$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: l9jr6JexXSGZzjB83Bur6A1anELqBGgCCJB0uVGNNBY= Subject key identifier: 91:7F:FA:93:E3:0B:E4:89:D0:41:D1:7E:13:BA:06:DF:54:E3:10:77 Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 04D1 Signing time: Sun 01 Mar 2026 23:02:05 +0000 Manifest this update: Sun 01 Mar 2026 23:02:05 +0000 Manifest next update: Sun 08 Mar 2026 23:02:05 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: +X7ml00B4LJMwWYWxyKRSszhnIytD+UcgmQiLijc0YY=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: GqrG1fpjl/FS6/QcFeouUYo3Nekrspl6hyOuNMZABaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Mar 1 23:02:05 2026 GMT Not After : Mar 8 23:02:05 2026 GMT Subject: CN=69a4c56d-3ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:ab:12:64:5b:2f:73:67:6a:7c:8a:7c:c1: 54:ce:e8:72:12:a6:fc:8c:05:e6:fd:0b:ec:fb:5c: 3d:28:5d:43:53:b4:40:66:bc:e9:56:e0:47:b5:e5: e1:4f:24:c9:b5:47:b3:74:2a:79:14:6c:a5:e0:40: d6:89:ee:e8:df:e2:5d:1a:b0:1a:ea:9c:16:6f:65: e4:4c:10:6a:4a:db:a5:b6:d5:17:e3:9f:3c:7b:e1: f2:87:26:b4:58:87:78:97:4b:1d:ec:61:0d:10:0b: ef:94:f5:6a:68:f5:d1:d3:cd:41:6e:c7:42:32:d2: 6f:b9:19:87:5f:13:5f:49:55:dd:7a:5d:4c:32:8a: 60:8a:fa:5e:eb:5b:f0:18:1d:2f:9c:13:7f:99:d8: 17:67:c4:05:23:a6:1e:99:5d:42:bd:4f:cc:79:2f: e5:a5:08:51:3d:fa:32:de:63:3a:1e:d5:74:dd:87: ec:0e:90:77:1c:10:6b:5e:16:ac:5c:59:72:4f:2c: 4e:0c:2a:a3:16:2f:76:93:29:cc:b5:c7:d8:e5:73: c2:28:92:e7:cc:f2:78:37:d5:a6:db:7c:b2:43:d1: 6e:e6:8f:29:9b:83:f6:fd:f4:0e:2a:eb:b4:9c:60: 94:6b:dd:91:c8:c4:ea:10:90:e8:9f:c0:a0:81:eb: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7F:FA:93:E3:0B:E4:89:D0:41:D1:7E:13:BA:06:DF:54:E3:10:77 X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:99:ac:22:34:f0:5d:25:5a:4c:e0:7c:53:40:19:60:e5:51: c8:0b:bf:3d:76:09:5f:7c:a4:5b:4f:6c:29:8e:3b:d7:3b:74: c1:82:8e:ee:af:ce:73:c4:30:01:b4:5b:9a:4f:a9:cd:b8:f9: 1c:72:fb:a1:f7:94:5f:0e:33:9c:6e:f1:c9:a6:70:aa:d3:76: 42:be:ad:74:9c:f0:eb:ed:40:a3:d4:b6:0e:19:06:f5:75:26: fb:13:9c:78:3a:f0:f9:80:60:1d:44:e8:0a:1d:b6:8f:a4:5a: 7f:37:53:58:2e:79:db:de:a8:d3:ba:34:52:3b:d1:39:d0:82: ef:e2:43:51:31:be:c6:0d:b8:57:d1:c6:01:b6:38:37:cf:78: 1e:df:eb:9b:f0:7e:ca:67:06:14:28:80:63:87:3f:bb:a0:9a: 0f:6b:64:72:8e:d6:4d:36:62:8c:8f:92:36:2d:56:39:3f:86: 92:0c:9a:f9:f2:97:ff:fa:4b:df:56:2e:80:63:9e:51:f9:52: a6:dd:99:f0:90:29:5a:a4:42:3d:dd:3a:c8:6c:a4:46:d9:ec: 23:0e:48:70:4f:40:36:0a:e3:c3:0f:98:ed:32:09:ed:5a:f0: e8:2a:0f:27:1e:22:79:83:b3:f1:cb:b9:42:be:41:37:a9:d4: a3:c3:ab:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjYwMzAxMjMwMjA1WhcNMjYwMzA4MjMwMjA1WjAYMRYwFAYD VQQDEw02OWE0YzU2ZC0zYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTCrEmRbL3NnanyKfMFUzuhyEqb8jAXm/Qvs+1w9KF1DU7RAZrzpVuBHteXh TyTJtUezdCp5FGyl4EDWie7o3+JdGrAa6pwWb2XkTBBqStulttUX4588e+Hyhya0 WId4l0sd7GENEAvvlPVqaPXR081BbsdCMtJvuRmHXxNfSVXdel1MMopgivpe61vw GB0vnBN/mdgXZ8QFI6YemV1CvU/MeS/lpQhRPfoy3mM6HtV03YfsDpB3HBBrXhas XFlyTyxODCqjFi92kynMtcfY5XPCKJLnzPJ4N9Wm23yyQ9Fu5o8pm4P2/fQOKuu0 nGCUa92RyMTqEJDon8Cgges0fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJF/+pPj C+SJ0EHRfhO6Bt9U4xB3MB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnpmsIjTwXSVaTOB8U0AZYOVRyAu/PXYJX3ykW09sKY471zt0wYKO7q/Oc8Qw AbRbmk+pzbj5HHL7ofeUXw4znG7xyaZwqtN2Qr6tdJzw6+1Ao9S2DhkG9XUm+xOc eDrw+YBgHUToCh22j6RafzdTWC55296o07o0UjvROdCC7+JDUTG+xg24V9HGAbY4 N894Ht/rm/B+ymcGFCiAY4c/u6CaD2tkco7WTTZijI+SNi1WOT+Gkgya+fKX//pL 31YugGOeUflSpt2Z8JApWqRCPd06yGykRtnsIw5IcE9ANgrjww+Y7TIJ7Vrw6CoP Jx4ieYOz8cu5Qr5BN6nUo8OrJw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:25:42 2026 by rpki-client