$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json) Hash identifier: r/enlJABGAA9EeFmY9w5QLQQJJbHvLDNAG6T7VBkf1k= Subject key identifier: F3:D9:F4:6B:BE:0C:19:E8:29:D7:16:BE:AE:0C:D4:6D:85:69:3D:D7 Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft Manifest number: 04A2 Signing time: Sun 20 Sep 2026 23:54:23 +0000 Manifest this update: Sun 20 Sep 2026 23:54:23 +0000 Manifest next update: Sun 27 Sep 2026 23:54:23 +0000 Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: 1aINJdv9NRrI9Yebte950yJXqXfu+CSLr04FzeQ2GR8=) 2: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: x729WOa3T8qxHTeXY3IB1oaDUAtd3GUuYxUEzKIlZlE=) 3: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: LdZPN5g7VKOUsoMqUh+SkM+nJiYnZ4SZeWeIWiWxUuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Validity Not Before: Sep 20 23:54:23 2026 GMT Not After : Sep 27 23:54:23 2026 GMT Subject: CN=6ab0722f-201d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:d2:15:d3:7b:7a:b6:60:fb:30:e3:ee:19: 0d:3d:da:70:86:7f:e1:94:0a:18:c2:47:e4:53:a3: ee:d0:0e:38:30:8a:28:0a:05:44:ea:38:5f:b7:0a: 66:d9:36:a3:54:9f:35:4a:3a:77:36:bb:df:66:aa: ca:8b:62:99:29:b3:56:eb:f0:c1:45:8d:d7:d2:16: 7f:db:ff:a9:ae:f4:5e:19:a1:53:d8:22:1f:71:ad: 9f:69:a4:d2:c1:cb:37:c4:cd:1d:22:8e:1c:60:33: 71:d5:54:4e:51:95:59:2a:3a:57:3e:ba:ec:e1:92: 9f:45:c7:08:bd:da:63:29:fc:8c:8e:45:36:42:b5: 73:7d:73:08:a7:79:0a:e4:53:b7:6b:01:e5:fa:a2: 91:0c:d3:d1:d1:7a:a7:64:0b:de:c6:20:e1:25:3d: ea:44:e1:e5:cb:98:d3:f1:ea:c6:19:94:81:7d:f1: 30:33:23:20:f3:78:05:53:24:dd:4f:0d:c4:a8:76: 70:0b:21:4e:e2:ac:5a:3b:4e:8a:0b:a8:06:fc:59: c0:3a:2c:11:1e:98:86:1f:6c:b9:52:d3:4d:aa:d6: 79:86:d8:0a:a3:90:85:3a:36:95:2b:96:f4:39:c9: c5:23:99:ba:cc:64:35:61:f4:6c:6d:53:04:ca:1d: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D9:F4:6B:BE:0C:19:E8:29:D7:16:BE:AE:0C:D4:6D:85:69:3D:D7 X509v3 Authority Key Identifier: keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:3f:dc:28:1e:fa:2b:47:86:55:05:52:17:5b:61:f0:04:06: 4a:57:cd:51:4f:41:65:99:f3:a7:20:b6:4a:09:5e:16:f7:6a: 0a:6f:e5:6a:24:bb:94:b7:61:c1:06:ce:4d:18:d8:be:fb:94: aa:c4:1d:46:38:d5:44:26:10:d1:00:ac:45:26:0c:0e:44:06: 32:8a:c5:9b:e0:94:7a:b2:fd:59:66:9a:8b:3d:fb:ac:1a:80: 2b:5c:04:5e:eb:ca:d1:59:e8:ac:c0:22:bd:1a:1a:46:1c:59: 07:77:f5:b2:02:29:13:af:9d:de:ee:48:f0:73:04:b9:51:2a: e3:f0:0e:15:d2:c3:2a:fc:0e:95:d8:04:70:91:91:69:51:69: 4f:1b:b4:7c:48:bc:54:92:5a:73:06:70:76:d3:a8:8c:e4:ee: 82:41:d2:02:75:2c:1f:75:8e:c1:d6:a9:e7:9e:cc:21:02:95: 78:72:7e:c5:2d:1d:d2:ad:7d:17:1b:bf:cc:3b:8f:16:b7:0e: 99:41:4b:ca:36:0e:1c:96:39:6b:b2:f9:c3:da:c7:ac:b0:6b: 1f:78:af:0d:1f:29:35:75:dd:cc:50:e4:94:6e:41:10:43:0a: 22:94:60:0f:07:57:62:a5:9f:a4:2d:07:0a:0f:78:ed:c4:6e: 01:c0:db:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3MjAxMTAvBgNVBAUTKDFCMDM2QkZGODc4MDdDQkZDNkU5MTIzNkNCMDg2RDRG RTJCMDk5M0QwHhcNMjYwOTIwMjM1NDIzWhcNMjYwOTI3MjM1NDIzWjAYMRYwFAYD VQQDEw02YWIwNzIyZi0yMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlf3SFdN7erZg+zDj7hkNPdpwhn/hlAoYwkfkU6Pu0A44MIooCgVE6jhftwpm 2TajVJ81Sjp3NrvfZqrKi2KZKbNW6/DBRY3X0hZ/2/+prvReGaFT2CIfca2faaTS wcs3xM0dIo4cYDNx1VROUZVZKjpXPrrs4ZKfRccIvdpjKfyMjkU2QrVzfXMIp3kK 5FO3awHl+qKRDNPR0XqnZAvexiDhJT3qROHly5jT8erGGZSBffEwMyMg83gFUyTd Tw3EqHZwCyFO4qxaO06KC6gG/FnAOiwRHpiGH2y5UtNNqtZ5htgKo5CFOjaVK5b0 OcnFI5m6zGQ1YfRsbVMEyh35CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPZ9Gu+ DBnoKdcWvq4M1G2FaT3XMB8GA1UdIwQYMBaAFBsDa/+HgHy/xukSNssIbU/isJk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDcyMC8yMDlGOEI3NEE3 OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZMX0c2UkkyeXdodFQtS3dt VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3TnJfNGVBZkxfRzZSSTJ5d2h0VC1Ld21UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDcyMC8yMDlGOEI3NEE3OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZM X0c2UkkyeXdodFQtS3dtVDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUD/cKB76K0eGVQVSF1th8AQGSlfNUU9BZZnzpyC2SgleFvdqCm/laiS7lLdh wQbOTRjYvvuUqsQdRjjVRCYQ0QCsRSYMDkQGMorFm+CUerL9WWaaiz37rBqAK1wE XuvK0VnorMAivRoaRhxZB3f1sgIpE6+d3u5I8HMEuVEq4/AOFdLDKvwOldgEcJGR aVFpTxu0fEi8VJJacwZwdtOojOTugkHSAnUsH3WOwdap557MIQKVeHJ+xS0d0q19 Fxu/zDuPFrcOmUFLyjYOHJY5a7L5w9rHrLBrH3ivDR8pNXXdzFDklG5BEEMKIpRg DwdXYqWfpC0HCg947cRuAcDbUQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:47:38 2026 by rpki-client