$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: 90kpkkqRzMl+XQtWTJlDQNODgyrR9xZL5qkDUDAi7Kk= Subject key identifier: 2E:AE:CB:57:B7:DB:6F:A5:92:9F:06:C4:47:6F:D6:D8:E0:B2:0C:C9 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 0123 Signing time: Mon 21 Sep 2026 05:48:42 +0000 Manifest this update: Mon 21 Sep 2026 05:48:41 +0000 Manifest next update: Mon 28 Sep 2026 05:48:41 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: Sz+MAMTfT/D04kbcVPrT3Qf/E354aVhpgLr2ZbaRECo=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: pX32CYqIuCC9WIBfrCctEx/uwPxu80qncBmM35DD0HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Sep 21 05:48:41 2026 GMT Not After : Sep 28 05:48:41 2026 GMT Subject: CN=6ab0c539-7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:9e:2e:b2:7a:31:40:46:82:4a:bd:89:c9: 65:f5:76:93:85:1a:20:ae:3d:1f:ad:3e:83:22:65: 9c:e6:e0:7e:ba:ac:7b:12:63:96:1d:4d:c7:4c:55: fe:39:01:42:70:ff:1e:37:07:c8:3d:b1:b8:a8:86: 56:d6:0d:bd:0a:51:f0:8f:71:97:5c:31:ee:97:da: de:d1:54:9d:56:ae:53:be:ac:36:ef:00:e2:58:cb: eb:fa:71:b1:71:f1:2e:d2:09:d9:49:b6:1a:d3:82: 3f:fa:52:bd:60:d0:d5:4e:25:09:27:e4:71:a6:ba: f0:0d:2f:5d:08:fa:eb:fa:d1:cd:a2:09:bc:af:87: 20:0c:59:01:e0:7f:0c:20:23:8a:4f:22:ed:9a:87: ba:38:c7:b1:a1:48:81:fd:40:35:cf:8d:94:ec:55: b6:50:a1:e7:06:8f:44:47:73:6a:fb:a4:b1:47:ef: 54:c5:d0:42:73:6c:d8:ac:cb:3a:f3:4e:98:03:66: 4b:17:58:50:3a:67:73:bc:90:1b:60:87:42:ba:30: 56:b3:c2:5f:6e:56:b9:af:49:42:0e:d2:a5:ae:85: 35:85:f9:57:e4:66:fd:88:06:3f:d7:03:40:73:60: 1c:44:9a:5d:a0:e8:98:8d:18:a9:ef:a1:bb:fc:9e: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AE:CB:57:B7:DB:6F:A5:92:9F:06:C4:47:6F:D6:D8:E0:B2:0C:C9 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:43:17:55:ea:15:12:b6:14:9f:d6:1b:fc:b4:12:3f:08:d7: 2e:79:8a:68:51:dc:f5:61:c4:74:e5:51:06:06:4e:49:31:38: ef:89:27:cf:0d:cc:27:50:22:a1:ab:d8:d2:1d:11:70:12:34: 49:2e:64:13:ca:7d:32:96:32:76:b4:76:ac:45:30:32:9c:30: 95:78:ae:7e:10:63:e3:37:c5:4d:ce:46:b5:10:af:b9:38:af: 05:32:60:9e:41:3e:4c:16:91:03:4f:39:6b:12:b8:74:85:f6: 35:f8:90:f6:b1:b9:49:8d:54:2a:b5:52:f4:4d:1f:6e:2a:38: a2:09:a2:c4:5e:b3:ec:22:2c:43:98:ae:3f:de:93:b6:e9:a3: ee:6f:45:6b:ef:36:22:7e:af:44:04:33:d5:26:64:4d:ff:96: 95:21:77:24:2c:b7:85:bb:89:8c:25:92:f4:22:7e:34:26:47: 2d:1f:53:87:25:56:50:51:96:6d:39:6e:e7:fe:4e:78:5a:61: 2b:ed:8c:b0:7e:72:ab:f8:ae:46:44:ab:47:cb:3a:54:15:e8: 31:c4:f3:2a:9e:c6:a3:5e:88:04:05:b6:68:1a:d0:ea:b3:3f: 15:3c:65:17:b9:96:55:7a:2a:36:16:f9:57:de:22:7a:f0:b5: 8e:e9:67:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFREUxMTAvBgNVBAUTKDgwRkI1MjYzNkE5RTUwQzA4ODY4RTYyNzUyMEExQTBE OEE4N0YwNDYwHhcNMjYwOTIxMDU0ODQxWhcNMjYwOTI4MDU0ODQxWjAYMRYwFAYD VQQDEw02YWIwYzUzOS03Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWSeLrJ6MUBGgkq9icll9XaThRogrj0frT6DImWc5uB+uqx7EmOWHU3HTFX+ OQFCcP8eNwfIPbG4qIZW1g29ClHwj3GXXDHul9re0VSdVq5Tvqw27wDiWMvr+nGx cfEu0gnZSbYa04I/+lK9YNDVTiUJJ+RxprrwDS9dCPrr+tHNogm8r4cgDFkB4H8M ICOKTyLtmoe6OMexoUiB/UA1z42U7FW2UKHnBo9ER3Nq+6SxR+9UxdBCc2zYrMs6 806YA2ZLF1hQOmdzvJAbYIdCujBWs8Jfbla5r0lCDtKlroU1hflX5Gb9iAY/1wNA c2AcRJpdoOiYjRip76G7/J5EBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6uy1e3 22+lkp8GxEdv1tjgsgzJMB8GA1UdIwQYMBaAFID7UmNqnlDAiGjmJ1IKGg2Kh/BG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0VERS81OTA0RDk3MEZC NUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9nUHRTWTJxZVVNQ0lhT1luVWdvYURZcUg4 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0VERS81OTA0RDk3MEZCNUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9nUHRTWTJxZVVN Q0lhT1luVWdvYURZcUg4RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvEMXVeoVErYUn9Yb/LQSPwjXLnmKaFHc9WHEdOVRBgZOSTE474knzw3MJ1Ai oavY0h0RcBI0SS5kE8p9MpYydrR2rEUwMpwwlXiufhBj4zfFTc5GtRCvuTivBTJg nkE+TBaRA085axK4dIX2NfiQ9rG5SY1UKrVS9E0fbio4ogmixF6z7CIsQ5iuP96T tumj7m9Fa+82In6vRAQz1SZkTf+WlSF3JCy3hbuJjCWS9CJ+NCZHLR9ThyVWUFGW bTlu5/5OeFphK+2MsH5yq/iuRkSrR8s6VBXoMcTzKp7Go16IBAW2aBrQ6rM/FTxl F7mWVXoqNhb5V94ievC1julnFw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:29:37 2026 by rpki-client