$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: +1E97mJJMmJTlLJr0xuHSrJcnOLcx81MWimwqwvnC+k= Subject key identifier: D3:38:0B:DF:82:C9:10:CF:35:D0:30:8E:B9:42:F2:85:48:35:C8:23 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 0A33 Signing time: Mon 02 Mar 2026 00:44:19 +0000 Manifest this update: Mon 02 Mar 2026 00:44:17 +0000 Manifest next update: Mon 09 Mar 2026 00:44:17 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: zoPi72byWWsgus3MrmFf4fafcP5hFlx3KHISukDP0Wo=) 2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: EUoTZeexjkbb7zufCQtahAm8AEeFMiE7APDK7et0hJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Mar 2 00:44:17 2026 GMT Not After : Mar 9 00:44:17 2026 GMT Subject: CN=69a4dd62-8448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:9c:cd:bd:35:29:5e:81:2e:c2:61:ca:69: 7b:fc:46:fe:83:54:0d:a0:b9:36:3b:90:52:d4:44: 96:35:53:db:25:a7:d3:f7:2c:18:00:1e:b4:53:3e: 2e:a3:07:ee:74:12:e0:b6:e0:36:4c:00:a6:9f:b3: db:61:49:b3:e3:08:df:be:83:50:4c:03:d5:94:c1: fb:7f:cb:4f:45:21:75:3d:ab:7a:49:4f:eb:a2:e0: 60:39:77:24:2b:9b:4a:2d:cb:7b:cb:ab:3c:8a:7a: 26:a5:fc:3f:71:c2:8e:73:5b:e3:ef:04:e8:63:ac: a3:9c:a9:ee:43:cc:1d:38:cf:f7:16:32:43:6e:cd: fa:be:07:4d:83:60:e0:fb:51:0a:fc:01:c0:10:df: 5b:2c:fc:ca:4e:ec:ec:03:16:5e:b4:ef:f5:f8:96: 5e:81:6d:50:f6:1f:8b:99:d7:d3:23:ff:31:a9:ec: 00:3b:3c:f4:64:4a:6b:da:a0:aa:5b:5c:bf:ad:2a: 80:47:1e:dd:a1:59:6f:28:81:a5:75:87:ea:b2:63: 22:82:2a:49:83:16:25:2e:a2:36:1a:dc:28:de:34: fe:14:bf:f4:d6:bb:ce:5a:9e:e5:51:06:12:3c:75: 6a:0f:ba:84:00:9a:65:d8:b6:25:10:cb:6f:18:4e: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:0B:DF:82:C9:10:CF:35:D0:30:8E:B9:42:F2:85:48:35:C8:23 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8b:68:98:1a:9a:20:38:a4:ab:24:2a:a4:5f:64:b8:1a:ce: c0:7d:b1:d1:4c:b7:76:96:ec:80:46:2a:a3:a3:73:68:9d:84: 42:ec:3c:39:4c:80:f7:e9:bd:ec:da:11:22:56:04:35:6e:de: 37:0e:5e:2f:8d:5f:14:38:e4:05:8c:48:6a:0e:67:21:ea:1c: e0:fd:7f:f2:cc:b1:84:50:6d:a4:ce:76:9d:dc:4e:c2:13:64: 5d:85:52:0a:8a:ef:3a:3a:d6:16:6e:80:16:34:3c:0f:5d:dc: 85:61:a8:19:9d:0e:91:c4:20:18:e4:86:eb:ca:84:cf:06:5c: 2d:ef:f9:6c:14:9d:9f:2e:6b:8f:d0:91:79:ee:cb:07:aa:2d: 8a:52:d0:6d:13:f5:27:70:aa:b7:34:93:c9:1c:60:10:41:b3: 99:83:a3:76:e4:4c:3a:0c:d8:12:23:f3:78:21:db:2e:c9:8c: 2d:7d:89:88:0d:2f:94:e3:14:c0:6c:e3:b7:58:44:fd:17:a5: 18:db:2d:43:7e:f9:2e:6d:b4:62:c1:f6:d4:f4:2d:4f:9f:27: e6:ea:4b:5e:1c:6b:7b:94:05:3c:5d:31:ce:b2:b5:01:d6:f0: c6:41:74:80:67:f6:f7:ab:d7:cf:f8:cd:8f:98:ee:4b:17:10: 3a:a3:a2:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjYwMzAyMDA0NDE3WhcNMjYwMzA5MDA0NDE3WjAYMRYwFAYD VQQDEw02OWE0ZGQ2Mi04NDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi1Wczb01KV6BLsJhyml7/Eb+g1QNoLk2O5BS1ESWNVPbJafT9ywYAB60Uz4u owfudBLgtuA2TACmn7PbYUmz4wjfvoNQTAPVlMH7f8tPRSF1Pat6SU/rouBgOXck K5tKLct7y6s8inompfw/ccKOc1vj7wToY6yjnKnuQ8wdOM/3FjJDbs36vgdNg2Dg +1EK/AHAEN9bLPzKTuzsAxZetO/1+JZegW1Q9h+LmdfTI/8xqewAOzz0ZEpr2qCq W1y/rSqARx7doVlvKIGldYfqsmMigipJgxYlLqI2Gtwo3jT+FL/01rvOWp7lUQYS PHVqD7qEAJpl2LYlEMtvGE5exwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM4C9+C yRDPNdAwjrlC8oVINcgjMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUItomBqaIDikqyQqpF9kuBrOwH2x0Uy3dpbsgEYqo6NzaJ2EQuw8OUyA9+m9 7NoRIlYENW7eNw5eL41fFDjkBYxIag5nIeoc4P1/8syxhFBtpM52ndxOwhNkXYVS CorvOjrWFm6AFjQ8D13chWGoGZ0OkcQgGOSG68qEzwZcLe/5bBSdny5rj9CRee7L B6otilLQbRP1J3CqtzSTyRxgEEGzmYOjduRMOgzYEiPzeCHbLsmMLX2JiA0vlOMU wGzjt1hE/RelGNstQ375Lm20YsH21PQtT58n5upLXhxre5QFPF0xzrK1AdbwxkF0 gGf296vXz/jNj5juSxcQOqOidw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:19 2026 by rpki-client