3e:9c:de:96:df:47: 90:4b:39:96:a8:b3:d0:40:63:26:61:28:03:6e:ed:3b:60:56: 76:26:e0:f1:ff:7b:bb:bf:5d:4b:af:de:26:9a:c6:c4:eb:e8: 4b:bb:52:59:5c:6c:6b:2a:ee:22:2d:0e:22:cd:4e:53:7c:61: 5d:0a:ac:b2:8b:b9:7d:c2:e1:f4:db:8f:fb:7b:18:ed:f8:76: bc:33:cb:b2:51:5e:41:03:26:18:ae:2d:30:93:2d:a8:5b:e4: 05:e5:a9:62:b2:26:2f:50:2f:2e:d2:37:c7:45:6b:c3:e6:1d: 7d:d3:5c:cc:29:9e:d7:7c:30:40:5c:f0:12:8b:0a:1d:3b:6c: a6:37:76:a9:68:98:52:2f:34:76:fb:cb:1b:03:13:0a:cd:a4: 01:70:7f:14:09:57:84:49:4b:bc:f8:fc:3d:88:54:bb:cf:35: 8e:e1:3b:b3:6b:0b:38:38:c1:23:23:90:68:18:de:e1:2b:fc: aa:37:23:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjYwOTIzMDIyNzEzWhcNMjYwOTMwMDIyNzEzWjAYMRYwFAYD VQQDEw02YWIzMzkwMi1lZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWbLO4UsSj1vcpfp+KqaogXQO9cKhgLBhbYh1Mcbv+mhEily5iGLS87Y/BQ6 ECvTbszEzCilpvt6W7/VB1i7p/3/priqtT6BGop+4ajDTGHTCXt9himsgqm2ltRK 4C2b0u+itB2gfkKVF0gjZUwkzQn/iOg3JV1xjgSfQ9/gbM1I6g+v47Z2RPPdk2Yx UZbiafQn9Sk8HXDu+a0amZIuaBliUsHI9j/t++u5fIzlz3+jNzmdixHoPmEMQFhv CUoonO5DKtAKWXR7kdYD40QCcynWsohe7QWdE79dp/3j2mtYHFzKYcjzhwcP7Xdh u9PvMzUOJ8Hm6aE7J7HehOmkMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCiv3C8 taEFkqsiebb3lYRCNvLcMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohJ03U2xjj4T2kN8CbSJINw1oFW7Yi2RHCOhoRtrI4brYGKrxC06Wjc6JLAr wIt/yA0D5LTlFNFZxsjNjAYx0HToPpzelt9HkEs5lqiz0EBjJmEoA27tO2BWdibg 8f97u79dS6/eJprGxOvoS7tSWVxsayruIi0OIs1OU3xhXQqssou5fcLh9NuP+3sY 7fh2vDPLslFeQQMmGK4tMJMtqFvkBeWpYrImL1AvLtI3x0Vrw+YdfdNczCme13ww QFzwEosKHTtspjd2qWiYUi80dvvLGwMTCs2kAXB/FAlXhElLvPj8PYhUu881juE7 s2sLODjBIyOQaBje4Sv8qjcjdA== -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:44 2026 by rpki-client