$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json) Hash identifier: 95HyJrWiNTzg52zD4HJS7jIHkwB342pK/1EU38S1T20= Subject key identifier: 3A:26:2E:23:24:FD:A3:89:81:83:E5:96:AC:F1:EE:A2:7A:51:98:73 Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft Manifest number: 84 Signing time: Fri 17 Apr 2026 07:25:31 +0000 Manifest this update: Fri 17 Apr 2026 07:25:30 +0000 Manifest next update: Fri 24 Apr 2026 07:25:30 +0000 Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: Z/ScxCAeIGDESwAE/zlTUuFFtvaiXW1gPc7Rp4gwClI=) 2: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=) 3: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Apr 17 07:25:30 2026 GMT Not After : Apr 24 07:25:30 2026 GMT Subject: CN=69e1e06b-4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:b3:47:f9:5f:75:c9:9a:cb:84:f0:3f:1c: 0d:a9:49:63:a0:e2:20:27:2f:fa:04:28:a8:2d:69: 5f:a4:53:cf:4d:32:19:c6:e3:f9:3b:9c:ef:03:fb: 04:b2:0c:0d:cf:0f:23:7f:1f:93:45:58:16:5c:ad: f2:ff:6a:dd:30:6b:12:28:94:b7:00:7b:a2:18:0a: 1c:69:7a:d0:0b:e6:cb:d4:6a:c4:ea:e3:d1:36:a6: f2:20:02:78:a2:6c:12:2d:57:79:b4:cb:77:17:98: 45:09:17:e1:dd:7b:ee:64:93:76:44:1a:4a:93:81: e8:f7:e4:e0:f6:05:1b:37:18:fb:f2:b8:e6:63:27: 92:4b:b2:5f:8f:6f:f1:0e:1f:21:ef:a9:e0:74:e7: 15:0a:06:ed:39:41:eb:c2:1d:9d:3a:04:43:d1:f3: d4:14:ba:85:36:09:03:69:15:18:7c:00:7b:2e:85: b5:f5:11:bf:11:13:60:be:6c:11:6e:dc:ce:cc:a0: ab:30:b8:81:70:54:f8:ec:5e:02:1b:89:10:a9:d6: e9:4c:88:d9:d7:9a:da:50:2d:c2:b6:57:ae:00:51: f9:44:d9:e9:68:1e:bb:2a:df:3d:d1:7f:e4:5f:c2: c2:48:c5:6d:0e:5d:8f:99:e3:8d:1d:03:99:29:94: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:26:2E:23:24:FD:A3:89:81:83:E5:96:AC:F1:EE:A2:7A:51:98:73 X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:73:eb:c7:26:e1:92:33:b9:62:19:17:73:e3:3c:97:5a:27: bf:3e:6c:89:77:97:2e:a0:9e:9b:68:86:f7:0d:71:77:54:a2: 29:23:1e:dc:74:d2:ed:31:86:44:ee:23:17:e7:c6:c1:07:72: 8f:3b:30:17:61:64:d0:f6:b1:7f:73:04:38:ab:37:6e:a0:7c: 60:08:f3:3a:76:65:bc:c4:08:6a:92:a9:4e:bb:04:3f:f5:e2: 76:82:12:cb:36:56:a0:b4:72:53:b3:48:1a:f5:6f:c0:eb:ee: 59:0f:af:17:c6:62:77:64:54:ac:43:5f:82:58:43:40:84:b6: de:1c:f8:c1:42:d8:79:08:fe:36:1a:6e:a3:7d:99:92:b7:c4: 03:0b:72:74:5c:41:e7:7e:7d:97:c2:17:c0:cc:86:89:8e:06: a5:aa:54:63:6c:6b:88:d0:b2:c0:bc:f1:ae:6a:7f:58:1e:d4: f4:f1:90:80:13:55:3f:c8:ed:f3:34:13:9b:0b:51:f4:8e:c2: 85:da:b4:5c:8c:23:35:64:4c:8f:6a:3b:a9:21:41:ee:d3:7e: ff:bf:b7:b7:c5:74:50:6f:63:ec:9a:f5:45:94:fd:66:71:5c: 68:26:cc:26:f5:80:e2:8c:70:c3:87:82:e4:96:17:87:5e:5a: 7b:b6:75:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdENTgxMTAvBgNVBAUTKDE4M0ZBOTBEQzM1NTZDMUQxNjU2OEVCRUJCMThFMkZD NUE3ODFEOTMwHhcNMjYwNDE3MDcyNTMwWhcNMjYwNDI0MDcyNTMwWjAYMRYwFAYD VQQDEw02OWUxZTA2Yi00MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmqzR/lfdcmay4TwPxwNqUljoOIgJy/6BCioLWlfpFPPTTIZxuP5O5zvA/sE sgwNzw8jfx+TRVgWXK3y/2rdMGsSKJS3AHuiGAocaXrQC+bL1GrE6uPRNqbyIAJ4 omwSLVd5tMt3F5hFCRfh3XvuZJN2RBpKk4Ho9+Tg9gUbNxj78rjmYyeSS7Jfj2/x Dh8h76ngdOcVCgbtOUHrwh2dOgRD0fPUFLqFNgkDaRUYfAB7LoW19RG/ERNgvmwR btzOzKCrMLiBcFT47F4CG4kQqdbpTIjZ15raUC3CtleuAFH5RNnpaB67Kt890X/k X8LCSMVtDl2PmeONHQOZKZS1tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDomLiMk /aOJgYPllqzx7qJ6UZhzMB8GA1UdIwQYMBaAFBg/qQ3DVWwdFlaOvrsY4vxaeB2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0Q1OC81OUQwNkExMjdG MDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9HRC1wRGNOVmJCMFdWbzYtdXhqaV9GcDRI Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0Q1OC81OUQwNkExMjdGMDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9HRC1wRGNOVmJC MFdWbzYtdXhqaV9GcDRIWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApnPrxybhkjO5YhkXc+M8l1onvz5siXeXLqCem2iG9w1xd1SiKSMe3HTS7TGG RO4jF+fGwQdyjzswF2Fk0Paxf3MEOKs3bqB8YAjzOnZlvMQIapKpTrsEP/XidoIS yzZWoLRyU7NIGvVvwOvuWQ+vF8Zid2RUrENfglhDQIS23hz4wULYeQj+Nhpuo32Z krfEAwtydFxB5359l8IXwMyGiY4GpapUY2xriNCywLzxrmp/WB7U9PGQgBNVP8jt 8zQTmwtR9I7Chdq0XIwjNWRMj2o7qSFB7tN+/7+3t8V0UG9j7Jr1RZT9ZnFcaCbM JvWA4oxww4eC5JYXh15ae7Z1wA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:12 2026 by rpki-client