$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: 20iyVdXgmRmZ47MtnFjL9kZuTtFoeiNVX6SGkZ5C9TE= Subject key identifier: 07:AD:18:35:04:AF:BC:45:57:CA:61:93:A2:1A:40:ED:9F:23:74:BD Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 017E Signing time: Fri 17 Apr 2026 04:19:08 +0000 Manifest this update: Fri 17 Apr 2026 04:19:08 +0000 Manifest next update: Fri 24 Apr 2026 04:19:08 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: iUd6kRz14IAjwF3c3vdgkElaFo4P6icbh2g4jMN9fv8=) 2: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: E/Bp+DLGRsM68zJIAcm7TyJqnOn+olB8QysLXRwz0bI=) 3: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: aYugIyHCZJwAmq9KTfLv5V2NclVJEThsuFyltYOyWPM=) 4: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: RetnXjaAIegseVpCIhrfkDQ+YhlmNRwZaGBLZrkdtzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Apr 17 04:19:08 2026 GMT Not After : Apr 24 04:19:08 2026 GMT Subject: CN=69e1b4bc-c192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:3c:27:3b:d0:6c:90:03:24:fc:da:bc:f9: 3c:c7:bc:26:67:f3:d1:41:73:f6:f9:d8:06:11:2e: b2:aa:9b:c1:2e:7d:2a:23:83:5c:f8:b9:a0:e6:f9: c6:61:0e:df:d2:6a:a9:56:0e:46:04:b4:4c:72:be: dd:1c:dc:17:c6:cb:92:12:6f:49:62:53:85:2e:f7: a4:a9:33:d0:11:d5:69:f9:84:3a:65:89:83:d3:bc: 0f:45:39:42:53:3a:bf:a0:d1:c4:67:13:8e:15:32: f9:6d:27:5a:75:31:f9:5a:fd:1c:a7:a3:7b:9c:eb: a1:df:61:69:79:d3:36:20:87:fa:a6:4e:ef:99:af: ea:0e:f5:d3:85:fb:d1:2a:61:6c:e4:a4:ba:0e:bb: a1:3a:e5:1d:d7:1d:65:85:f5:dc:70:b4:d8:e5:c2: c0:cf:21:8d:c5:5c:ca:11:6c:68:7e:1b:be:56:c2: 08:6a:b9:b1:7c:6f:01:b2:46:6b:a9:b1:38:b9:4d: 26:4a:ed:aa:4f:6d:5a:6f:1e:fd:a1:b7:95:ec:33: 12:01:b2:56:f7:63:6e:b0:1a:d6:1b:9d:9d:4f:cc: 5b:9e:a7:a7:d1:30:5b:db:f2:0a:62:db:01:2e:9d: 8c:48:d1:8f:ab:0b:01:99:7d:7d:07:ac:f4:2a:94: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:18:35:04:AF:BC:45:57:CA:61:93:A2:1A:40:ED:9F:23:74:BD X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:a6:3a:d6:a5:8a:c7:e5:6b:4b:46:8d:05:f8:82:fc:7d: c1:34:b0:cd:9c:bd:f3:ba:8a:62:bb:d2:a6:28:21:d6:a8:ae: 38:08:c1:8f:0e:a3:05:4c:05:33:f4:24:01:2f:76:df:d2:d9: 03:21:82:fe:1e:ed:b6:c7:bd:0f:93:c9:e8:28:af:ee:be:aa: b4:8a:a1:e1:dd:0a:48:ec:aa:de:a1:6e:81:05:8f:9a:83:55: 40:6b:0a:20:5f:f0:1e:73:70:78:c0:bd:2a:d3:48:96:24:c0: 2f:18:33:9d:48:74:ae:5d:f1:85:1c:07:2c:a6:ce:1d:42:97: d8:f5:bb:01:99:f9:89:cc:70:4d:45:ee:e7:b6:f1:8b:e2:3d: a5:39:27:01:22:93:a5:38:10:e8:c2:27:1b:3b:e9:70:a3:d1: ee:09:e8:5f:6e:8b:fc:d5:c2:26:9b:f2:46:89:df:6e:ba:3c: 53:bc:e4:a3:93:35:e4:a2:e9:74:07:bc:f5:af:12:06:55:ca: e2:d5:0f:e1:4c:a0:6e:05:18:ad:15:28:1f:c2:06:8e:d4:01: df:5e:b1:0f:cf:5a:f2:92:6a:db:fd:82:ce:5f:34:a3:6d:73: 01:1b:76:bf:52:dd:5d:6e:26:57:54:0c:30:66:9d:79:ec:ee: 0d:72:d2:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjYwNDE3MDQxOTA4WhcNMjYwNDI0MDQxOTA4WjAYMRYwFAYD VQQDEw02OWUxYjRiYy1jMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gI8JzvQbJADJPzavPk8x7wmZ/PRQXP2+dgGES6yqpvBLn0qI4Nc+Lmg5vnG YQ7f0mqpVg5GBLRMcr7dHNwXxsuSEm9JYlOFLvekqTPQEdVp+YQ6ZYmD07wPRTlC Uzq/oNHEZxOOFTL5bSdadTH5Wv0cp6N7nOuh32FpedM2IIf6pk7vma/qDvXThfvR KmFs5KS6DruhOuUd1x1lhfXccLTY5cLAzyGNxVzKEWxofhu+VsIIarmxfG8BskZr qbE4uU0mSu2qT21abx79obeV7DMSAbJW92NusBrWG52dT8xbnqen0TBb2/IKYtsB Lp2MSNGPqwsBmX19B6z0KpSdvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAetGDUE r7xFV8phk6IaQO2fI3S9MB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUaqmOtalisfla0tGjQX4gvx9wTSwzZy987qKYrvSpigh1qiuOAjBjw6jBUwF M/QkAS9239LZAyGC/h7ttse9D5PJ6Civ7r6qtIqh4d0KSOyq3qFugQWPmoNVQGsK IF/wHnNweMC9KtNIliTALxgznUh0rl3xhRwHLKbOHUKX2PW7AZn5icxwTUXu57bx i+I9pTknASKTpTgQ6MInGzvpcKPR7gnoX26L/NXCJpvyRonfbro8U7zko5M15KLp dAe89a8SBlXK4tUP4UygbgUYrRUoH8IGjtQB316xD89a8pJq2/2Czl80o21zARt2 v1LdXW4mV1QMMGadeezuDXLS7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 10:59:27 2026 by rpki-client