$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: 2ozAC6Sl1E3no0qfe/WWvuRw66gRrQKRyBKKjCfQ5BM= Subject key identifier: 27:97:54:58:9D:24:A2:89:58:17:8D:EE:0B:6B:C3:38:5F:DD:E8:6D Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 07:33:38 +0000 Manifest this update: Fri 17 Apr 2026 07:33:37 +0000 Manifest next update: Fri 24 Apr 2026 07:33:37 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: lA63Q1QlUTRIbDvsta+//CdPllA/6eqzqpEIj0UBebQ=) 2: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=) 3: EDD3FAACDB0A11F0AAAD2E0882D3641D.roa (hash: LVil25DNmm0Bpb6PzKwGKWoAwCQGcCkt4YTKOpr3JSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Apr 17 07:33:37 2026 GMT Not After : Apr 24 07:33:37 2026 GMT Subject: CN=69e1e252-04be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:1b:b8:5d:ad:f1:08:6a:1a:a4:f5:68:70: bf:a9:e8:17:d7:ca:14:6f:22:27:eb:ce:fe:f1:bd: cd:9b:cc:a0:94:79:19:c0:fd:96:90:cc:d8:5a:69: d2:4c:31:1f:91:0b:60:51:0a:64:e9:28:7f:28:b5: 79:54:8b:e1:43:08:41:c8:b9:aa:2e:a2:b6:d0:d7: 03:25:90:9f:33:b0:a9:e2:8f:81:ae:ef:ec:70:72: 41:6c:9c:44:a0:aa:81:06:89:6a:aa:25:11:d6:33: 86:78:d2:67:ca:38:d3:40:ce:f3:2f:e7:bd:bc:15: b1:30:86:e8:6a:3c:4a:ba:26:e9:42:2f:25:dd:9f: fd:c2:35:d7:6b:0d:d2:a7:bf:88:e7:15:0c:6d:28: 3a:2b:5a:54:3e:0b:a4:db:ff:4a:cf:5e:0a:b2:65: 22:09:08:d3:08:94:1d:2a:ca:e0:7c:13:67:d6:d8: 44:f6:61:4f:56:17:59:86:5e:2c:69:90:87:ee:9c: 6c:25:d5:00:fc:3f:47:bf:ba:a4:e9:a8:11:f6:cc: de:55:bc:bb:72:5a:d3:59:ae:6c:72:bb:e2:0a:c7: 38:1a:0b:10:ed:47:0b:24:50:10:17:28:97:43:6e: f1:c4:e7:e4:7c:60:c0:35:5c:34:a5:e2:cf:70:cb: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:97:54:58:9D:24:A2:89:58:17:8D:EE:0B:6B:C3:38:5F:DD:E8:6D X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e9:f7:da:29:aa:56:4c:06:e3:d2:32:ba:f4:52:91:7d:a3: 37:a7:92:b8:3a:df:87:49:21:64:e9:0a:74:ce:24:c7:e6:c1: ad:82:2e:aa:e8:23:49:28:e1:3f:dc:74:e1:8f:a4:0f:4f:13: 2e:9e:ac:c0:df:a6:f6:d8:83:72:ad:2c:fc:b2:83:73:3e:89: 78:83:1c:0c:16:79:ba:78:17:45:a6:12:b8:12:49:ff:f8:61: cc:d2:6c:25:a3:f6:55:f1:85:32:52:3e:31:ce:20:55:c0:26: 0d:0c:54:42:e0:6d:76:d6:e1:9b:52:6a:9c:7b:6a:74:53:39: 96:5f:44:c0:6c:d3:e3:ed:ac:5f:35:d5:7f:e1:d4:f5:92:33: d0:ce:c8:e7:ae:db:73:bd:82:3a:ef:d9:1f:c8:af:6d:44:de: 89:62:a6:a5:b9:6e:71:27:7c:06:ee:ec:1f:34:46:8d:7f:7d: 8a:87:ee:2d:dd:50:23:78:ec:93:a9:10:97:ce:ef:e9:01:dd: c8:7f:48:07:9d:9a:e5:e3:0a:f2:e8:c1:1f:a3:f6:fb:12:e2: 08:2a:5b:15:85:66:a4:e1:2f:28:4b:2c:e2:57:ef:39:5c:21: f8:33:6f:52:b9:5f:13:2e:8c:2c:4a:1d:58:ea:75:e7:8c:0f: f5:c6:81:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEyNEI1MTA3QzQ0 MDU3M0M2MzAeFw0yNjA0MTcwNzMzMzdaFw0yNjA0MjQwNzMzMzdaMBgxFjAUBgNV BAMTDTY5ZTFlMjUyLTA0YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQpBu4Xa3xCGoapPVocL+p6BfXyhRvIifrzv7xvc2bzKCUeRnA/ZaQzNhaadJM MR+RC2BRCmTpKH8otXlUi+FDCEHIuaouorbQ1wMlkJ8zsKnij4Gu7+xwckFsnESg qoEGiWqqJRHWM4Z40mfKONNAzvMv5728FbEwhuhqPEq6JulCLyXdn/3CNddrDdKn v4jnFQxtKDorWlQ+C6Tb/0rPXgqyZSIJCNMIlB0qyuB8E2fW2ET2YU9WF1mGXixp kIfunGwl1QD8P0e/uqTpqBH2zN5VvLtyWtNZrmxyu+IKxzgaCxDtRwskUBAXKJdD bvHE5+R8YMA1XDSl4s9wy5arAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ5dUWJ0k oolYF43uC2vDOF/d6G0wHwYDVR0jBBgwFoAUGOkpeh8aGMuHmn4SS1EHxEBXPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1LzZCNjY2OTBBOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR09rcGVoOGFHTXVIbW40U1MxRUh4RUJYUEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011 SG1uNFNTMUVIeEVCWFBHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAL6ffaKapWTAbj0jK69FKRfaM3p5K4Ot+HSSFk6Qp0ziTH5sGtgi6q6CNJKOE/ 3HThj6QPTxMunqzA36b22INyrSz8soNzPol4gxwMFnm6eBdFphK4Ekn/+GHM0mwl o/ZV8YUyUj4xziBVwCYNDFRC4G121uGbUmqce2p0UzmWX0TAbNPj7axfNdV/4dT1 kjPQzsjnrttzvYI679kfyK9tRN6JYqaluW5xJ3wG7uwfNEaNf32Kh+4t3VAjeOyT qRCXzu/pAd3If0gHnZrl4wry6MEfo/b7EuIIKlsVhWak4S8oSyziV+85XCH4M29S uV8TLowsSh1Y6nXnjA/1xoFs -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:43 2026 by rpki-client