$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json) Hash identifier: uKWoUReBa3JxRfIqULO4Y4/iJrWjzt6L3XE2eJYT2j4= Subject key identifier: 0C:0A:06:AE:F6:D9:62:AD:49:9A:0C:9B:98:09:10:2A:04:79:B2:A9 Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft Manifest number: 52 Signing time: Wed 15 Apr 2026 07:50:46 +0000 Manifest this update: Wed 15 Apr 2026 07:50:46 +0000 Manifest next update: Wed 22 Apr 2026 07:50:46 +0000 Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: 0mMMcspcfnKwccvGOppbY/c9pXDQY9N4gKJOEe+ScCI=) 2: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=) 3: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=) 4: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Apr 15 07:50:46 2026 GMT Not After : Apr 22 07:50:46 2026 GMT Subject: CN=69df4356-1fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:b9:60:4a:ea:4d:4d:62:41:81:84:a7:40: fd:fe:ad:92:e5:05:c5:44:02:a6:85:f5:57:70:39: 6f:e9:ac:38:95:45:32:8e:45:20:68:43:e8:82:91: e8:26:d2:84:ea:fe:55:2a:2f:ef:1e:fd:bf:69:89: e7:8e:4a:72:a9:5f:81:73:e4:7d:a3:8f:3b:70:f1: 06:96:d7:ee:77:21:3b:00:5f:e1:2a:c8:a8:88:a6: 9d:aa:37:52:88:0c:eb:fa:cb:07:c5:27:32:dd:e9: 86:e9:f6:9e:fe:20:64:0a:40:97:8c:a4:52:17:0f: ac:2c:d6:dc:f3:91:0d:3a:61:4f:c2:54:5f:a5:42: 0b:9c:a1:52:f6:b4:c7:34:45:c7:c5:31:93:53:db: fe:81:5c:d4:ab:a0:a7:86:d6:dd:fa:b8:4b:dd:87: 46:4b:57:da:a0:0a:d0:65:b1:02:1b:e2:4a:5f:9b: 92:e1:80:28:1d:d5:d4:7c:fa:42:eb:81:cc:c5:48: 67:99:5b:86:9a:a1:0b:fa:1f:44:c4:64:e7:21:f5: 54:2a:e5:e0:ca:e6:33:21:d3:61:7c:3f:98:b7:9f: dd:04:67:8b:ab:f1:7b:96:f0:1f:71:85:b0:fa:6a: 14:0e:2e:79:76:13:7a:42:cc:33:83:30:68:28:f1: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0A:06:AE:F6:D9:62:AD:49:9A:0C:9B:98:09:10:2A:04:79:B2:A9 X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:96:0b:25:c5:82:92:96:f4:a8:be:a6:44:10:e1:ca:e3:2e: bb:aa:b1:e0:10:8e:cd:7b:9a:75:eb:31:4d:2b:7a:c3:b8:c0: 8e:ed:6c:83:9a:a7:cc:01:7c:10:7b:2d:c2:77:44:b1:5f:50: 89:5e:23:c2:99:cd:08:06:2f:b2:47:39:19:19:e2:d1:71:13: 02:72:7c:df:00:94:70:39:d6:d7:c4:43:bb:30:00:1b:ee:42: 06:ad:44:c0:af:ea:3f:66:b5:fb:08:7b:31:9e:91:71:32:ca: 64:c2:af:6a:40:79:01:fc:3c:2b:4f:6a:72:11:67:9f:96:29: a8:c5:85:8b:37:b9:0c:6d:e1:a9:d0:f7:7a:fa:96:7c:92:ad: f9:e1:e3:d6:97:4c:70:3f:52:2f:b1:32:06:b8:18:6a:8f:76: 99:26:e2:00:ee:ad:34:8e:09:ac:eb:52:ef:fe:38:42:16:94: f7:23:a0:16:62:4e:40:00:69:b6:27:07:51:9f:6f:90:50:21: 3f:8f:ca:7b:56:ff:dd:73:6f:47:1e:8e:6f:2c:ef:1f:a9:3a: a0:90:2f:48:4b:1d:e8:3d:e9:5b:67:8f:57:04:7e:75:23:c6: 1b:86:77:5e:a0:59:4a:d2:cd:69:ad:91:5a:e0:f3:a4:17:72: aa:d1:bd:6a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5 QzYzRTIyMDAeFw0yNjA0MTUwNzUwNDZaFw0yNjA0MjIwNzUwNDZaMBgxFjAUBgNV BAMTDTY5ZGY0MzU2LTFmYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEs7lgSupNTWJBgYSnQP3+rZLlBcVEAqaF9VdwOW/prDiVRTKORSBoQ+iCkegm 0oTq/lUqL+8e/b9pieeOSnKpX4Fz5H2jjztw8QaW1+53ITsAX+EqyKiIpp2qN1KI DOv6ywfFJzLd6Ybp9p7+IGQKQJeMpFIXD6ws1tzzkQ06YU/CVF+lQgucoVL2tMc0 RcfFMZNT2/6BXNSroKeG1t36uEvdh0ZLV9qgCtBlsQIb4kpfm5LhgCgd1dR8+kLr gczFSGeZW4aaoQv6H0TEZOch9VQq5eDK5jMh02F8P5i3n90EZ4ur8XuW8B9xhbD6 ahQOLnl2E3pCzDODMGgo8awpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDAoGrvbZ Yq1JmgybmAkQKgR5sqkwHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0FFODgzNjY4QzhFQzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJI N3Z2N0Z1VVQtYjV4ajRpQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAflgslxYKSlvSovqZEEOHK4y67qrHgEI7Ne5p16zFNK3rDuMCO7WyDmqfMAXwQ ey3Cd0SxX1CJXiPCmc0IBi+yRzkZGeLRcRMCcnzfAJRwOdbXxEO7MAAb7kIGrUTA r+o/ZrX7CHsxnpFxMspkwq9qQHkB/DwrT2pyEWeflimoxYWLN7kMbeGp0Pd6+pZ8 kq354ePWl0xwP1IvsTIGuBhqj3aZJuIA7q00jgms61Lv/jhCFpT3I6AWYk5AAGm2 JwdRn2+QUCE/j8p7Vv/dc29HHo5vLO8fqTqgkC9ISx3oPelbZ49XBH51I8Ybhnde oFlK0s1prZFa4POkF3Kq0b1q -----END CERTIFICATE-----Generated at Fri Apr 17 06:33:29 2026 by rpki-client