$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: yLD7egCTnyYJ6FSz680BMY305ED4R+6lJ/VmULazSgU= Subject key identifier: C2:D4:EF:7F:F0:BE:9A:04:F5:22:B0:EA:53:A4:9B:04:64:ED:D3:2F Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 0413 Signing time: Mon 27 Jul 2026 01:26:08 +0000 Manifest this update: Mon 27 Jul 2026 01:26:08 +0000 Manifest next update: Mon 03 Aug 2026 01:26:08 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: X9H/2urw77z6Pzcwg+Rri/sWEzWJ2yvf0yv37beScZI=) 2: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=) 3: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=) 4: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Jul 27 01:26:08 2026 GMT Not After : Aug 3 01:26:08 2026 GMT Subject: CN=6a66b3b0-22b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:4e:7e:5a:37:e2:39:a5:11:54:4e:f1:21: 6d:df:67:d6:04:ef:d3:d9:a9:b9:da:46:8c:08:21: 2a:0b:5e:6f:02:8d:0e:83:ec:6e:6c:3d:14:53:75: 23:7b:94:e6:2c:d9:f8:4c:ce:50:cd:eb:20:94:0b: d4:c3:05:b2:3d:95:4b:bb:b6:f5:62:92:62:2a:f1: 1d:c9:7c:1e:ea:3b:3b:51:10:0f:fe:29:10:89:57: 40:c2:28:09:d0:0f:c7:d4:12:89:19:00:da:0b:f8: b7:1a:1a:1c:8d:53:ae:f3:b9:1b:87:f8:38:ee:0d: 97:e1:31:4d:5e:c2:9b:a7:9b:de:22:da:3d:8b:8b: 62:38:b9:0b:51:32:fa:9c:10:ee:32:cd:f5:2b:70: 42:f5:28:54:44:48:38:ce:1c:9f:2d:4e:2f:c5:1c: 52:35:57:3a:a3:9b:c2:4f:dc:4e:cf:df:92:0f:27: db:fb:f7:2a:15:f0:47:32:53:28:ce:cd:e2:78:38: db:c4:4c:a4:15:e0:63:8d:e3:51:b9:b7:88:6d:27: a5:7e:2a:83:96:d5:ac:dd:e9:f1:4f:93:cb:ff:5d: 7b:40:68:33:33:4f:e6:d7:d6:b6:22:a5:98:ca:68: 3d:36:f6:75:53:a5:e0:7a:f1:30:82:45:5d:6b:20: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D4:EF:7F:F0:BE:9A:04:F5:22:B0:EA:53:A4:9B:04:64:ED:D3:2F X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:39:8e:5f:d8:cd:c5:96:a8:10:0e:0f:7f:61:06:c9:ed:ff: 87:ed:49:7f:20:ba:5d:30:d6:1b:80:50:ba:f0:ff:04:a9:12: 0e:03:19:09:86:1d:ff:7c:dd:2d:97:3c:74:b9:d4:ee:09:9e: 24:c9:18:c9:e4:b1:4e:a7:20:5f:92:80:3a:c1:e6:5c:a2:8d: 34:94:be:51:41:a0:ef:7d:ff:23:12:1e:c3:09:31:f6:3c:1d: e6:7c:f1:1f:86:80:68:45:6e:2d:eb:46:b6:dc:2a:06:85:92: 61:ea:d8:c3:d6:2d:70:5b:55:6f:23:69:da:4b:79:77:93:45: 67:aa:9d:8a:60:41:92:77:0d:01:41:b3:0f:98:d6:a7:a3:10: 28:5e:ef:bd:ba:24:7d:3c:7b:34:da:51:5f:a3:13:e0:54:9a: 6b:42:1a:46:13:70:77:da:0a:81:25:00:f2:33:ae:e2:ce:ce: 91:8a:38:b4:3c:05:ff:2f:2a:ba:c9:39:5b:67:15:9c:f2:5d: 76:02:a7:61:cd:3f:8a:08:74:87:15:eb:bc:17:7f:54:c7:9f: b9:e7:94:35:1b:2a:5b:29:fb:ec:a2:8e:f6:24:28:e8:59:75: ad:54:60:88:f2:39:06:37:5c:de:22:16:68:b8:0d:36:e5:13: 82:52:6e:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjYwNzI3MDEyNjA4WhcNMjYwODAzMDEyNjA4WjAYMRYwFAYD VQQDEw02YTY2YjNiMC0yMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnhOflo34jmlEVRO8SFt32fWBO/T2am52kaMCCEqC15vAo0Og+xubD0UU3Uj e5TmLNn4TM5QzesglAvUwwWyPZVLu7b1YpJiKvEdyXwe6js7URAP/ikQiVdAwigJ 0A/H1BKJGQDaC/i3GhocjVOu87kbh/g47g2X4TFNXsKbp5veIto9i4tiOLkLUTL6 nBDuMs31K3BC9ShUREg4zhyfLU4vxRxSNVc6o5vCT9xOz9+SDyfb+/cqFfBHMlMo zs3ieDjbxEykFeBjjeNRubeIbSelfiqDltWs3enxT5PL/117QGgzM0/m19a2IqWY ymg9NvZ1U6XgevEwgkVdayD9FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLU73/w vpoE9SKw6lOkmwRk7dMvMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTmOX9jNxZaoEA4Pf2EGye3/h+1JfyC6XTDWG4BQuvD/BKkSDgMZCYYd/3zd LZc8dLnU7gmeJMkYyeSxTqcgX5KAOsHmXKKNNJS+UUGg733/IxIewwkx9jwd5nzx H4aAaEVuLetGttwqBoWSYerYw9YtcFtVbyNp2kt5d5NFZ6qdimBBkncNAUGzD5jW p6MQKF7vvbokfTx7NNpRX6MT4FSaa0IaRhNwd9oKgSUA8jOu4s7OkYo4tDwF/y8q usk5W2cVnPJddgKnYc0/igh0hxXrvBd/VMefueeUNRsqWyn77KKO9iQo6Fl1rVRg iPI5Bjdc3iIWaLgNNuUTglJuhA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:43 2026 by rpki-client