$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: 4TqLwfkiXsp2rO2QElGU3baQK8HINagPOtCDn6CWvhU= Subject key identifier: A7:ED:6B:5A:78:D2:2E:B8:48:68:DA:5A:C2:E1:BA:75:6F:07:21:EA Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 029E Signing time: Sun 20 Sep 2026 17:25:09 +0000 Manifest this update: Sun 20 Sep 2026 17:25:08 +0000 Manifest next update: Sun 27 Sep 2026 17:25:08 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: YD/+NhOkVVW4I2Lb/F3arg5sXjW4lB/6+PCnKTIzk4E=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: s3pplahrtkEIiqFvq9bDswEXkbohC1ZEoUg/qiNs0L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Sep 20 17:25:08 2026 GMT Not After : Sep 27 17:25:08 2026 GMT Subject: CN=6ab016f4-89b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:34:69:ea:46:6c:c1:d5:28:d4:ad:58:84: 6b:4f:b3:75:da:81:4c:59:17:f4:19:26:2d:c8:1c: d4:e1:b3:19:a8:60:4c:f4:bb:53:5e:8f:96:94:d9: 9b:ea:29:8e:63:80:9e:23:ed:4c:fa:f6:22:99:fc: b8:dd:7c:50:73:20:4f:33:8e:ef:55:63:f8:b4:b4: 1a:09:80:ad:22:29:38:c3:45:d9:8e:bb:91:84:d4: 2c:de:4a:3f:5f:e0:d5:3b:6a:69:e8:0e:45:a7:ea: 13:79:d6:6d:4a:02:f3:b9:97:7f:41:db:ef:86:bb: d3:2e:f3:c3:9b:bc:da:0b:7a:d4:99:80:7c:0e:09: f9:53:5b:d2:f8:0c:01:77:21:09:7a:7a:b0:19:8f: 0f:c7:86:19:59:10:67:61:b0:f4:9d:14:22:18:70: 15:d5:b8:e7:7d:95:d9:99:4e:b9:99:0c:40:bc:df: ce:be:23:5b:a5:b0:a9:65:a7:45:3f:cb:a9:ac:f0: e9:e0:0f:1c:6f:6e:0b:10:12:25:5f:8b:c7:c4:11: fe:c6:e3:cc:09:b8:aa:5b:44:c6:3e:f9:e1:3c:57: ad:53:83:ec:df:1a:d2:29:23:e4:e4:cc:69:26:90: c6:dd:eb:59:68:c2:7b:3d:9f:b9:4d:7b:9b:57:39: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:6B:5A:78:D2:2E:B8:48:68:DA:5A:C2:E1:BA:75:6F:07:21:EA X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:59:db:dc:39:fd:40:15:6c:88:b5:52:c2:e3:be:07:b2:36: 8e:14:ee:04:ec:7a:65:a7:1a:d0:a6:bc:a7:2d:bd:19:19:a0: a9:67:63:00:a0:6b:2a:6b:99:d0:9d:9a:f4:f3:1e:93:40:3d: 8b:34:ff:c8:53:d7:ee:05:a3:6c:83:58:60:aa:ac:cf:80:a5: 9f:f8:b0:14:fc:18:5d:55:12:a6:56:ad:76:8a:9a:6a:59:99: 60:f2:e2:b4:b6:c9:2c:91:bc:d4:8f:2c:27:d2:e6:9b:a6:59: 1f:af:c0:11:58:93:26:fe:e2:d3:10:b2:a7:98:8f:f2:ef:4f: ec:db:3a:0b:ae:8e:59:a5:d2:c6:79:e2:a2:c3:f6:92:1c:7c: 8c:07:de:d6:7c:46:da:53:97:47:21:cb:b7:19:2d:f3:2c:be: 8c:0c:6d:c6:bc:fa:02:7e:01:6b:f1:36:95:63:33:6a:1c:70: 4f:58:49:91:2a:64:ef:56:6e:a2:04:cc:03:bf:a3:fa:16:16: 53:0d:01:73:39:e9:6d:c6:c8:f5:b7:ee:85:25:41:87:8c:c1: f5:8a:c1:be:50:30:fd:4d:cd:ad:cd:83:ae:c5:78:01:8d:4c: 53:c0:08:b2:55:d6:75:5d:6c:fa:60:e8:44:d3:1c:3c:93:3b: 57:5c:93:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjYwOTIwMTcyNTA4WhcNMjYwOTI3MTcyNTA4WjAYMRYwFAYD VQQDEw02YWIwMTZmNC04OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/o0aepGbMHVKNStWIRrT7N12oFMWRf0GSYtyBzU4bMZqGBM9LtTXo+WlNmb 6imOY4CeI+1M+vYimfy43XxQcyBPM47vVWP4tLQaCYCtIik4w0XZjruRhNQs3ko/ X+DVO2pp6A5Fp+oTedZtSgLzuZd/QdvvhrvTLvPDm7zaC3rUmYB8Dgn5U1vS+AwB dyEJenqwGY8Px4YZWRBnYbD0nRQiGHAV1bjnfZXZmU65mQxAvN/OviNbpbCpZadF P8uprPDp4A8cb24LEBIlX4vHxBH+xuPMCbiqW0TGPvnhPFetU4Ps3xrSKSPk5Mxp JpDG3etZaMJ7PZ+5TXubVzldjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfta1p4 0i64SGjaWsLhunVvByHqMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASlnb3Dn9QBVsiLVSwuO+B7I2jhTuBOx6Zaca0Ka8py29GRmgqWdjAKBrKmuZ 0J2a9PMek0A9izT/yFPX7gWjbINYYKqsz4Cln/iwFPwYXVUSplatdoqaalmZYPLi tLbJLJG81I8sJ9Lmm6ZZH6/AEViTJv7i0xCyp5iP8u9P7Ns6C66OWaXSxnniosP2 khx8jAfe1nxG2lOXRyHLtxkt8yy+jAxtxrz6An4Ba/E2lWMzahxwT1hJkSpk71Zu ogTMA7+j+hYWUw0BcznpbcbI9bfuhSVBh4zB9YrBvlAw/U3Nrc2DrsV4AY1MU8AI slXWdV1s+mDoRNMcPJM7V1yTjg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:12:29 2026 by rpki-client