$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: C9tOHAhrglk/fMkoiseB5Qe1m8DSrO8QnAvCWWyLxLA= Subject key identifier: 81:C6:C7:E8:DE:E9:57:ED:78:B4:4C:13:E1:F3:B4:5F:93:22:A1:FA Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 08E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 08DD Signing time: Thu 16 Apr 2026 20:17:12 +0000 Manifest this update: Thu 16 Apr 2026 20:17:12 +0000 Manifest next update: Thu 23 Apr 2026 20:17:12 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: UuUVfiLKd0v4A49jS2Fqlygya53Fcm1vZvbSAQKRU14=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: k0slGk6THhklii8X86eyYXN7YTIBN/mn56HfkDFdmb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Apr 16 20:17:12 2026 GMT Not After : Apr 23 20:17:12 2026 GMT Subject: CN=69e143c8-f068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:dc:54:c4:15:82:90:38:9f:d8:c1:b0:53: bc:24:ff:4e:f6:dc:5a:87:24:72:21:f3:30:fa:e2: 2a:ad:fd:90:48:e2:b4:0b:40:f4:86:b8:7f:6d:53: 8c:ce:63:58:41:ac:55:7d:c8:a9:fc:d0:44:63:d5: 48:ec:c8:1e:55:fa:35:67:04:b6:40:b9:67:0b:b0: 46:f4:0b:76:3a:53:0c:b1:7e:2d:13:08:a5:ac:8d: c1:e7:33:7a:80:86:6e:97:c6:49:8b:5e:28:1e:a7: 71:b7:b7:a3:07:1f:22:15:54:87:2c:7c:ef:dd:2c: 9d:2c:7a:38:eb:70:4a:58:93:bb:9a:ef:85:46:4e: 24:71:02:1c:ea:39:22:c1:df:7d:72:dd:16:0c:ba: b6:43:ab:eb:f9:25:72:cc:00:51:c1:b4:dc:f2:3c: f9:2d:31:6d:75:42:f8:74:73:e6:79:e2:15:41:b2: 02:0b:64:90:40:54:0d:89:36:97:2a:0b:8c:b5:fa: 18:7a:48:8c:4d:a9:81:a4:44:0a:6f:7e:39:5e:9b: 2f:7f:5a:2e:a1:5e:88:f7:b0:58:2b:7e:35:de:df: 02:4c:b5:1b:aa:d2:50:47:f0:af:08:83:2b:cf:7a: e5:80:1a:84:36:7c:f6:a1:15:d6:dd:ae:d0:d2:4c: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C6:C7:E8:DE:E9:57:ED:78:B4:4C:13:E1:F3:B4:5F:93:22:A1:FA X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:53:a2:a2:e2:20:c9:79:95:28:8d:3d:be:c5:5e:7f:d1:d5: 4f:76:3b:de:85:5f:96:97:dc:60:ee:f5:30:c1:94:19:b7:bf: 19:82:7c:f9:77:c2:93:65:71:85:c8:13:d7:ee:80:cc:1b:aa: 78:ac:b3:c3:a3:74:cd:5d:9a:01:cd:d4:ed:3e:38:e9:49:a2: fb:9a:b5:31:ec:6f:45:6f:5f:d9:cb:ee:d3:1f:17:da:82:ae: 45:a1:ed:cf:b4:63:1c:6c:e6:4b:fa:07:c1:04:eb:f2:e8:63: 02:ce:3f:11:ab:76:62:45:d7:86:10:66:9b:2d:3f:85:6e:7f: cd:11:40:37:d6:bc:8d:e8:d2:5d:27:fe:ce:a2:c2:2e:b5:10: 3a:95:76:dc:e0:0d:76:f9:d6:cb:59:ab:4a:c5:d5:83:99:de: 80:ec:78:ce:34:c6:6f:cc:bc:f8:8a:08:6d:1e:03:e7:f8:c8: 05:e3:ed:d3:1f:80:04:86:44:18:5f:43:88:fd:95:7e:0b:06: 7a:33:6f:8a:da:36:d6:85:50:5a:d6:35:51:d2:c1:93:5b:2b: c0:de:69:ea:0c:a9:6f:fa:22:e5:ab:88:83:dd:3a:4a:08:d0: a5:24:24:ac:49:21:4d:f1:5e:4e:40:e7:35:cf:8d:83:bf:a8: b4:4f:74:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjYwNDE2MjAxNzEyWhcNMjYwNDIzMjAxNzEyWjAYMRYwFAYD VQQDEw02OWUxNDNjOC1mMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGjcVMQVgpA4n9jBsFO8JP9O9txahyRyIfMw+uIqrf2QSOK0C0D0hrh/bVOM zmNYQaxVfcip/NBEY9VI7MgeVfo1ZwS2QLlnC7BG9At2OlMMsX4tEwilrI3B5zN6 gIZul8ZJi14oHqdxt7ejBx8iFVSHLHzv3SydLHo463BKWJO7mu+FRk4kcQIc6jki wd99ct0WDLq2Q6vr+SVyzABRwbTc8jz5LTFtdUL4dHPmeeIVQbICC2SQQFQNiTaX KguMtfoYekiMTamBpEQKb345Xpsvf1ouoV6I97BYK3413t8CTLUbqtJQR/CvCIMr z3rlgBqENnz2oRXW3a7Q0kyGjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHGx+je 6VfteLRME+HztF+TIqH6MB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1OiouIgyXmVKI09vsVef9HVT3Y73oVflpfcYO71MMGUGbe/GYJ8+XfCk2Vx hcgT1+6AzBuqeKyzw6N0zV2aAc3U7T446Umi+5q1MexvRW9f2cvu0x8X2oKuRaHt z7RjHGzmS/oHwQTr8uhjAs4/Eat2YkXXhhBmmy0/hW5/zRFAN9a8jejSXSf+zqLC LrUQOpV23OANdvnWy1mrSsXVg5negOx4zjTGb8y8+IoIbR4D5/jIBePt0x+ABIZE GF9DiP2VfgsGejNvito21oVQWtY1UdLBk1srwN5p6gypb/oi5auIg906SgjQpSQk rEkhTfFeTkDnNc+Ng7+otE909w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:00:01 2026 by rpki-client