$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: dKc/MI0nLsLcipPV7MIzeof0/zqOpPBcFCck+ULJCI0= Subject key identifier: B0:F4:B3:8F:33:37:0F:76:7A:71:49:07:7A:2B:84:F9:4A:F6:05:99 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 021D Signing time: Thu 23 Jul 2026 04:10:13 +0000 Manifest this update: Thu 23 Jul 2026 04:10:13 +0000 Manifest next update: Thu 30 Jul 2026 04:10:13 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: lwTan9/3rSV12lHxty3pek7kaS8LdekLeMNKkIYYEDU=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: V94XCH+V6AH+/jsR1uuPC4R2sBLnX4SmOxfv0adXwxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Jul 23 04:10:13 2026 GMT Not After : Jul 30 04:10:13 2026 GMT Subject: CN=6a619425-d7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:72:c6:11:ba:57:f8:3f:2c:bf:0f:5d:a1: 4b:7e:77:48:b4:a6:3d:bd:13:be:16:9b:a6:4a:c6: 8e:2d:8c:28:9e:e9:39:a8:1d:be:8b:db:d2:51:93: 50:92:f2:a8:8e:65:65:5e:a6:97:cf:2b:43:ff:df: 42:2b:9c:86:99:a9:8c:5e:0c:c2:7c:1e:9f:fc:95: 9a:8c:22:fb:d1:d9:12:8f:6b:3e:1a:40:24:cb:5a: 9f:3a:00:26:75:a8:80:75:5c:de:e2:b1:8b:df:53: 8c:ae:6e:9c:ab:19:a6:3e:16:aa:d8:69:e9:bd:12: f3:28:54:1e:0e:76:33:51:1d:6f:85:e4:b5:6e:9c: fc:12:70:b8:57:c4:c2:be:90:d3:93:8d:03:d7:cf: d7:d3:de:d7:0b:b9:f8:65:78:94:72:8f:88:b2:75: a9:99:83:8e:87:d5:e8:59:7d:08:75:16:b9:92:54: 50:aa:df:48:8b:62:d7:e5:d8:6d:07:5a:d6:38:a6: 21:fd:84:21:ca:65:a8:21:88:ca:70:e4:49:ee:e2: cb:78:e4:f1:a3:97:0c:64:0e:08:66:fd:fc:2a:27: 0f:4e:bb:d2:44:85:b2:f1:21:71:58:0f:9c:20:7e: 19:c0:3b:ac:e5:38:5c:ab:c4:60:87:94:6f:71:b0: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:B3:8F:33:37:0F:76:7A:71:49:07:7A:2B:84:F9:4A:F6:05:99 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ae:c7:f7:d4:81:ee:f3:dd:bb:e0:33:59:08:1c:aa:43:eb: 8c:45:14:e6:46:47:97:b1:d8:f0:40:e5:0d:bf:90:73:5b:b7: e1:65:65:16:5e:2f:fd:07:76:5b:2e:c8:26:55:25:bb:36:76: 07:49:98:b6:ad:da:ec:6e:2b:56:08:73:22:29:12:f9:ab:42: b7:8d:18:e4:ce:3d:37:3f:12:51:64:bb:37:8f:e6:84:19:da: bc:cf:44:a0:c8:d1:d1:c0:d6:c8:a6:a1:92:c1:5f:3c:47:e3: 3c:6e:01:79:a4:db:4d:86:97:83:89:d2:57:d2:32:21:7c:1e: 6e:70:cf:3d:61:55:f7:b5:6d:70:3b:66:f7:ab:81:96:72:d4: 48:29:c9:3f:6f:a7:96:2c:c5:b8:e8:b7:d2:b0:6a:25:15:d0: 42:86:a4:b3:ce:88:fb:3b:3e:82:8f:a7:56:28:d9:e2:90:ed: 7a:23:00:5a:da:3e:28:92:bc:24:bd:5f:66:19:60:0d:09:92: ee:2d:7e:3f:4c:b2:51:c3:d1:05:5c:be:95:3e:b0:bd:92:08: fd:a3:80:e8:7c:d3:51:52:b4:50:5e:d8:7a:ab:9a:a8:d1:5e: 85:cc:c7:3b:4c:cd:41:73:f8:b6:f3:9d:d2:f2:d0:12:22:78: 12:57:61:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjYwNzIzMDQxMDEzWhcNMjYwNzMwMDQxMDEzWjAYMRYwFAYD VQQDEw02YTYxOTQyNS1kN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKNyxhG6V/g/LL8PXaFLfndItKY9vRO+FpumSsaOLYwonuk5qB2+i9vSUZNQ kvKojmVlXqaXzytD/99CK5yGmamMXgzCfB6f/JWajCL70dkSj2s+GkAky1qfOgAm daiAdVze4rGL31OMrm6cqxmmPhaq2GnpvRLzKFQeDnYzUR1vheS1bpz8EnC4V8TC vpDTk40D18/X097XC7n4ZXiUco+IsnWpmYOOh9XoWX0IdRa5klRQqt9Ii2LX5dht B1rWOKYh/YQhymWoIYjKcORJ7uLLeOTxo5cMZA4IZv38KicPTrvSRIWy8SFxWA+c IH4ZwDus5Thcq8Rgh5RvcbAu0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD0s48z Nw92enFJB3orhPlK9gWZMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY67H99SB7vPdu+AzWQgcqkPrjEUU5kZHl7HY8EDlDb+Qc1u34WVlFl4v/Qd2 Wy7IJlUluzZ2B0mYtq3a7G4rVghzIikS+atCt40Y5M49Nz8SUWS7N4/mhBnavM9E oMjR0cDWyKahksFfPEfjPG4BeaTbTYaXg4nSV9IyIXwebnDPPWFV97VtcDtm96uB lnLUSCnJP2+nlizFuOi30rBqJRXQQoaks86I+zs+go+nVijZ4pDteiMAWto+KJK8 JL1fZhlgDQmS7i1+P0yyUcPRBVy+lT6wvZII/aOA6HzTUVK0UF7YequaqNFehczH O0zNQXP4tvOd0vLQEiJ4EldhZw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:29 2026 by rpki-client