$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: g48jP+yHMNyCBj26Gjkk9TyCeyF8S9d7ajx092RatuQ= Subject key identifier: 19:19:58:4C:C9:B5:A9:E6:80:C9:1A:74:CC:C1:E1:7F:77:83:CA:5D Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 0461 Signing time: Fri 17 Apr 2026 00:05:04 +0000 Manifest this update: Fri 17 Apr 2026 00:05:03 +0000 Manifest next update: Fri 24 Apr 2026 00:05:03 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: nTtoAIpBlzGADn2ovonhrJzNaBkWf6W9d8oaRkyAXlE=) 2: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: 0WUhBcrZvRWIxNkRVA7Hsg9MfdhdUkLTVgCI3Sna5Fs=) 3: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: oNvJ2OTvgFATATyEIxgWTVA+K6CHCRNnOEmYPy6CiuQ=) 4: 18DBE7C624D711F18CA70BCEAB833773.roa (hash: /k5VdAsRv/RZU2O03cM57G3EDORpAmdEgBgLhS+cBqI=) 5: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (hash: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=) 6: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c=) 7: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: y5ImLQShXTdYNOJzkUx9fF2JnCdfm6BVJ7HEJ2KJnqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Apr 17 00:05:03 2026 GMT Not After : Apr 24 00:05:03 2026 GMT Subject: CN=69e17930-c2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:7c:80:fc:a2:30:4b:b5:3b:7c:7a:bc:d2: bd:c8:b3:49:90:64:f1:e1:6b:53:45:a9:bc:92:44: 4b:44:a0:9d:43:db:37:71:9b:34:fd:e7:ed:ca:04: d1:13:3e:5f:52:fa:a2:94:08:22:db:18:37:0c:ef: 6b:8c:e4:b3:bc:53:3c:79:d4:eb:cd:3f:47:91:47: 45:19:52:7b:c3:e3:c4:e0:0d:5e:fc:07:52:99:58: f4:fe:83:58:26:34:97:d2:ce:03:ad:f0:1d:8d:8b: 46:06:57:f7:1e:34:da:9b:a1:c3:67:e8:2f:c4:a5: e9:0d:b6:47:97:ba:55:e6:60:d0:23:d5:c3:8b:6a: 7a:bf:15:8d:f1:4f:58:6f:4c:dc:70:e5:1c:43:78: 5d:a4:75:63:5d:bb:42:0a:18:90:85:05:df:84:e5: 5f:6e:4d:e9:d1:c5:46:0d:e7:d6:17:dc:da:6e:74: 77:52:5d:d0:1e:6c:de:7c:5b:bd:95:0f:26:46:46: 31:05:74:6c:44:76:70:59:35:51:2b:77:64:27:1d: 64:38:00:14:67:dd:da:d0:ed:17:fe:31:61:18:44: 38:0e:19:66:7e:b4:9b:56:2b:8a:ec:07:3b:22:ef: 65:cb:8e:f5:d9:90:97:cb:ef:19:59:39:73:d9:ea: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:19:58:4C:C9:B5:A9:E6:80:C9:1A:74:CC:C1:E1:7F:77:83:CA:5D X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4b:a7:5c:1a:12:38:fd:0c:9c:28:25:8a:45:71:36:58:6d: e8:1e:41:ac:a8:96:20:3d:d2:7e:bd:b7:13:82:22:08:90:b0: 0d:b6:0e:8a:17:f4:5c:79:96:9e:d5:8e:b6:cd:32:4e:68:29: 1d:05:a4:44:73:52:a0:33:45:14:28:85:b0:fe:6c:31:c6:4e: 43:9a:15:b3:36:d8:16:e6:bb:14:1e:65:1c:51:6a:55:3f:b0: 64:43:f1:ff:ef:5c:3e:10:ab:ed:a7:62:57:3d:58:62:77:01: a5:40:19:6f:dc:75:35:62:36:d6:3b:06:55:97:8f:ac:88:0b: 44:ef:9c:7c:9c:cc:df:61:c3:df:40:52:7b:9c:48:87:b8:ee: fd:5d:58:db:a3:43:cc:75:4d:00:fa:97:df:29:c1:fc:cd:0f: 43:f5:e4:53:6b:28:23:a8:d0:6e:67:19:1f:aa:a4:05:79:be: 9e:e7:f7:54:b3:50:30:68:2c:9d:c1:5f:74:1a:eb:00:e5:f3: 79:80:5d:69:1f:c0:9d:a4:d9:ce:84:ac:3d:d3:74:25:78:fc: 9c:f5:13:f4:fe:75:36:17:43:1e:c4:84:e1:b0:c5:ef:ad:a9: c5:f2:42:10:b3:df:22:60:1e:17:84:d7:f0:64:72:47:7a:0a: 20:98:90:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYwNDE3MDAwNTAzWhcNMjYwNDI0MDAwNTAzWjAYMRYwFAYD VQQDEw02OWUxNzkzMC1jMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wV8gPyiMEu1O3x6vNK9yLNJkGTx4WtTRam8kkRLRKCdQ9s3cZs0/eftygTR Ez5fUvqilAgi2xg3DO9rjOSzvFM8edTrzT9HkUdFGVJ7w+PE4A1e/AdSmVj0/oNY JjSX0s4DrfAdjYtGBlf3HjTam6HDZ+gvxKXpDbZHl7pV5mDQI9XDi2p6vxWN8U9Y b0zccOUcQ3hdpHVjXbtCChiQhQXfhOVfbk3p0cVGDefWF9zabnR3Ul3QHmzefFu9 lQ8mRkYxBXRsRHZwWTVRK3dkJx1kOAAUZ93a0O0X/jFhGEQ4DhlmfrSbViuK7Ac7 Iu9ly4712ZCXy+8ZWTlz2eoHqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkZWEzJ tanmgMkadMzB4X93g8pdMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO0unXBoSOP0MnCglikVxNlht6B5BrKiWID3Sfr23E4IiCJCwDbYOihf0XHmW ntWOts0yTmgpHQWkRHNSoDNFFCiFsP5sMcZOQ5oVszbYFua7FB5lHFFqVT+wZEPx /+9cPhCr7adiVz1YYncBpUAZb9x1NWI21jsGVZePrIgLRO+cfJzM32HD30BSe5xI h7ju/V1Y26NDzHVNAPqX3ynB/M0PQ/XkU2soI6jQbmcZH6qkBXm+nuf3VLNQMGgs ncFfdBrrAOXzeYBdaR/AnaTZzoSsPdN0JXj8nPUT9P51NhdDHsSE4bDF762pxfJC ELPfImAeF4TX8GRyR3oKIJiQ2A== -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:27 2026 by rpki-client