$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: xD0TrEG0RtD39rxd2cyAOvqim3B7VIKVQxvP9kie4ug= Subject key identifier: 9E:B2:AE:4A:3C:3D:9D:8D:64:97:14:32:B3:88:69:30:F0:10:55:D9 Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 027C Signing time: Fri 17 Apr 2026 01:41:11 +0000 Manifest this update: Fri 17 Apr 2026 01:41:11 +0000 Manifest next update: Fri 24 Apr 2026 01:41:11 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: EUsvvbkRxQ7V5C0WdExATGJeTfSHcd+GnlqV1GdFGAs=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: d195UYb4Ma776b6MiFJV4Wd3T3+N6fZWCyC5k9KeQyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Apr 17 01:41:11 2026 GMT Not After : Apr 24 01:41:11 2026 GMT Subject: CN=69e18fb7-68a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:82:3a:4a:cc:b3:af:e1:b3:7c:6c:57:3f: 53:68:5b:5c:15:12:ab:85:1b:00:a2:f2:47:68:11: a2:52:dc:a2:fb:b7:4c:55:41:eb:0f:85:b1:47:c9: 32:d1:02:50:69:8e:27:57:ce:9d:56:03:bb:71:2a: d4:21:bc:96:b1:a9:e1:05:77:4c:f3:6e:63:dc:3f: e3:32:c0:5f:11:84:53:77:2f:47:24:ce:25:23:a1: 34:43:06:f8:fd:10:a7:4d:4c:27:f4:e2:38:2e:6e: df:38:9c:eb:c7:f9:e5:3d:51:cb:87:93:0b:1e:16: 0e:87:02:a7:d3:70:2d:28:85:1a:fd:ea:8e:2d:7b: 5c:cb:66:ef:a6:1d:3f:25:43:9a:f6:84:5a:5d:54: 51:ea:ba:65:72:7b:f9:c5:c9:0e:05:28:07:3c:e3: d5:aa:f9:1f:f3:46:69:64:37:76:54:e5:48:c3:56: cb:c3:8d:3f:22:03:5f:49:24:61:68:cd:ed:19:ec: b2:2b:4c:e3:00:a3:55:e8:52:4d:53:22:c6:ac:6a: 5f:44:69:6a:57:56:97:6c:58:87:f6:23:7c:77:55: 14:1c:15:27:7e:f1:81:97:76:7b:a0:de:50:78:d8: bc:a8:4b:d6:e7:85:a0:a2:83:0d:1d:cb:2f:35:67: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:AE:4A:3C:3D:9D:8D:64:97:14:32:B3:88:69:30:F0:10:55:D9 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:88:2a:f5:e2:23:b6:d1:68:a5:5c:48:77:e4:98:3a:d3:50: fe:42:27:7e:d1:10:6c:90:9d:d1:07:cc:aa:a4:97:43:3f:56: 32:20:24:ec:26:3d:d2:15:37:b3:fe:1c:94:f3:bd:f7:c5:78: 13:a5:3f:aa:4a:8c:3e:92:9b:1f:0a:76:5e:58:6a:0e:0f:ea: 0e:2e:d7:c2:1a:f6:58:41:eb:39:d6:b8:35:43:74:8d:ee:19: b6:77:e8:d7:73:15:58:85:ef:76:b9:67:1e:59:af:a5:9e:ff: a6:c5:2e:61:d3:21:b5:1a:b6:45:0f:9a:43:b8:56:0e:22:61: ce:32:fc:e2:03:e5:51:33:3d:ff:9a:70:47:eb:26:39:fc:9d: 7f:42:cc:09:1d:c6:41:72:c7:3f:57:9e:51:11:93:1d:02:84: c5:a8:db:b2:c7:5b:9c:da:56:c2:8b:85:e9:c9:a4:06:e2:80: a9:73:41:60:72:0f:df:e9:46:bb:8f:76:17:39:b2:cb:e5:fb: 13:c5:7b:ed:42:50:d8:4d:82:cb:65:09:ae:85:ad:46:22:40: d3:e1:03:0d:c1:4f:aa:6f:c9:f0:66:ac:63:90:b5:e6:d5:50: 13:e3:9f:60:21:c7:4f:bc:bc:76:17:9c:b2:91:62:38:22:5f: d6:3d:94:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjYwNDE3MDE0MTExWhcNMjYwNDI0MDE0MTExWjAYMRYwFAYD VQQDEw02OWUxOGZiNy02OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUqCOkrMs6/hs3xsVz9TaFtcFRKrhRsAovJHaBGiUtyi+7dMVUHrD4WxR8ky 0QJQaY4nV86dVgO7cSrUIbyWsanhBXdM825j3D/jMsBfEYRTdy9HJM4lI6E0Qwb4 /RCnTUwn9OI4Lm7fOJzrx/nlPVHLh5MLHhYOhwKn03AtKIUa/eqOLXtcy2bvph0/ JUOa9oRaXVRR6rplcnv5xckOBSgHPOPVqvkf80ZpZDd2VOVIw1bLw40/IgNfSSRh aM3tGeyyK0zjAKNV6FJNUyLGrGpfRGlqV1aXbFiH9iN8d1UUHBUnfvGBl3Z7oN5Q eNi8qEvW54WgooMNHcsvNWeNxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6yrko8 PZ2NZJcUMrOIaTDwEFXZMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmYgq9eIjttFopVxId+SYOtNQ/kInftEQbJCd0QfMqqSXQz9WMiAk7CY90hU3 s/4clPO998V4E6U/qkqMPpKbHwp2XlhqDg/qDi7Xwhr2WEHrOda4NUN0je4Ztnfo 13MVWIXvdrlnHlmvpZ7/psUuYdMhtRq2RQ+aQ7hWDiJhzjL84gPlUTM9/5pwR+sm Ofydf0LMCR3GQXLHP1eeURGTHQKExajbssdbnNpWwouF6cmkBuKAqXNBYHIP3+lG u492Fzmyy+X7E8V77UJQ2E2Cy2UJroWtRiJA0+EDDcFPqm/J8GasY5C15tVQE+Of YCHHT7y8dhecspFiOCJf1j2UDg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:47:27 2026 by rpki-client