$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: Syehene5iKnm/JLOXDPeJd0xXqQkISPgsyrF2cEIGmc= Subject key identifier: 9C:D0:87:95:01:5E:9F:96:88:E4:73:FD:19:87:A6:8C:F0:EF:81:43 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 01D3 Signing time: Sun 01 Mar 2026 04:25:52 +0000 Manifest this update: Sun 01 Mar 2026 04:25:52 +0000 Manifest next update: Sun 08 Mar 2026 04:25:52 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: b0Ka+EWzGrF7vWVVP13JAsAoImlwm8lP1i8IdIpKjIY=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: 2nukhqdNU6Euo+43iQiPgLSUJQocXAJN3vnaW4r7bwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Mar 1 04:25:52 2026 GMT Not After : Mar 8 04:25:52 2026 GMT Subject: CN=69a3bfd0-2b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:72:90:63:44:9a:bf:6b:ef:5e:36:81:ef: 4a:d6:99:9d:e2:71:76:f9:49:99:04:63:69:61:ba: 06:0d:58:7b:be:6f:82:c6:77:c9:a8:48:8c:bd:e9: 27:c7:8c:7d:53:63:7d:d5:1e:92:16:f9:73:bd:7e: d8:d8:d9:b1:3c:4c:ff:f0:52:b3:16:aa:2f:37:01: cc:ca:cd:51:8b:da:ed:7a:29:26:3d:42:e1:be:86: bb:1a:54:42:58:b7:10:5c:0b:81:ba:8f:16:5b:88: 97:43:7e:5c:12:15:b4:86:2f:e0:91:b6:48:3f:e7: fa:3e:a9:df:62:92:cc:55:a2:75:a3:d6:9e:e5:6e: 80:a0:9a:14:8f:ed:ba:6d:cb:fd:4c:c9:84:b4:75: 13:9a:49:31:6c:66:33:2e:2f:2e:f5:20:b4:a9:12: c4:8a:5c:c5:71:80:bb:98:0d:00:bd:5d:04:70:8c: af:3c:d1:3c:23:af:7d:e7:c0:c0:53:b4:44:55:85: 7b:53:5c:f1:c3:a7:60:16:e3:61:af:81:cc:4d:92: e0:95:4d:b0:db:0f:7e:35:bd:42:ba:85:90:19:19: d0:ea:b7:48:6e:43:da:62:46:6a:9c:04:94:e6:b5: 39:09:56:63:e5:1e:f9:26:32:69:6b:98:44:ad:43: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:87:95:01:5E:9F:96:88:E4:73:FD:19:87:A6:8C:F0:EF:81:43 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:12:45:de:dc:38:05:55:34:11:4f:d2:8a:0a:df:1a:4b:e0: 38:16:18:5a:3e:4b:aa:d9:06:e9:6d:9d:d8:b5:b0:36:bb:29: 52:8f:4b:2b:ca:7a:ae:24:0a:3e:57:d8:d9:05:27:a9:c2:f8: 24:7a:8e:df:7a:99:88:84:00:1a:4b:07:31:6d:03:69:ed:01: 26:8e:18:26:75:b5:b5:a2:20:43:a3:cc:0b:6d:1f:26:48:47: 92:e1:0d:7b:c5:6d:51:88:f2:e9:c6:38:9f:8f:cb:b9:fe:21: 3a:4b:ae:a1:13:df:c7:4b:01:77:4d:47:b7:e0:87:23:b0:28: 40:85:cc:65:be:f1:fc:cd:cd:e8:2e:f4:28:4d:5c:94:d3:4a: 57:27:e1:82:db:e2:79:cf:d4:f3:fc:0e:af:ad:3f:c6:ad:98: f3:ae:ae:ca:e6:b7:38:94:17:f8:74:02:03:e6:4e:f2:59:44: 72:bd:84:85:63:0e:f5:51:62:5b:3b:3f:f1:4f:36:09:88:11: 1f:0f:5a:ca:59:fe:0b:e1:50:d9:38:67:36:6d:c8:b6:80:e0: d8:4e:21:1d:c5:42:a3:7d:eb:23:cf:77:f3:13:83:e7:e6:df: c2:e7:6d:c2:6f:69:0f:98:e9:a2:9f:2f:19:73:3d:ee:04:8a: 3d:7c:ec:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjYwMzAxMDQyNTUyWhcNMjYwMzA4MDQyNTUyWjAYMRYwFAYD VQQDDA02OWEzYmZkMC0yYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCRykGNEmr9r7142ge9K1pmd4nF2+UmZBGNpYboGDVh7vm+CxnfJqEiMvekn x4x9U2N91R6SFvlzvX7Y2NmxPEz/8FKzFqovNwHMys1Ri9rteikmPULhvoa7GlRC WLcQXAuBuo8WW4iXQ35cEhW0hi/gkbZIP+f6PqnfYpLMVaJ1o9ae5W6AoJoUj+26 bcv9TMmEtHUTmkkxbGYzLi8u9SC0qRLEilzFcYC7mA0AvV0EcIyvPNE8I69958DA U7REVYV7U1zxw6dgFuNhr4HMTZLglU2w2w9+Nb1CuoWQGRnQ6rdIbkPaYkZqnASU 5rU5CVZj5R75JjJpa5hErUOe+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzQh5UB Xp+WiORz/RmHpozw74FDMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANxJF3tw4BVU0EU/SigrfGkvgOBYYWj5LqtkG6W2d2LWwNrspUo9LK8p6riQK PlfY2QUnqcL4JHqO33qZiIQAGksHMW0Dae0BJo4YJnW1taIgQ6PMC20fJkhHkuEN e8VtUYjy6cY4n4/Luf4hOkuuoRPfx0sBd01Ht+CHI7AoQIXMZb7x/M3N6C70KE1c lNNKVyfhgtviec/U8/wOr60/xq2Y866uyua3OJQX+HQCA+ZO8llEcr2EhWMO9VFi Wzs/8U82CYgRHw9ayln+C+FQ2ThnNm3ItoDg2E4hHcVCo33rI8938xOD5+bfwudt wm9pD5jpop8vGXM97gSKPXzsvw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:07 2026 by rpki-client