$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: iSWCPBtjnTS96qfgQPPaIyw+naXTIckUylTvxPabm54= Subject key identifier: 4C:8C:08:51:60:8B:D7:F0:B6:F3:D5:F6:81:5F:30:9C:94:01:42:81 Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 0270 Signing time: Wed 23 Sep 2026 01:57:08 +0000 Manifest this update: Wed 23 Sep 2026 01:57:07 +0000 Manifest next update: Wed 30 Sep 2026 01:57:07 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: CEL8ebD13gdZYWEBEVoCKgUtWAc1UEr2FOmZfPn9LpI=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 4HF0DTPBSH5S3QjwkCb71T/4b+8A54VUugU3EtAjksc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Sep 23 01:57:07 2026 GMT Not After : Sep 30 01:57:07 2026 GMT Subject: CN=6ab331f3-da9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:51:6c:6b:1c:e6:c0:47:e9:a5:b7:6a:0d: 1d:9c:ce:73:f6:81:69:06:77:fe:8a:ef:52:9d:c2: 83:09:81:22:59:63:75:31:86:b5:8d:f6:ee:70:33: e1:6b:70:d3:b0:f6:06:91:f7:2f:aa:d2:bd:93:50: ef:82:5f:87:20:84:9a:89:5e:f5:96:ba:55:39:ef: 52:12:5d:79:7b:af:94:f6:44:90:d3:34:3a:66:96: fd:a0:a6:5e:e3:40:12:b6:b7:6c:4e:97:0f:d4:53: e5:7a:59:da:98:af:de:36:28:74:a1:b7:c9:37:b1: aa:29:5c:bc:03:cd:e2:ac:a3:bf:d5:33:60:92:46: d1:9f:5c:77:55:74:e6:91:22:8f:63:78:17:24:f5: 0f:c6:b8:94:cb:22:d2:e6:27:cf:8b:ae:ed:66:a1: be:14:60:59:5a:b8:35:66:69:ee:b6:ff:dd:4f:55: 64:ca:d2:02:0a:10:ff:33:bb:ac:56:a5:7b:3b:32: 1b:df:fd:e7:58:e6:0a:32:bb:c0:f7:c3:14:49:b4: 24:91:12:2d:76:f9:1b:09:87:77:79:97:b2:ad:d2: 95:cc:57:ee:ca:df:6b:73:d2:da:79:eb:28:6e:56: 97:f8:4a:4e:47:e6:16:c0:d6:cc:e6:5a:6a:ca:cc: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:08:51:60:8B:D7:F0:B6:F3:D5:F6:81:5F:30:9C:94:01:42:81 X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:42:49:a0:8f:f9:05:3d:04:21:9b:aa:e9:b9:73:29:12: 34:77:71:f0:22:79:ef:ee:b5:cf:0d:d5:f7:ac:f7:c4:a9:e5: 44:91:94:f1:ef:81:5d:82:a3:09:41:3e:ae:1e:30:2e:86:97: 80:43:79:48:87:0d:db:20:c9:25:7f:8c:b8:f0:46:f9:b7:b6: 36:cd:d2:c4:aa:50:bf:58:40:6d:bc:5a:ca:65:a0:e0:f8:79: 38:44:b3:ff:02:ef:ef:b4:ac:5f:27:f2:25:15:5f:19:52:1a: ee:10:5e:9d:ec:e6:5f:e6:f2:a8:b4:71:bf:4a:56:61:c8:d6: ba:a3:85:c3:08:12:dc:9b:6e:04:0c:6f:f4:a2:76:39:e8:15: 9c:ac:9b:3a:71:f9:ff:fd:0b:99:11:b4:fb:05:c0:7a:af:48: 10:3e:ef:33:d5:11:8d:30:5a:69:59:07:de:d3:a2:44:23:55: 7d:12:db:35:d4:52:ab:70:25:4d:8d:7c:08:e5:6c:5d:00:db: 0a:15:f1:35:65:b6:7a:97:d4:75:34:f6:e7:6b:2a:b2:93:5e: 25:d5:4d:a1:bc:70:c7:4e:e7:4e:59:98:c0:23:a5:8f:b7:c2: 7c:8c:d5:88:01:b0:58:08:0c:20:de:fa:00:80:b0:23:52:76: 95:c6:af:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjYwOTIzMDE1NzA3WhcNMjYwOTMwMDE1NzA3WjAYMRYwFAYD VQQDEw02YWIzMzFmMy1kYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IVRbGsc5sBH6aW3ag0dnM5z9oFpBnf+iu9SncKDCYEiWWN1MYa1jfbucDPh a3DTsPYGkfcvqtK9k1Dvgl+HIISaiV71lrpVOe9SEl15e6+U9kSQ0zQ6Zpb9oKZe 40AStrdsTpcP1FPlelnamK/eNih0obfJN7GqKVy8A83irKO/1TNgkkbRn1x3VXTm kSKPY3gXJPUPxriUyyLS5ifPi67tZqG+FGBZWrg1Zmnutv/dT1VkytICChD/M7us VqV7OzIb3/3nWOYKMrvA98MUSbQkkRItdvkbCYd3eZeyrdKVzFfuyt9rc9Laeeso blaX+EpOR+YWwNbM5lpqysyoHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyMCFFg i9fwtvPV9oFfMJyUAUKBMB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHpCSaCP+QU9BCGbqum5cykSNHdx8CJ57+61zw3V96z3xKnlRJGU8e+BXYKj CUE+rh4wLoaXgEN5SIcN2yDJJX+MuPBG+be2Ns3SxKpQv1hAbbxaymWg4Ph5OESz /wLv77SsXyfyJRVfGVIa7hBenezmX+byqLRxv0pWYcjWuqOFwwgS3JtuBAxv9KJ2 OegVnKybOnH5//0LmRG0+wXAeq9IED7vM9URjTBaaVkH3tOiRCNVfRLbNdRSq3Al TY18COVsXQDbChXxNWW2epfUdTT252sqspNeJdVNobxwx07nTlmYwCOlj7fCfIzV iAGwWAgMIN76AICwI1J2lcav4g== -----END CERTIFICATE-----Generated at Wed Sep 23 11:59:26 2026 by rpki-client