$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft File: GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft (raw, json) Hash identifier: 7K/6TXDdFrt2xVB/lh5FzilHk23R3uOsTG0jOdTntYk= Subject key identifier: 7B:DB:D9:07:F9:C2:AF:F0:E6:C3:9E:3E:25:FA:29:C8:A9:BA:2A:59 Authority key identifier: 18:63:F8:59:89:41:F6:F2:67:E2:C6:C6:6C:73:A3:6E:23:98:AC:B8 Certificate issuer: /CN=A9130B5B/serialNumber=1863F8598941F6F267E2C6C66C73A36E2398ACB8 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GGP4WYlB9vJn4sbGbHOjbiOYrLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft Manifest number: 17 Signing time: Sun 27 Sep 2026 09:36:00 +0000 Manifest this update: Sun 27 Sep 2026 09:36:00 +0000 Manifest next update: Sun 04 Oct 2026 09:36:00 +0000 Files and hashes: 1: GGP4WYlB9vJn4sbGbHOjbiOYrLg.crl (hash: gFZ82l6QjHLb4TW3Gs8TaSMvdKOFJglNq6QaWQVEPCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.crl rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GGP4WYlB9vJn4sbGbHOjbiOYrLg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130B5B, serialNumber=1863F8598941F6F267E2C6C66C73A36E2398ACB8 Validity Not Before: Sep 27 09:36:00 2026 GMT Not After : Oct 4 09:36:00 2026 GMT Subject: CN=6ab8e380-1f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:eb:bc:e1:fc:eb:f4:9a:ba:34:70:fb:28: ec:1d:e6:90:73:28:51:23:db:d3:20:b3:08:93:ff: 95:ce:f5:9d:0b:d3:ec:6b:05:c8:01:36:93:92:91: 81:4a:c2:6e:33:f5:25:92:d4:e3:2c:62:9d:d6:61: 70:c0:dc:78:bf:d8:df:df:2d:34:af:99:01:94:f9: cd:2b:97:d7:19:7d:f7:33:b9:00:eb:e6:b8:f4:71: 87:f6:f3:8e:92:be:77:a9:5f:38:b3:51:1e:0b:56: 86:57:63:7d:ca:63:3e:af:9c:86:57:69:d3:9d:f2: f8:27:8c:b2:b0:8c:be:f8:c7:5c:4b:01:1e:62:64: 43:5c:4e:c5:e7:2d:ea:d1:25:07:61:91:1a:ee:82: f3:58:87:20:97:ab:21:42:b4:f0:3d:ee:5b:12:94: 75:59:27:99:ec:60:84:ca:a6:1d:46:03:24:e6:74: 3e:8a:be:5b:2b:4e:39:f9:ee:2a:57:26:58:69:ec: 6a:df:6f:19:f2:ee:48:62:2e:2c:af:21:73:f2:8c: 71:04:f9:6b:6b:cd:d2:43:c9:8a:9a:3a:11:66:27: 1d:92:d1:ba:f4:47:b2:dd:5c:63:93:8d:d5:7e:45: 86:3a:0f:2b:18:a0:94:e3:88:42:c2:19:c5:4a:80: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DB:D9:07:F9:C2:AF:F0:E6:C3:9E:3E:25:FA:29:C8:A9:BA:2A:59 X509v3 Authority Key Identifier: keyid:18:63:F8:59:89:41:F6:F2:67:E2:C6:C6:6C:73:A3:6E:23:98:AC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GGP4WYlB9vJn4sbGbHOjbiOYrLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130B5B/BC8279D099E911F1AF0AD3164511F970/GGP4WYlB9vJn4sbGbHOjbiOYrLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6e:7f:5a:79:a2:d7:b7:e0:e6:84:35:08:21:27:d2:58:71: 3b:17:f2:22:81:f6:5c:0c:61:d4:88:99:b8:33:cf:d6:e3:93: 6d:9b:06:39:63:07:c6:0d:0f:66:1d:eb:3c:c3:f9:ad:0e:69: b0:f3:7d:34:43:4f:6a:b0:16:97:53:e3:ab:50:45:73:12:b8: aa:71:0a:b4:aa:6a:6a:18:1f:e4:20:db:d1:0b:81:c4:23:18: 89:a0:8f:2d:a8:dd:fd:5a:32:84:aa:04:3c:00:30:82:16:6d: 88:94:e6:9f:28:c2:d3:43:e2:ce:18:c4:92:e4:ac:ee:ed:a8: 6a:dd:9b:66:68:80:44:5e:81:2d:9c:f1:28:fe:2a:9f:32:4c: 19:b3:f2:c9:14:61:ba:e8:2d:19:ff:9b:41:c6:f8:6a:be:53: 32:5c:16:4d:d0:bd:f9:0c:21:f7:99:46:d4:4c:ea:68:6a:11: a7:f5:cc:ef:e0:52:0b:92:ca:f2:c8:40:4f:1f:e0:77:3d:1b: 28:77:15:1f:17:82:a4:bd:11:39:81:7e:79:17:55:bb:41:b1: d0:b5:72:60:e1:57:a1:bf:ab:2b:e1:4f:6c:7f:82:8f:c1:68: 2f:9f:74:91:d0:3a:60:fa:56:b2:02:9e:36:e0:31:8f:19:8a: 57:e3:e6:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEI1QjExMC8GA1UEBRMoMTg2M0Y4NTk4OTQxRjZGMjY3RTJDNkM2NkM3M0EzNkUy Mzk4QUNCODAeFw0yNjA5MjcwOTM2MDBaFw0yNjEwMDQwOTM2MDBaMBgxFjAUBgNV BAMTDTZhYjhlMzgwLTFmNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuVuu84fzr9Jq6NHD7KOwd5pBzKFEj29MgswiT/5XO9Z0L0+xrBcgBNpOSkYFK wm4z9SWS1OMsYp3WYXDA3Hi/2N/fLTSvmQGU+c0rl9cZffczuQDr5rj0cYf2846S vnepXzizUR4LVoZXY33KYz6vnIZXadOd8vgnjLKwjL74x1xLAR5iZENcTsXnLerR JQdhkRrugvNYhyCXqyFCtPA97lsSlHVZJ5nsYITKph1GAyTmdD6KvlsrTjn57ipX Jlhp7Grfbxny7khiLiyvIXPyjHEE+WtrzdJDyYqaOhFmJx2S0br0R7LdXGOTjdV+ RYY6DysYoJTjiELCGcVKgPdXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe9vZB/nC r/Dmw54+JfopyKm6KlkwHwYDVR0jBBgwFoAUGGP4WYlB9vJn4sbGbHOjbiOYrLgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwQjVCL0JDODI3OUQwOTlF OTExRjFBRjBBRDMxNjQ1MTFGOTcwL0dHUDRXWWxCOXZKbjRzYkdiSE9qYmlPWXJM Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0dQNFdZbEI5dkpuNHNiR2JIT2piaU9ZckxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw QjVCL0JDODI3OUQwOTlFOTExRjFBRjBBRDMxNjQ1MTFGOTcwL0dHUDRXWWxCOXZK bjRzYkdiSE9qYmlPWXJMZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAObn9aeaLXt+DmhDUIISfSWHE7F/IigfZcDGHUiJm4M8/W45NtmwY5YwfGDQ9m Hes8w/mtDmmw8300Q09qsBaXU+OrUEVzEriqcQq0qmpqGB/kINvRC4HEIxiJoI8t qN39WjKEqgQ8ADCCFm2IlOafKMLTQ+LOGMSS5Kzu7ahq3ZtmaIBEXoEtnPEo/iqf MkwZs/LJFGG66C0Z/5tBxvhqvlMyXBZN0L35DCH3mUbUTOpoahGn9czv4FILksry yEBPH+B3PRsodxUfF4KkvRE5gX55F1W7QbHQtXJg4Vehv6sr4U9sf4KPwWgvn3SR 0Dpg+layAp424DGPGYpX4+ZK -----END CERTIFICATE-----Generated at Mon Sep 28 22:32:50 2026 by rpki-client