$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json) Hash identifier: BtI8WWjj25pZ5I6fxTu7qpxYNvb5rWUv0RTmwWwczac= Subject key identifier: 36:B4:7E:98:8B:1A:C9:48:A4:4C:04:CD:FC:9A:CD:6C:6E:69:A8:2E Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft Manifest number: A2 Signing time: Mon 21 Sep 2026 07:20:11 +0000 Manifest this update: Mon 21 Sep 2026 07:20:11 +0000 Manifest next update: Mon 28 Sep 2026 07:20:11 +0000 Files and hashes: 1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: bZo9R0Z/LPDSLw1SJT2aXuRnQIPsAaq7is6hs4g5rk4=) 2: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=) 3: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=) 4: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Sep 21 07:20:11 2026 GMT Not After : Sep 28 07:20:11 2026 GMT Subject: CN=6ab0daab-fdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:09:ed:2d:64:bd:64:24:fa:39:49:b4:38: 3a:2b:b5:d2:0a:ed:fe:e0:2d:45:5c:54:81:be:4e: 56:3d:2c:b4:f6:44:02:50:1e:0a:78:7b:a5:c7:e5: 68:42:6b:d9:4f:18:ba:c3:71:97:9c:f0:c1:d6:ed: 70:2b:dc:fc:e7:57:74:c2:85:7b:ba:17:ea:78:3a: 42:4a:50:9a:96:0b:3f:de:77:39:ba:66:aa:76:5f: bb:5e:0c:fe:8c:05:86:fd:33:7f:d9:02:6d:c0:a3: e4:f8:12:c2:4c:5e:ba:e3:cc:50:65:67:bf:d7:ab: f7:36:4e:70:79:a1:2c:8d:db:4f:8c:75:92:31:1c: 3e:01:c4:a8:b9:9b:1c:2c:99:5e:33:fe:78:1f:28: 2a:c1:8d:07:ad:22:c2:a1:53:81:f9:fe:7a:19:88: 77:e7:8f:1c:20:9c:7a:6e:2f:e7:0e:93:32:ef:7e: fb:93:fa:ad:3f:cb:4c:f4:17:bd:21:df:98:43:80: 48:7b:fa:81:4a:71:ad:cb:ee:5a:7a:94:03:f8:71: bf:82:57:60:f3:5c:1f:f1:7a:cb:21:7b:0d:e7:2b: 53:67:bc:29:5c:1d:be:69:93:c6:f2:f3:5d:a6:e1: b5:63:05:b2:63:39:3c:8c:39:3c:1d:58:03:a2:5a: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B4:7E:98:8B:1A:C9:48:A4:4C:04:CD:FC:9A:CD:6C:6E:69:A8:2E X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:49:95:be:c2:43:60:c8:51:49:8e:f7:fa:63:44:50:28:55: 22:9b:fe:29:a5:54:7b:77:75:6e:6d:38:3c:2a:ae:7d:da:34: 98:6d:5a:48:59:d3:83:2e:d7:5b:4c:82:cd:b5:45:d7:45:a1: a3:b3:6a:b6:e5:d8:07:fe:ed:4d:6c:cd:29:ef:d4:8a:5d:92: cd:8c:a3:30:cb:76:ac:5a:d8:68:4c:7e:3f:cc:fe:e4:1b:d8: 67:cd:00:6b:9a:f2:0f:3d:1e:4c:d8:d1:44:ed:02:80:af:14: 82:b0:cc:20:7f:ea:15:6c:c5:73:3b:84:e0:15:2e:7c:9f:fb: 8a:46:b8:6b:ed:95:fd:ec:d3:a6:ed:86:41:cc:ce:fa:83:ea: e9:f5:02:df:b9:c8:40:26:b9:6d:8b:7d:20:f3:b8:b5:cc:42: ec:cb:64:c7:dd:41:85:98:f2:46:e5:4a:4e:52:b4:a2:a0:8c: 86:cd:00:93:08:ac:d8:0a:68:c4:1e:4f:b5:f7:27:fd:fe:a7: 69:69:e3:f8:fe:c1:57:39:8b:d0:5e:92:48:d9:92:44:af:be: 4d:9b:2d:98:c1:e2:cc:09:b1:47:5b:53:53:ac:59:69:13:d3: 93:f5:32:86:2d:55:1d:dc:77:d3:9c:78:51:25:e1:a3:ee:f0: e8:b1:fe:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDFBNUIwMDU5N0M4RDdCNjFGQkJFRkVDNUI5NDRGRTZG OUM2M0UyMjAwHhcNMjYwOTIxMDcyMDExWhcNMjYwOTI4MDcyMDExWjAYMRYwFAYD VQQDEw02YWIwZGFhYi1mZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PEJ7S1kvWQk+jlJtDg6K7XSCu3+4C1FXFSBvk5WPSy09kQCUB4KeHulx+Vo QmvZTxi6w3GXnPDB1u1wK9z851d0woV7uhfqeDpCSlCalgs/3nc5umaqdl+7Xgz+ jAWG/TN/2QJtwKPk+BLCTF6648xQZWe/16v3Nk5weaEsjdtPjHWSMRw+AcSouZsc LJleM/54HygqwY0HrSLCoVOB+f56GYh3548cIJx6bi/nDpMy7377k/qtP8tM9Be9 Id+YQ4BIe/qBSnGty+5aepQD+HG/gldg81wf8XrLIXsN5ytTZ7wpXB2+aZPG8vNd puG1YwWyYzk8jDk8HVgDolrAhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDa0fpiL GslIpEwEzfyazWxuaaguMB8GA1UdIwQYMBaAFBpbAFl8jXth+77+xblE/m+cY+Ig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9BRTg4MzY2OEM4 RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9HbHNBV1h5TmUySDd2djdGdVVULWI1eGo0 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9BRTg4MzY2OEM4RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9HbHNBV1h5TmUy SDd2djdGdVVULWI1eGo0aUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0mVvsJDYMhRSY73+mNEUChVIpv+KaVUe3d1bm04PCqufdo0mG1aSFnTgy7X W0yCzbVF10Who7NqtuXYB/7tTWzNKe/Uil2SzYyjMMt2rFrYaEx+P8z+5BvYZ80A a5ryDz0eTNjRRO0CgK8UgrDMIH/qFWzFczuE4BUufJ/7ika4a+2V/ezTpu2GQczO +oPq6fUC37nIQCa5bYt9IPO4tcxC7Mtkx91BhZjyRuVKTlK0oqCMhs0Akwis2Apo xB5Ptfcn/f6naWnj+P7BVzmL0F6SSNmSRK++TZstmMHizAmxR1tTU6xZaRPTk/Uy hi1VHdx305x4USXho+7w6LH+qQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:59:55 2026 by rpki-client