$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json) Hash identifier: CvLBIL6vFcFZUxRc6m/AMgbnJyCPG23ji8oZosw5j+g= Subject key identifier: 37:CA:A4:DC:D5:E8:12:83:2C:C6:AF:CB:46:1C:41:96:67:E5:AA:9C Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft Manifest number: 0130 Signing time: Sun 01 Mar 2026 06:34:29 +0000 Manifest this update: Sun 01 Mar 2026 06:34:28 +0000 Manifest next update: Sun 08 Mar 2026 06:34:28 +0000 Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: DIGJWrjEiQlYXrSupMg82w8Kymug4HDg05n0NmeYkI8=) 2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: jzoVyxuaF8H22GAKHFkN3U0Almymg0ldFygN98Pdkkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Validity Not Before: Mar 1 06:34:28 2026 GMT Not After : Mar 8 06:34:28 2026 GMT Subject: CN=69a3ddf5-e30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:5b:5a:0b:b0:93:cd:57:2e:51:ac:c4:47: 38:ce:f7:86:73:74:29:cf:7e:c4:6c:65:ab:15:fe: 99:68:87:e0:32:cf:ac:ee:b9:dd:2c:cf:d2:47:a8: 67:d2:65:05:93:62:c4:60:8d:aa:69:d2:e3:19:1d: da:c9:2b:71:6d:5f:ac:d0:67:2b:6d:f1:23:0c:46: fc:11:3a:c2:86:20:ff:cd:8e:f6:f6:5c:06:9f:75: 99:4e:6e:59:c7:ce:fe:0b:02:b7:ac:97:71:22:c4: 92:18:da:d3:7a:53:61:34:f3:c8:be:e6:59:68:26: 88:32:da:2f:7d:e4:1e:40:ba:1b:92:55:04:4a:cb: 16:e0:5d:e2:bd:4e:5f:30:75:94:d4:67:c8:aa:c1: 36:c8:0b:4b:cf:e7:78:5b:eb:b7:a0:c0:b8:00:a1: d6:76:da:a2:81:50:5a:ea:d6:87:7b:24:63:19:0a: d6:af:1f:81:bd:99:3e:8f:d3:18:61:69:92:9a:2f: 6e:44:dd:bd:58:9c:81:aa:ae:00:9c:f9:18:e1:20: cd:93:5e:7a:23:da:55:27:f8:f1:7b:8a:4b:8f:2a: 4e:23:32:ce:35:79:28:ae:fa:df:b8:8d:a3:c6:03: 02:e7:ec:b5:a4:ac:34:bb:ad:f1:0e:02:e7:01:7b: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CA:A4:DC:D5:E8:12:83:2C:C6:AF:CB:46:1C:41:96:67:E5:AA:9C X509v3 Authority Key Identifier: keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9e:16:68:9a:95:ce:99:bf:62:c0:59:12:87:c7:01:a3:29: bb:6e:f3:98:fc:50:a8:2d:e0:83:2a:15:42:30:c1:e2:8e:9d: e8:3a:77:d0:31:7a:f2:c6:a7:3f:24:e9:31:fb:44:56:7f:38: 85:02:94:0c:4b:8b:a5:47:1e:2f:4f:4e:82:2e:58:6e:d0:7a: 51:02:2f:d0:85:66:08:40:a2:dc:cb:4f:0e:ca:cb:88:b3:5a: 65:14:d3:d4:ea:84:5f:a2:73:e3:34:99:d9:c3:69:ea:86:0a: f4:f8:f7:31:eb:68:31:6f:d3:84:b5:f1:c0:f2:18:21:df:b1: 31:e2:9d:2e:1a:91:bb:ea:9b:c1:bd:07:b4:53:92:86:43:39: eb:58:95:0d:f2:b3:e1:db:ef:45:11:6a:9d:b8:d3:fc:27:12: b7:53:8a:07:6e:52:f6:4f:94:b8:27:3d:d0:b5:0c:7d:03:97: 5e:f1:60:f0:5b:77:51:dc:dd:3c:ad:9c:b7:2a:6e:d4:1e:ef: 35:81:b8:ae:4d:37:d7:c6:b1:d5:6b:d9:56:ac:04:a4:a7:bb: 26:14:be:e5:31:3a:e9:95:fb:1b:e4:6f:79:13:4a:b7:80:fc: 51:aa:be:77:5f:83:a8:e5:72:fb:6b:2e:25:11:49:e6:91:58: c7:2c:48:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKDgwRTkyNzVCNkU2RUJDNkFENzU4NUQ3NkFGQjZBNDAw QjUxNDJDM0YwHhcNMjYwMzAxMDYzNDI4WhcNMjYwMzA4MDYzNDI4WjAYMRYwFAYD VQQDEw02OWEzZGRmNS1lMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7lbWguwk81XLlGsxEc4zveGc3Qpz37EbGWrFf6ZaIfgMs+s7rndLM/SR6hn 0mUFk2LEYI2qadLjGR3ayStxbV+s0GcrbfEjDEb8ETrChiD/zY729lwGn3WZTm5Z x87+CwK3rJdxIsSSGNrTelNhNPPIvuZZaCaIMtovfeQeQLobklUESssW4F3ivU5f MHWU1GfIqsE2yAtLz+d4W+u3oMC4AKHWdtqigVBa6taHeyRjGQrWrx+BvZk+j9MY YWmSmi9uRN29WJyBqq4AnPkY4SDNk156I9pVJ/jxe4pLjypOIzLONXkorvrfuI2j xgMC5+y1pKw0u63xDgLnAXsrQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfKpNzV 6BKDLMavy0YcQZZn5aqcMB8GA1UdIwQYMBaAFIDpJ1tubrxq11hddq+2pAC1FCw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9DQ0U5OUQ3RTQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZHclhXRjEycjdha0FMVVVM RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dPa25XMjV1dkdyWFdGMTJyN2FrQUxVVUxEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9DQ0U5OUQ3RTQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZH clhXRjEycjdha0FMVVVMRDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI54WaJqVzpm/YsBZEofHAaMpu27zmPxQqC3ggyoVQjDB4o6d6Dp30DF68san PyTpMftEVn84hQKUDEuLpUceL09Ogi5YbtB6UQIv0IVmCECi3MtPDsrLiLNaZRTT 1OqEX6Jz4zSZ2cNp6oYK9Pj3MetoMW/ThLXxwPIYId+xMeKdLhqRu+qbwb0HtFOS hkM561iVDfKz4dvvRRFqnbjT/CcSt1OKB25S9k+UuCc90LUMfQOXXvFg8Ft3Udzd PK2ctypu1B7vNYG4rk0318ax1WvZVqwEpKe7JhS+5TE66ZX7G+RveRNKt4D8Uaq+ d1+DqOVy+2suJRFJ5pFYxyxITg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:33 2026 by rpki-client