$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: pw8mfvoi3+AXFI/ultAMiLJGq5A760hwHKBTsaECNF4= Subject key identifier: 2D:CD:0A:1D:0D:46:FF:EE:E4:61:96:C4:FB:AE:B4:DF:62:2C:6B:B2 Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: C7 Signing time: Mon 21 Sep 2026 06:52:22 +0000 Manifest this update: Mon 21 Sep 2026 06:52:21 +0000 Manifest next update: Mon 28 Sep 2026 06:52:21 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: fWis8hzqGdOMQwTqxX8+r93JWTsVb6I95SL+yTl+8fE=) 2: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) 3: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Sep 21 06:52:21 2026 GMT Not After : Sep 28 06:52:21 2026 GMT Subject: CN=6ab0d426-41f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:d4:c0:c7:78:70:cd:af:c5:6c:7d:ee:e9: c9:82:62:1d:62:2c:af:a6:e6:c1:47:1a:0c:9e:be: e6:cc:81:35:88:26:20:66:f6:8f:9b:28:ef:b3:5e: 30:06:54:11:cc:70:3c:9c:4e:9a:00:ef:e4:d7:80: a8:09:30:41:8b:86:a9:7f:c3:a5:99:b1:7f:28:d8: d5:62:6b:c5:db:3a:d3:31:aa:12:b7:f2:1f:5c:fc: 33:70:5e:1e:ca:02:87:d7:38:b9:5e:19:02:db:7c: 83:39:7d:88:cf:b1:bc:37:0c:13:ed:01:a6:e7:d6: c2:ff:27:84:b3:cf:27:39:e2:bf:25:a4:92:cf:c7: ab:79:c8:f1:67:4c:30:1c:fd:40:aa:63:d0:c9:8f: 61:ea:21:fd:25:da:0d:b2:ad:2f:d5:a8:25:05:de: fc:75:98:96:c4:a9:d3:41:42:b8:81:3a:1e:34:cd: 8e:e4:33:68:2a:32:3f:19:a9:98:6e:be:c6:24:f6: 38:59:19:ae:5d:6e:93:81:83:c8:88:94:5f:7e:32: ae:50:36:b2:0b:99:8a:a5:af:b5:75:80:a7:d3:9f: ce:94:f1:09:3b:b5:cc:13:2f:c1:40:f7:2f:67:9b: bb:5f:b9:e4:33:d4:44:2b:63:17:3f:b4:6d:ca:c5: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:0A:1D:0D:46:FF:EE:E4:61:96:C4:FB:AE:B4:DF:62:2C:6B:B2 X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:7e:9f:36:8d:b5:f2:2c:e8:91:c0:1f:c1:c7:63:a3:8d:11: f0:42:09:f1:84:47:c7:fb:52:69:53:75:af:8a:83:ed:97:5a: 67:6c:26:d1:80:90:78:5d:67:97:51:d4:b5:17:e2:ae:6e:79: 94:27:0a:88:22:0c:1c:e8:40:0a:52:e5:b8:67:af:44:68:04: f8:a2:d3:51:e8:94:6f:1a:14:6d:de:da:64:d5:1e:d8:cf:48: 6a:95:7f:df:0a:87:1c:1b:6a:b6:bd:6b:aa:c1:ce:bb:6e:cd: 3b:dd:53:c6:97:a6:00:a3:a7:d4:61:9b:aa:10:ee:77:a8:9c: 20:a5:58:a8:b5:a4:6f:ea:a6:49:e3:c5:ac:dc:37:2e:2a:f1: 23:f9:7b:6b:f6:36:b6:00:3c:92:f1:8d:47:75:36:c1:ec:9f: f9:93:8a:e7:2f:15:07:69:16:f3:24:1d:96:13:f7:39:c1:c8: 3c:f8:fe:dc:9f:49:19:a0:27:c5:ac:78:03:db:8c:a5:a7:83: 3f:b3:93:2a:d8:ae:4e:79:2b:31:cf:62:b2:89:96:b0:17:a3: 60:0e:8c:6e:b4:59:e2:89:da:cf:4a:18:d7:16:63:8e:99:9d: a8:a5:d7:59:5f:b1:41:9f:4a:b3:b7:e1:9e:70:9c:9e:f2:f3: 17:b9:05:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxOTUxMTAvBgNVBAUTKDE4RTkyOTdBMUYxQTE4Q0I4NzlBN0UxMjRCNTEwN0M0 NDA1NzNDNjMwHhcNMjYwOTIxMDY1MjIxWhcNMjYwOTI4MDY1MjIxWjAYMRYwFAYD VQQDEw02YWIwZDQyNi00MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn93UwMd4cM2vxWx97unJgmIdYiyvpubBRxoMnr7mzIE1iCYgZvaPmyjvs14w BlQRzHA8nE6aAO/k14CoCTBBi4apf8OlmbF/KNjVYmvF2zrTMaoSt/IfXPwzcF4e ygKH1zi5XhkC23yDOX2Iz7G8NwwT7QGm59bC/yeEs88nOeK/JaSSz8erecjxZ0ww HP1AqmPQyY9h6iH9JdoNsq0v1aglBd78dZiWxKnTQUK4gToeNM2O5DNoKjI/GamY br7GJPY4WRmuXW6TgYPIiJRffjKuUDayC5mKpa+1dYCn05/OlPEJO7XMEy/BQPcv Z5u7X7nkM9REK2MXP7RtysWzVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3NCh0N Rv/u5GGWxPuutN9iLGuyMB8GA1UdIwQYMBaAFBjpKXofGhjLh5p+EktRB8RAVzxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjE5NS82QjY2NjkwQTkz OEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdNdUhtbjRTUzFFSHhFQlhQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS82QjY2NjkwQTkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9HT2twZWg4YUdN dUhtbjRTUzFFSHhFQlhQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2X6fNo218izokcAfwcdjo40R8EIJ8YRHx/tSaVN1r4qD7ZdaZ2wm0YCQeF1n l1HUtRfirm55lCcKiCIMHOhAClLluGevRGgE+KLTUeiUbxoUbd7aZNUe2M9IapV/ 3wqHHBtqtr1rqsHOu27NO91TxpemAKOn1GGbqhDud6icIKVYqLWkb+qmSePFrNw3 LirxI/l7a/Y2tgA8kvGNR3U2weyf+ZOK5y8VB2kW8yQdlhP3OcHIPPj+3J9JGaAn xax4A9uMpaeDP7OTKtiuTnkrMc9isomWsBejYA6MbrRZ4onaz0oY1xZjjpmdqKXX WV+xQZ9Ks7fhnnCcnvLzF7kF5w== -----END CERTIFICATE-----Generated at Tue Sep 22 09:41:41 2026 by rpki-client