$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: pIMYgUNJkZsRnTRrGDZeKQzTxGM+LWkXZ4YgoUt9RlU= Subject key identifier: BD:E5:DE:AE:66:AA:24:9F:F9:FF:48:21:A8:14:CA:A5:EB:9D:CB:3E Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 28AE Signing time: Sun 01 Mar 2026 23:47:49 +0000 Manifest this update: Sun 01 Mar 2026 23:47:48 +0000 Manifest next update: Sun 08 Mar 2026 23:47:48 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: AY6Yt8zrKmWQfgSBNtvXJP/OtDDEReXK7MQ+HPwioi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Mar 1 23:47:48 2026 GMT Not After : Mar 8 23:47:48 2026 GMT Subject: CN=69a4d025-0bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:76:9a:bd:7c:7f:f3:59:7b:0e:af:a5:e5: ed:df:77:c8:57:55:cd:82:11:eb:a2:19:12:d7:c3: 10:87:bc:e4:96:ef:54:93:c5:ac:2a:5b:ba:07:83: 57:2e:24:53:88:08:3c:b5:8b:3f:3e:36:38:a7:4f: 91:ad:df:93:e3:dc:24:97:e6:be:66:be:b9:ff:7b: bb:ba:92:77:e5:64:25:a6:ce:e7:09:65:44:51:2a: 9a:ef:7f:61:94:80:98:e7:81:ad:5e:43:18:4d:4a: 3d:f9:1f:d8:8d:b3:9e:16:19:f5:e1:a2:44:11:ec: eb:71:1d:39:fe:5f:f1:42:f8:70:9b:02:4c:07:93: 28:1f:ec:86:32:b4:c0:37:80:93:18:ab:31:20:5c: 57:45:a8:7e:a4:94:31:33:5a:6e:ab:4e:07:c1:99: fd:95:24:41:89:52:f9:67:01:2b:a7:ad:58:7f:1e: e7:fa:a7:cf:c6:60:ad:49:f1:9b:f0:50:92:18:cd: 3d:25:b0:dc:4e:1f:ce:cc:27:c0:69:6e:42:cd:27: 3d:af:e3:36:f8:c1:fe:7e:d6:af:99:a3:c8:8a:59: 9f:9c:1b:f4:21:d7:c9:ef:10:aa:dd:e1:82:6f:b1: 08:67:13:e3:b2:52:27:52:9a:cf:34:35:d8:21:8f: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:DE:AE:66:AA:24:9F:F9:FF:48:21:A8:14:CA:A5:EB:9D:CB:3E X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:71:b9:1a:d3:eb:b7:db:f7:1d:75:cc:4d:5b:2f:11:f8:c1: 25:89:73:d5:8a:74:90:d2:af:29:f9:b3:29:12:93:c2:d4:9c: 12:e7:17:f3:bf:24:f6:68:59:b7:d4:de:23:93:b0:8a:31:42: 09:c1:b7:17:c3:93:9f:22:45:f2:a8:79:2f:9d:e6:1c:d1:0d: 68:0a:86:43:5b:ea:ed:55:90:53:9f:e6:df:14:d4:15:69:d7: 72:a7:4e:90:90:a9:d2:27:24:fe:f3:d2:58:82:1c:88:73:51: 82:31:fd:d5:27:d8:c2:80:02:db:33:6f:f0:86:75:7c:80:cf: 17:01:97:49:f3:2a:aa:68:ea:37:d4:98:a0:a0:be:8c:f8:8a: 5c:9c:10:d0:3e:c9:39:4c:4d:1f:31:b6:65:9f:ae:22:13:22: e9:de:78:01:7b:66:ea:f0:6f:d0:ab:ae:01:24:ee:b1:6c:30: 71:b6:28:cd:22:bf:d5:65:ec:73:fd:9c:a2:58:d9:bf:7d:b2: df:83:ea:65:b2:93:6a:9d:d9:a6:58:9f:84:f0:4d:73:8c:8f: 50:ae:a4:d8:cc:41:94:b4:13:f6:53:5b:91:30:77:56:c9:74: 68:02:7d:6b:a8:7e:a7:40:46:78:81:72:b7:ec:37:3c:00:c6: 71:ef:16:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjYwMzAxMjM0NzQ4WhcNMjYwMzA4MjM0NzQ4WjAYMRYwFAYD VQQDEw02OWE0ZDAyNS0wYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h92mr18f/NZew6vpeXt33fIV1XNghHrohkS18MQh7zklu9Uk8WsKlu6B4NX LiRTiAg8tYs/PjY4p0+Rrd+T49wkl+a+Zr65/3u7upJ35WQlps7nCWVEUSqa739h lICY54GtXkMYTUo9+R/YjbOeFhn14aJEEezrcR05/l/xQvhwmwJMB5MoH+yGMrTA N4CTGKsxIFxXRah+pJQxM1puq04HwZn9lSRBiVL5ZwErp61Yfx7n+qfPxmCtSfGb 8FCSGM09JbDcTh/OzCfAaW5CzSc9r+M2+MH+ftavmaPIilmfnBv0IdfJ7xCq3eGC b7EIZxPjslInUprPNDXYIY9FwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3l3q5m qiSf+f9IIagUyqXrncs+MB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXG5GtPrt9v3HXXMTVsvEfjBJYlz1Yp0kNKvKfmzKRKTwtScEucX878k9mhZ t9TeI5OwijFCCcG3F8OTnyJF8qh5L53mHNENaAqGQ1vq7VWQU5/m3xTUFWnXcqdO kJCp0ick/vPSWIIciHNRgjH91SfYwoAC2zNv8IZ1fIDPFwGXSfMqqmjqN9SYoKC+ jPiKXJwQ0D7JOUxNHzG2ZZ+uIhMi6d54AXtm6vBv0KuuASTusWwwcbYozSK/1WXs c/2coljZv32y34PqZbKTap3ZplifhPBNc4yPUK6k2MxBlLQT9lNbkTB3Vsl0aAJ9 a6h+p0BGeIFyt+w3PADGce8Wpg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:34 2026 by rpki-client