$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: za9fEE3jqIxASgoSNc8BIh+3QpURIoku07grsnee6dU= Subject key identifier: C2:63:85:42:30:20:49:21:AA:F7:F3:83:72:8C:44:17:49:E1:2C:E9 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 23B3 Signing time: Tue 06 Oct 2026 15:49:51 +0000 Manifest this update: Tue 06 Oct 2026 15:49:50 +0000 Manifest next update: Tue 13 Oct 2026 15:49:50 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: 4eYx6DUEN5VNjShdMQjg/qETaGLCKlLKzaox9Kl4CgQ=) 2: 07412A002D3111F1B77CD687BC833773.roa (hash: m3KakV6D8uqf1vPRe2G0m6SVTDUuzIzt+KLbrHZc+PI=) 3: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=) 4: 13DD1B662D3111F180CCA088BC833773.roa (hash: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9236 (0x2414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Oct 6 15:49:50 2026 GMT Not After : Oct 13 15:49:50 2026 GMT Subject: CN=6ac5189e-6c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:47:0f:b2:90:d1:c7:f1:e7:90:db:be:b6: 0c:5a:6b:96:0b:9a:b3:8f:60:0c:e5:e7:d6:b4:15: f1:70:7e:21:c0:da:2d:89:22:4b:53:dd:02:26:e5: 78:0d:6a:bf:6b:1c:97:39:3d:f3:f2:c3:c3:3d:22: 29:c6:07:37:48:fd:be:c0:06:b1:d4:68:40:f0:e1: 1a:86:21:cc:3a:db:a6:b1:c1:50:62:c3:96:b6:8f: 79:3b:e3:73:a3:09:27:db:9a:c0:db:71:b4:65:36: c3:d4:89:5d:32:2f:f9:5c:d1:de:81:5f:63:e6:1e: 3b:e1:86:a5:7e:3d:40:e7:9e:ed:e4:a2:44:11:5b: 32:7e:2f:e8:9a:7d:49:06:8d:e9:03:21:32:f8:5f: 22:5a:dd:0b:4a:04:ea:ab:c0:0b:e4:1d:5c:52:67: 6b:3d:46:c9:9c:65:1e:c7:00:3b:56:27:fe:e5:95: 71:94:02:53:7a:df:c1:7e:d8:54:5d:87:94:0d:0f: c7:42:c0:36:fc:7e:cf:e6:22:44:9d:a0:99:81:f3: 4f:07:29:b8:12:2e:5d:49:ff:cc:cb:40:be:9a:36: db:cc:2b:04:b4:0d:d8:49:71:5f:6f:4f:ce:12:71: a6:7c:31:77:6e:9e:f1:f1:55:38:3f:cd:b6:62:a3: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:85:42:30:20:49:21:AA:F7:F3:83:72:8C:44:17:49:E1:2C:E9 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:78:c1:a5:f0:24:44:86:5e:62:5e:22:01:67:f2:88:18:5c: 0c:c0:e3:c8:df:e6:ba:61:5d:03:bd:49:48:c2:42:6b:ac:44: d1:34:e7:93:6e:53:26:7c:e9:56:07:37:05:a6:c8:5c:42:6e: af:1b:89:73:e3:c3:9a:77:f6:1d:b9:2b:a5:93:af:c1:0d:52: 19:c6:58:1a:67:b5:17:41:21:47:99:0c:d9:a6:e7:6e:25:50: fc:a9:29:7c:fa:f7:09:19:35:2e:d4:10:91:ff:2a:b5:cb:84: df:90:48:93:32:38:89:ab:35:f1:e9:dc:8b:8d:14:1f:d0:f3: a0:87:8f:d1:08:9d:53:c8:7d:e8:d4:e3:ee:26:e6:cd:5b:7f: 0f:9d:da:8b:03:66:29:4b:6b:41:f9:e1:51:83:49:81:09:4d: 41:d6:ab:d9:cf:34:62:47:3d:1f:c8:b9:51:bb:ed:e6:10:89: af:8f:07:1f:db:f2:6a:96:ae:ea:b8:44:f1:c1:14:7d:41:fb: 4c:d0:6c:31:61:28:b1:1b:d1:6b:bc:36:35:01:51:6b:c5:3f: 82:b5:cd:d0:06:10:93:d8:05:96:78:27:07:91:ba:4f:2c:bf: a7:f4:d9:8c:62:5c:40:35:10:18:22:1c:37:34:3f:d5:c0:c3: 21:3f:d4:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjYxMDA2MTU0OTUwWhcNMjYxMDEzMTU0OTUwWjAYMRYwFAYD VQQDEw02YWM1MTg5ZS02YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxpHD7KQ0cfx55DbvrYMWmuWC5qzj2AM5efWtBXxcH4hwNotiSJLU90CJuV4 DWq/axyXOT3z8sPDPSIpxgc3SP2+wAax1GhA8OEahiHMOtumscFQYsOWto95O+Nz owkn25rA23G0ZTbD1IldMi/5XNHegV9j5h474Yalfj1A557t5KJEEVsyfi/omn1J Bo3pAyEy+F8iWt0LSgTqq8AL5B1cUmdrPUbJnGUexwA7Vif+5ZVxlAJTet/BfthU XYeUDQ/HQsA2/H7P5iJEnaCZgfNPBym4Ei5dSf/My0C+mjbbzCsEtA3YSXFfb0/O EnGmfDF3bp7x8VU4P822YqPiUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJjhUIw IEkhqvfzg3KMRBdJ4SzpMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXjBpfAkRIZeYl4iAWfyiBhcDMDjyN/mumFdA71JSMJCa6xE0TTnk25TJnzp Vgc3BabIXEJurxuJc+PDmnf2HbkrpZOvwQ1SGcZYGme1F0EhR5kM2abnbiVQ/Kkp fPr3CRk1LtQQkf8qtcuE35BIkzI4ias18enci40UH9DzoIeP0QidU8h96NTj7ibm zVt/D53aiwNmKUtrQfnhUYNJgQlNQdar2c80Ykc9H8i5Ubvt5hCJr48HH9vyapau 6rhE8cEUfUH7TNBsMWEosRvRa7w2NQFRa8U/grXN0AYQk9gFlngnB5G6Tyy/p/TZ jGJcQDUQGCIcNzQ/1cDDIT/UDw== -----END CERTIFICATE-----Generated at Thu Oct 8 16:24:15 2026 by rpki-client