$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: WRk7+wsqlJeFiPJUAefnr2NQje5lLt4Yrs97JJIXBa4= Subject key identifier: E7:20:D0:9C:C8:37:74:D1:5A:CE:09:C6:31:BB:73:1D:8B:BF:D5:A5 Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 0144 Signing time: Sun 01 Mar 2026 06:17:06 +0000 Manifest this update: Sun 01 Mar 2026 06:17:06 +0000 Manifest next update: Sun 08 Mar 2026 06:17:06 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: ExkfJ+mcjmUahFyFlvxXcs11g5aCq1jh2nlsGCVTs7M=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: MJ7KYjeSeSeZOF9abPnnkspDrozm4Sn7jcyJdMYBE6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Mar 1 06:17:06 2026 GMT Not After : Mar 8 06:17:06 2026 GMT Subject: CN=69a3d9e2-cdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:6e:9a:a4:7f:13:2f:c2:0c:74:af:b2:ef: 56:bb:96:74:ba:65:2c:98:4e:10:57:ec:ad:b5:67: 0e:3a:c7:76:91:05:57:7f:f2:ca:e9:bb:1f:bd:fd: 1b:37:83:68:38:41:27:25:ab:84:a1:42:5d:06:64: 04:03:9c:46:7a:e6:7a:b2:29:20:be:11:fe:18:20: 69:11:68:90:5c:89:30:18:14:ae:70:34:fa:c1:f8: a6:f8:88:5d:1b:f6:1c:f6:f4:c2:7a:c4:86:35:9d: 93:c1:b3:ce:ca:43:26:c5:16:20:e2:56:78:96:6e: 3b:80:13:7e:dd:53:73:be:79:5f:25:71:7b:55:0a: 17:3f:a6:60:1f:2d:07:7c:7b:cf:ce:bc:8b:2b:b5: ae:6b:10:19:ba:1a:24:66:b4:16:48:7d:7a:22:4b: 60:08:85:c6:aa:89:a2:1e:f4:d4:1d:2c:e5:a3:de: 36:3e:72:bc:21:e5:17:84:1b:fd:48:7d:a3:79:28: f8:f6:25:f5:5a:22:c0:59:df:6a:ee:ec:cc:95:bc: 0f:8f:b2:29:86:0f:8f:e1:92:a9:ed:ed:63:4a:77: 7f:02:5a:83:59:c0:39:36:e8:19:33:b8:6b:d9:94: ec:3b:66:5c:9d:ba:af:80:d0:57:f1:57:f5:66:45: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:D0:9C:C8:37:74:D1:5A:CE:09:C6:31:BB:73:1D:8B:BF:D5:A5 X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:99:6a:33:1a:59:05:19:5d:f5:42:35:d5:ab:db:6b:d0:a9: 73:d0:5c:2b:52:02:87:4c:8d:01:b3:e2:3e:72:41:28:83:09: 58:f5:b3:36:f2:c5:bf:39:67:2b:f7:ae:11:95:cb:1f:c6:30: 76:dd:44:ef:e2:b3:2d:cb:eb:b6:71:68:10:ad:9b:f8:c7:ae: 0f:18:71:85:31:53:17:6b:a9:bc:40:9f:2a:6c:50:eb:10:5b: 6f:05:67:94:05:d6:66:d0:73:46:fc:c9:49:cf:e3:c9:d2:44: 58:e8:7c:f6:03:64:e5:96:1c:52:36:d7:82:b9:21:43:94:00: f7:97:b8:24:9f:eb:e7:e9:bc:a8:d9:31:60:85:09:99:15:55: c0:12:61:61:81:df:5d:51:7c:1b:2a:d3:de:f7:36:30:3e:cd: a2:5f:c5:71:06:c7:a8:30:0c:ec:4a:dd:24:a0:7d:7a:76:9b: 1c:13:b9:28:26:df:14:49:48:94:73:3c:eb:f2:d1:41:ea:e2: 18:d6:8c:44:38:14:5f:78:e3:2b:9a:c2:ab:89:1a:0b:3e:70: 50:24:0d:18:40:77:9a:37:24:e6:86:0e:40:e0:a6:e6:03:1a: ea:c7:46:a6:22:3b:30:96:92:cc:ec:03:ff:62:27:ce:3e:b6: d2:16:2d:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjYwMzAxMDYxNzA2WhcNMjYwMzA4MDYxNzA2WjAYMRYwFAYD VQQDEw02OWEzZDllMi1jZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc9umqR/Ey/CDHSvsu9Wu5Z0umUsmE4QV+yttWcOOsd2kQVXf/LK6bsfvf0b N4NoOEEnJauEoUJdBmQEA5xGeuZ6sikgvhH+GCBpEWiQXIkwGBSucDT6wfim+Ihd G/Yc9vTCesSGNZ2TwbPOykMmxRYg4lZ4lm47gBN+3VNzvnlfJXF7VQoXP6ZgHy0H fHvPzryLK7WuaxAZuhokZrQWSH16IktgCIXGqomiHvTUHSzlo942PnK8IeUXhBv9 SH2jeSj49iX1WiLAWd9q7uzMlbwPj7Iphg+P4ZKp7e1jSnd/AlqDWcA5NugZM7hr 2ZTsO2ZcnbqvgNBX8Vf1ZkXm+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcg0JzI N3TRWs4JxjG7cx2Lv9WlMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfplqMxpZBRld9UI11avba9Cpc9BcK1ICh0yNAbPiPnJBKIMJWPWzNvLFvzln K/euEZXLH8Ywdt1E7+KzLcvrtnFoEK2b+MeuDxhxhTFTF2upvECfKmxQ6xBbbwVn lAXWZtBzRvzJSc/jydJEWOh89gNk5ZYcUjbXgrkhQ5QA95e4JJ/r5+m8qNkxYIUJ mRVVwBJhYYHfXVF8GyrT3vc2MD7Nol/FcQbHqDAM7ErdJKB9enabHBO5KCbfFElI lHM86/LRQeriGNaMRDgUX3jjK5rCq4kaCz5wUCQNGEB3mjck5oYOQOCm5gMa6sdG piI7MJaSzOwD/2Inzj620hYtIQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:10:37 2026 by rpki-client