$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: w70dLmHdFmcQYHe7spJenvUqulWJWKEd1PicChSpIgU= Subject key identifier: 1D:C7:BA:9E:FC:BD:A5:9D:41:3B:22:B6:01:EB:8E:C8:EE:16:C5:FF Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 0164 Signing time: Sun 01 Mar 2026 05:54:27 +0000 Manifest this update: Sun 01 Mar 2026 05:54:26 +0000 Manifest next update: Sun 08 Mar 2026 05:54:26 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: MIQbVi/VrzREyQLg8Y21zK3JCyo7Vpnquv89P9gzKkQ=) 2: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 4: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Mar 1 05:54:26 2026 GMT Not After : Mar 8 05:54:26 2026 GMT Subject: CN=69a3d493-a3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:ee:e7:86:6d:90:a8:14:93:a0:88:c9:da: 2e:98:b2:be:79:a9:9c:09:a9:15:a2:62:94:0f:0e: 21:c6:58:a1:78:a4:b5:2d:dc:bf:2f:0c:54:da:9b: ed:6f:c2:d9:ca:b0:75:47:50:2f:e4:85:cb:61:1f: 6b:9a:69:d0:ce:1d:07:b0:95:87:0f:8f:a6:3b:73: 13:55:8c:4d:57:30:84:1a:71:b5:e9:cf:46:62:3a: 35:36:55:6b:c8:d3:49:91:cc:01:c2:23:7a:d7:5e: 8a:92:c5:30:ec:d4:e1:5b:73:b0:40:6b:0e:cb:e3: b1:fe:b2:24:36:b3:d9:20:ac:42:3c:c0:65:21:ad: 68:5b:ea:92:31:33:e2:f0:5b:dd:2e:df:21:fd:f6: 33:b5:f5:2d:b0:aa:d0:51:60:dd:9e:a7:4a:6f:25: b6:34:a4:a3:4f:cc:1b:8c:93:a9:74:38:21:78:31: 68:f0:bb:80:92:33:95:d3:26:d5:52:77:a7:cb:50: df:17:78:0c:0b:06:b9:23:22:4c:58:a5:ba:36:4a: 8b:33:13:31:7a:34:27:11:b4:5b:4b:67:73:1c:8f: c0:5f:54:6b:7f:c1:e7:b1:04:fe:f7:80:59:eb:ba: cc:0f:4c:74:91:33:ac:ee:02:23:80:ee:74:e1:0c: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:BA:9E:FC:BD:A5:9D:41:3B:22:B6:01:EB:8E:C8:EE:16:C5:FF X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:69:a2:84:59:1a:fa:42:c3:e9:b9:4b:6a:41:4e:d7:73:1d: 0c:7c:10:01:40:b7:2a:55:75:c0:de:57:2a:53:df:e9:80:33: 19:36:7d:8e:be:b3:67:bd:94:34:7d:c0:26:f4:e2:1f:76:78: 5b:80:e2:07:8f:a1:02:1b:29:b3:6c:aa:9c:61:a4:a6:3c:b4: 1a:94:6b:c2:40:7e:e4:93:fd:a9:a3:22:2d:bc:ed:b3:d2:a6: 77:5f:b1:40:04:fd:df:be:59:15:1c:51:79:59:2c:33:e2:06: 64:ad:eb:e2:05:b6:69:14:89:7b:b7:8c:f3:ba:05:eb:42:76: d2:f4:fc:32:61:70:60:be:00:19:5a:86:70:bb:03:10:ff:79: 01:1d:c9:12:a3:a0:64:cd:fc:0a:f1:d7:6b:7c:ea:66:30:08: bd:39:24:9c:cc:3f:b7:03:dd:ac:f5:dc:5c:80:74:6a:48:7e: a8:eb:63:9e:53:46:ea:0f:ac:8f:79:19:92:42:57:1f:ea:8c: 63:f0:0d:f0:f1:21:f9:f4:c1:79:51:d2:07:b9:4f:1a:42:70: cd:84:45:53:e5:c3:5b:30:e9:e6:db:48:b5:17:2c:f1:af:bd: f7:6d:24:bb:da:4c:bf:36:bc:68:0c:ee:df:c7:8e:a5:86:e9: bc:b8:2b:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjYwMzAxMDU1NDI2WhcNMjYwMzA4MDU1NDI2WjAYMRYwFAYD VQQDEw02OWEzZDQ5My1hM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZXu54ZtkKgUk6CIydoumLK+eamcCakVomKUDw4hxliheKS1Ldy/LwxU2pvt b8LZyrB1R1Av5IXLYR9rmmnQzh0HsJWHD4+mO3MTVYxNVzCEGnG16c9GYjo1NlVr yNNJkcwBwiN6116KksUw7NThW3OwQGsOy+Ox/rIkNrPZIKxCPMBlIa1oW+qSMTPi 8FvdLt8h/fYztfUtsKrQUWDdnqdKbyW2NKSjT8wbjJOpdDgheDFo8LuAkjOV0ybV Uneny1DfF3gMCwa5IyJMWKW6NkqLMxMxejQnEbRbS2dzHI/AX1Rrf8HnsQT+94BZ 67rMD0x0kTOs7gIjgO504QyHWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3Hup78 vaWdQTsitgHrjsjuFsX/MB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2mihFka+kLD6blLakFO13MdDHwQAUC3KlV1wN5XKlPf6YAzGTZ9jr6zZ72U NH3AJvTiH3Z4W4DiB4+hAhsps2yqnGGkpjy0GpRrwkB+5JP9qaMiLbzts9Kmd1+x QAT9375ZFRxReVksM+IGZK3r4gW2aRSJe7eM87oF60J20vT8MmFwYL4AGVqGcLsD EP95AR3JEqOgZM38CvHXa3zqZjAIvTkknMw/twPdrPXcXIB0akh+qOtjnlNG6g+s j3kZkkJXH+qMY/AN8PEh+fTBeVHSB7lPGkJwzYRFU+XDWzDp5ttItRcs8a+9920k u9pMvza8aAzu38eOpYbpvLgrAw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:52 2026 by rpki-client