$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json) Hash identifier: R/C0Bh+7FfhDHMKvcjRA2EI0C8PV6k5qkT8s69HkEes= Subject key identifier: C0:74:92:04:60:20:E2:0E:70:FA:B7:89:28:0B:88:90:4A:F4:25:82 Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft Manifest number: 0133 Signing time: Mon 21 Sep 2026 05:35:21 +0000 Manifest this update: Mon 21 Sep 2026 05:35:20 +0000 Manifest next update: Mon 28 Sep 2026 05:35:20 +0000 Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: ic9oNcRTZU+j1lWQfNxYFvMaRH3SQ8+WjDI7SAeDvsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A Validity Not Before: Sep 21 05:35:20 2026 GMT Not After : Sep 28 05:35:20 2026 GMT Subject: CN=6ab0c219-1b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:13:16:8d:95:34:17:81:8a:01:fc:e7:c8: 8e:d7:16:4e:1a:57:da:6e:29:a6:0b:12:f9:f3:2c: 8e:1a:07:06:d5:ef:d7:40:33:db:d5:e3:d4:2f:aa: 68:4f:71:e0:a9:e8:45:a4:9b:37:0a:40:c7:07:b3: 38:7b:be:77:ec:24:d0:84:30:3b:c3:2c:9b:41:b1: 17:0d:44:fb:80:c3:1e:69:7d:99:36:54:8f:6a:5b: 4f:90:78:02:90:45:3e:5c:15:e6:b7:4e:e5:4c:30: 5d:db:79:cd:fa:fe:98:18:ed:37:d7:8f:cf:ac:41: 74:73:2d:b8:2f:ba:c1:20:98:e7:b3:93:41:e4:3d: a2:15:1e:7e:86:7a:f9:3d:80:45:a5:2e:19:80:a4: 16:51:40:df:ca:a8:54:98:35:d5:90:45:ba:69:2e: 2d:d9:4a:e4:0e:02:55:f9:81:54:37:7c:ca:03:85: fb:a7:bb:42:74:59:6e:3e:3a:ff:83:e0:52:42:ad: 26:f5:62:3d:e6:34:89:2a:80:3a:49:2e:73:7d:a4: 28:0d:d9:4e:e4:90:4c:07:62:85:e3:e6:22:5c:d1: c2:0f:a8:4c:c0:ed:74:0c:8d:fc:f6:23:f0:a6:9b: bd:9a:50:fb:08:e7:f7:cb:36:62:7f:09:68:38:66: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:74:92:04:60:20:E2:0E:70:FA:B7:89:28:0B:88:90:4A:F4:25:82 X509v3 Authority Key Identifier: keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e3:05:21:fa:d7:63:5a:53:b1:83:fa:3b:14:22:ff:76:4e: 39:68:5d:2f:c6:bd:5e:f4:ee:a1:a8:8b:de:41:99:5d:20:69: 69:ad:27:51:94:f3:c0:53:66:81:18:61:c9:24:54:22:40:91: c2:87:2c:74:df:44:d4:b8:7f:86:b4:1e:2f:f9:6a:a7:96:05: 91:2c:20:0b:c9:4c:0d:1e:c3:0e:46:8b:7b:f8:cf:36:ed:a3: 6d:f6:b1:17:95:f4:7d:59:b7:80:79:95:40:c7:4f:c0:cc:eb: bd:6c:27:5e:0f:5e:61:cb:06:c3:7b:7a:e1:30:7e:b7:e4:c5: ec:89:30:de:7e:3e:44:95:4f:27:a7:73:01:b8:1b:c0:b2:bc: 4e:fc:6f:50:37:fb:16:df:1f:ba:f9:be:8d:20:2a:b5:ff:84: c8:e6:2e:75:16:e3:ce:2a:01:24:75:55:c1:8c:91:a5:85:5d: b1:35:ad:a3:f9:50:e2:f8:93:76:e3:a4:42:dd:04:e3:59:e0: b8:44:34:a9:43:b4:bf:56:6b:6b:e0:17:77:2c:9e:ac:f1:d4: aa:ec:f4:ba:31:03:4d:d1:c0:42:fb:03:8f:7f:45:6e:12:c6: a3:fe:b8:85:1e:5a:ec:98:c5:6a:11:29:bd:2d:c2:ad:9d:df: 30:46:b7:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzNTcxMTAvBgNVBAUTKDE4MEEzNTIyRTIwNTBDNUYxRTA4NzM1MzlCMTJENkQy MzEyQTIwMUEwHhcNMjYwOTIxMDUzNTIwWhcNMjYwOTI4MDUzNTIwWjAYMRYwFAYD VQQDEw02YWIwYzIxOS0xYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjxUTFo2VNBeBigH858iO1xZOGlfabimmCxL58yyOGgcG1e/XQDPb1ePUL6po T3HgqehFpJs3CkDHB7M4e7537CTQhDA7wyybQbEXDUT7gMMeaX2ZNlSPaltPkHgC kEU+XBXmt07lTDBd23nN+v6YGO0314/PrEF0cy24L7rBIJjns5NB5D2iFR5+hnr5 PYBFpS4ZgKQWUUDfyqhUmDXVkEW6aS4t2UrkDgJV+YFUN3zKA4X7p7tCdFluPjr/ g+BSQq0m9WI95jSJKoA6SS5zfaQoDdlO5JBMB2KF4+YiXNHCD6hMwO10DI389iPw ppu9mlD7COf3yzZifwloOGYT3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMB0kgRg IOIOcPq3iSgLiJBK9CWCMB8GA1UdIwQYMBaAFBgKNSLiBQxfHghzU5sS1tIxKiAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xREE1Q0M1NkRG OEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRGOGVDSE5UbXhMVzBqRXFJ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBbzFJdUlGREY4ZUNITlRteExXMGpFcUlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODM1Ny8xREE1Q0M1NkRGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRG OGVDSE5UbXhMVzBqRXFJQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAneMFIfrXY1pTsYP6OxQi/3ZOOWhdL8a9XvTuoaiL3kGZXSBpaa0nUZTzwFNm gRhhySRUIkCRwocsdN9E1Lh/hrQeL/lqp5YFkSwgC8lMDR7DDkaLe/jPNu2jbfax F5X0fVm3gHmVQMdPwMzrvWwnXg9eYcsGw3t64TB+t+TF7Ikw3n4+RJVPJ6dzAbgb wLK8TvxvUDf7Ft8fuvm+jSAqtf+EyOYudRbjzioBJHVVwYyRpYVdsTWto/lQ4viT duOkQt0E41nguEQ0qUO0v1Zra+AXdyyerPHUquz0ujEDTdHAQvsDj39FbhLGo/64 hR5a7JjFahEpvS3CrZ3fMEa3ow== -----END CERTIFICATE-----Generated at Tue Sep 22 20:07:46 2026 by rpki-client