$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft File: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft (raw, json) Hash identifier: QOx5YeqxQP4SO7ObsYAcOAKb0CBnPDF2hxeR8rlOgHg= Subject key identifier: 62:6B:F0:24:6A:83:58:3D:04:F3:C2:39:4A:86:8C:17:69:CA:13:5D Authority key identifier: 1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 Certificate issuer: /CN=A91E1EC4/serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft Manifest number: 05 Signing time: Mon 21 Sep 2026 09:15:10 +0000 Manifest this update: Mon 21 Sep 2026 09:15:09 +0000 Manifest next update: Mon 28 Sep 2026 09:15:09 +0000 Files and hashes: 1: G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl (hash: ocC4kQXdW1zRbCM9ykYy8mwLh5NXj011vaLrfcmrd4Q=) 2: 1BB9B9E8B1A211F1B29B34E27011F970.roa (hash: mo10WGZmq9tNwrK2xvFXV1zwqAuzUaWpjqL/A8EcvWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC4, serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Validity Not Before: Sep 21 09:15:09 2026 GMT Not After : Sep 28 09:15:09 2026 GMT Subject: CN=6ab0f59e-511f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:89:d4:69:ad:d2:02:c5:03:7d:f8:d3:7d: 98:44:8a:87:fb:f6:54:5b:2b:03:dd:fd:e3:dc:0e: f7:09:08:47:d7:0f:72:20:21:e0:0d:06:f9:78:2e: d7:5e:d1:54:8d:9d:58:0f:42:00:b6:10:c8:d0:45: c1:09:dd:7a:ee:bd:09:4b:21:25:ee:da:58:08:f1: 43:13:07:1b:fb:a4:b0:a2:6d:90:27:b4:96:54:64: 79:6a:f4:2d:4c:e6:1f:49:2a:38:e1:9f:99:f5:4c: 92:db:33:fc:cc:57:4a:41:b1:51:3b:1f:7c:79:d2: ed:83:c4:02:a5:4d:b0:63:e1:6f:b4:98:50:7b:8b: ff:64:cd:2e:2f:97:53:c1:3d:ad:dc:c1:fc:2c:07: 39:fe:e6:21:21:71:0c:b9:8a:44:ba:fe:fe:c5:79: f8:de:7d:cd:07:c1:0e:c6:c4:30:e8:37:37:f6:36: 80:5d:94:59:1b:5b:1d:2a:8a:3d:13:d5:14:40:0b: ed:63:17:14:86:fe:f5:38:b6:05:78:32:16:de:a8: a3:6f:16:80:73:e9:b6:b4:4a:33:44:52:19:b3:0d: 7d:2b:5e:0e:b4:58:7c:a0:c1:de:2d:06:aa:d4:92: df:80:7d:0d:78:c7:ba:fc:02:4d:c9:e4:c5:89:bd: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6B:F0:24:6A:83:58:3D:04:F3:C2:39:4A:86:8C:17:69:CA:13:5D X509v3 Authority Key Identifier: keyid:1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4e:f6:d4:a9:28:6b:dc:b8:18:66:ec:46:f9:f3:04:c1:a5: 2a:ba:48:84:19:23:95:82:63:ec:ab:b2:46:21:29:72:02:0a: aa:a3:15:34:df:51:1f:f2:5e:b3:36:23:e6:a8:7f:03:d3:ce: 31:81:be:5d:8e:6b:47:36:ab:28:9a:4a:23:44:52:c1:42:c2: c7:86:38:02:df:07:aa:0a:35:aa:1d:ae:b8:7c:8b:bd:31:90: cd:f4:c3:e3:2d:b9:b8:92:f0:41:8a:a3:7e:89:f1:64:6a:2e: ed:55:0e:22:61:82:06:a6:63:bc:89:c4:97:a1:0c:ff:53:5e: 42:fb:97:5e:0f:67:70:36:37:b3:fd:a2:ee:a0:af:e5:ca:e7: 2e:e6:fb:27:25:3c:a1:bc:5b:f2:0a:8d:69:99:e2:3a:12:1f: 3d:a2:90:95:3b:ee:8f:be:3e:ce:3e:f8:90:76:ac:88:08:83: 4c:79:4a:54:c6:34:3b:66:f3:18:d6:98:09:7e:77:ef:d1:f7: 81:5f:31:d2:a8:3f:2b:92:c0:26:9e:f8:46:56:2c:62:4c:49: f3:67:6d:83:5b:ab:03:68:f8:09:61:4a:5b:8a:57:4a:e0:da: dc:0c:75:94:cb:7b:21:ce:f3:25:d3:8a:c5:d9:71:1d:00:c2: eb:ae:8a:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDNDExMC8GA1UEBRMoMUI3MjgxOTdEMTM2NjMxNEE2NkVEMEJGRjMxRUU5NTJE REMxMTdCNjAeFw0yNjA5MjEwOTE1MDlaFw0yNjA5MjgwOTE1MDlaMBgxFjAUBgNV BAMTDTZhYjBmNTllLTUxMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/0YnUaa3SAsUDffjTfZhEiof79lRbKwPd/ePcDvcJCEfXD3IgIeANBvl4Ltde 0VSNnVgPQgC2EMjQRcEJ3XruvQlLISXu2lgI8UMTBxv7pLCibZAntJZUZHlq9C1M 5h9JKjjhn5n1TJLbM/zMV0pBsVE7H3x50u2DxAKlTbBj4W+0mFB7i/9kzS4vl1PB Pa3cwfwsBzn+5iEhcQy5ikS6/v7Fefjefc0HwQ7GxDDoNzf2NoBdlFkbWx0qij0T 1RRAC+1jFxSG/vU4tgV4MhbeqKNvFoBz6ba0SjNEUhmzDX0rXg60WHygwd4tBqrU kt+AfQ14x7r8Ak3J5MWJvfCXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYmvwJGqD WD0E88I5SoaMF2nKE10wHwYDVR0jBBgwFoAUG3KBl9E2YxSmbtC/8x7pUt3BF7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUM0LzYyQzFDRUUwQjFB MDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhTbWJ0Q184eDdwVXQzQkY3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzNLQmw5RTJZeFNtYnRDXzh4N3BVdDNCRjdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUM0LzYyQzFDRUUwQjFBMDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhT bWJ0Q184eDdwVXQzQkY3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGTvbUqShr3LgYZuxG+fMEwaUqukiEGSOVgmPsq7JGISlyAgqqoxU031Ef8l6z NiPmqH8D084xgb5djmtHNqsomkojRFLBQsLHhjgC3weqCjWqHa64fIu9MZDN9MPj Lbm4kvBBiqN+ifFkai7tVQ4iYYIGpmO8icSXoQz/U15C+5deD2dwNjez/aLuoK/l yucu5vsnJTyhvFvyCo1pmeI6Eh89opCVO+6Pvj7OPviQdqyICINMeUpUxjQ7ZvMY 1pgJfnfv0feBXzHSqD8rksAmnvhGVixiTEnzZ22DW6sDaPgJYUpbildK4NrcDHWU y3shzvMl04rF2XEdAMLrrooH -----END CERTIFICATE-----Generated at Mon Sep 21 17:09:23 2026 by rpki-client