$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: l/ur3xpH+OJgEQY2KX7a8W4lia0H//efmflw1m9gP+0= Subject key identifier: 22:5E:A9:6E:2F:91:3A:7F:B6:A6:70:C5:A7:BC:79:44:37:87:06:B1 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 0258 Signing time: Mon 27 Jul 2026 02:58:26 +0000 Manifest this update: Mon 27 Jul 2026 02:58:25 +0000 Manifest next update: Mon 03 Aug 2026 02:58:25 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: 86j0pPeIqTJ/sTT4PB72j94maCgFvaeI1TTaghXvJsI=) 2: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=) 3: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=) 4: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=) 5: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=) 6: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=) 7: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Jul 27 02:58:25 2026 GMT Not After : Aug 3 02:58:25 2026 GMT Subject: CN=6a66c952-9af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:dc:27:27:ef:53:58:84:5c:92:b1:03:75:12: e9:ff:40:46:25:3c:a2:9b:ad:5a:d4:8f:ac:97:ed: ee:dd:b3:07:c3:06:26:34:88:6b:e2:da:dc:be:60: 81:e1:24:84:0e:d7:23:e4:16:b6:93:87:16:77:b3: a6:d5:8b:2c:e4:21:46:cb:1d:01:01:e3:8e:9f:b6: 2c:74:93:ed:04:79:11:55:7e:3f:8c:69:be:39:93: 9b:10:da:74:0b:9f:67:85:59:16:11:fe:00:7d:32: f1:b8:a1:7a:70:b0:64:e6:6c:01:9f:8e:62:c6:b6: 12:f5:6b:28:c4:b0:92:9e:9b:a2:86:27:1b:27:b4: 95:5d:ab:83:44:01:c1:85:04:b0:49:7f:e6:cf:66: 3d:14:a4:43:1a:b1:58:c9:58:4f:b1:cc:a6:c9:2d: 49:46:77:37:b7:52:32:5d:be:8c:19:b9:a6:ef:f9: c5:25:9c:6a:d8:1c:fc:5d:86:4d:d2:53:2a:53:93: 4e:43:73:e1:14:87:af:2d:49:49:8e:de:78:c5:82: 70:7c:be:64:20:47:9f:ab:0f:32:0c:7f:b0:b3:51: 8d:4a:3b:ef:fa:79:85:33:d9:42:cf:eb:06:a8:fb: af:c1:c4:0a:e7:15:ac:13:79:84:6c:a5:92:64:00: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:A9:6E:2F:91:3A:7F:B6:A6:70:C5:A7:BC:79:44:37:87:06:B1 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c6:f4:90:92:04:f0:8e:c0:a1:ba:3a:af:91:be:8f:60:ef: 72:85:f2:8e:d6:22:fc:e2:ad:67:a0:b3:26:66:fc:dc:ce:c6: 73:82:e1:fb:8c:72:54:8a:4b:ee:41:72:c1:a9:2c:e6:37:d6: d8:dd:cb:de:6c:77:79:99:dc:3f:8f:fd:a2:72:8a:13:56:df: 22:69:5f:ad:17:21:38:55:9d:27:19:e8:65:e5:8a:9c:3c:0d: fe:91:83:ac:8f:f2:96:aa:15:e9:80:02:d5:77:f2:ac:53:bd: 74:22:90:cb:49:da:7e:9d:31:85:b1:7c:81:3e:33:58:81:27: d9:38:ce:8e:c7:01:ab:fd:98:c9:55:fa:5b:bd:9d:ad:d7:84: 97:6b:10:ce:01:bf:81:e6:0f:f2:5c:e0:1b:5a:0d:86:72:a8: 5d:e6:8c:60:2a:2f:7f:db:ad:65:cd:68:a9:18:ce:44:56:a3: 67:1e:42:0e:89:d3:b1:dd:50:73:40:ea:04:b5:46:85:13:75: 3f:75:0a:7f:d5:89:d4:4a:dc:c8:bb:6a:99:59:86:83:9d:48: 7b:8d:ac:56:ec:b9:cb:5d:51:d0:90:6e:b6:20:16:98:01:ac: 2a:63:20:d4:92:28:6b:84:55:d2:9e:03:3b:b0:46:7e:d4:6c: 36:c3:c0:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjYwNzI3MDI1ODI1WhcNMjYwODAzMDI1ODI1WjAYMRYwFAYD VQQDEw02YTY2Yzk1Mi05YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9twnJ+9TWIRckrEDdRLp/0BGJTyim61a1I+sl+3u3bMHwwYmNIhr4trcvmCB 4SSEDtcj5Ba2k4cWd7Om1Yss5CFGyx0BAeOOn7YsdJPtBHkRVX4/jGm+OZObENp0 C59nhVkWEf4AfTLxuKF6cLBk5mwBn45ixrYS9WsoxLCSnpuihicbJ7SVXauDRAHB hQSwSX/mz2Y9FKRDGrFYyVhPscymyS1JRnc3t1IyXb6MGbmm7/nFJZxq2Bz8XYZN 0lMqU5NOQ3PhFIevLUlJjt54xYJwfL5kIEefqw8yDH+ws1GNSjvv+nmFM9lCz+sG qPuvwcQK5xWsE3mEbKWSZADPNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJeqW4v kTp/tqZwxae8eUQ3hwaxMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGMb0kJIE8I7Aobo6r5G+j2DvcoXyjtYi/OKtZ6CzJmb83M7Gc4Lh+4xyVIpL 7kFywaks5jfW2N3L3mx3eZncP4/9onKKE1bfImlfrRchOFWdJxnoZeWKnDwN/pGD rI/ylqoV6YAC1XfyrFO9dCKQy0nafp0xhbF8gT4zWIEn2TjOjscBq/2YyVX6W72d rdeEl2sQzgG/geYP8lzgG1oNhnKoXeaMYCovf9utZc1oqRjORFajZx5CDonTsd1Q c0DqBLVGhRN1P3UKf9WJ1ErcyLtqmVmGg51Ie42sVuy5y11R0JButiAWmAGsKmMg 1JIoa4RV0p4DO7BGftRsNsPAHA== -----END CERTIFICATE-----Generated at Wed Jul 29 03:59:14 2026 by rpki-client