$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: Yrt7LWHGyDJCxp77nmGnGrmxJCcCUNPKVnlWoa/zWkI= Subject key identifier: DA:9E:30:5B:51:CF:18:03:C2:B7:E6:BD:D8:A1:C0:E4:5B:D6:1F:36 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 0255 Signing time: Thu 05 Nov 2026 03:07:51 +0000 Manifest this update: Thu 05 Nov 2026 03:07:51 +0000 Manifest next update: Thu 12 Nov 2026 03:07:51 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: NeZr8Po9dJnIW6iOIc/+XwJznj7xSU4B2+m64eMd91Y=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: mcaqIOHH5xoZsFrVwqV6O6K0hso49AFiEdvXSacQ1j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Nov 5 03:07:51 2026 GMT Not After : Nov 12 03:07:51 2026 GMT Subject: CN=6aebf307-420a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:79:4d:60:b2:4f:41:65:b7:e1:69:d5:b1: b7:32:6d:d2:72:43:e4:20:15:04:ee:4c:97:d2:5e: 7e:0b:ef:7f:79:18:04:6c:11:05:d2:e6:77:75:92: fc:a8:b2:93:13:1d:85:2f:db:c8:2e:d6:bb:08:73: d4:f5:97:39:30:98:43:0f:aa:7b:ff:55:d5:85:21: 2b:27:f6:7a:f8:0f:0a:f0:73:80:d4:17:77:2d:57: 2c:d6:b8:e9:44:0d:0b:53:7b:52:f7:e2:03:2e:f9: fb:a9:da:8f:eb:8a:3a:f2:9a:18:70:3e:b4:0d:4f: 9f:fb:f7:ad:12:ab:55:d9:78:af:01:50:0f:5b:9b: 4f:e2:34:40:b1:3c:08:d3:6a:a5:00:04:04:93:85: 48:55:4a:cc:15:73:c0:7b:92:74:ba:eb:9a:14:08: 9f:4c:cc:64:fb:d9:44:c5:db:c7:c6:6f:a1:57:fc: 9c:60:21:60:25:1d:52:5a:76:b7:ea:1e:0f:68:90: a5:89:e1:f0:2b:4e:1d:6b:19:f5:f0:96:5d:19:75: 38:28:1c:c0:cd:5c:c2:cf:db:d1:d8:01:df:96:0f: f7:81:9b:e8:4c:e4:d7:b9:dd:15:54:5b:65:a3:82: 01:ad:78:3f:b8:a5:f9:2d:53:51:5d:cb:b5:05:37: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:30:5B:51:CF:18:03:C2:B7:E6:BD:D8:A1:C0:E4:5B:D6:1F:36 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7d:f0:86:b0:3f:79:f7:69:6f:d8:af:70:a8:c6:57:99:32: 15:3c:8e:63:3f:8f:97:00:a2:00:6a:00:09:94:09:32:aa:83: ed:df:93:20:50:0a:45:01:76:1d:02:c2:1b:58:74:f1:27:a6: 43:7e:8e:4c:24:79:91:fa:b7:27:56:9c:92:d8:c4:c7:fb:66: 94:c5:f6:fd:6b:84:f8:74:95:18:53:e5:d6:63:4b:b4:5c:4c: f1:e8:95:45:c9:fe:d4:8b:87:b3:50:58:17:e0:4d:c9:40:62: 61:47:70:e1:e0:fb:82:d1:30:89:6d:46:2a:01:24:b0:8b:43: dc:d9:e7:8b:7f:de:9c:cf:d2:65:54:b9:0e:19:82:05:d4:4b: 1c:68:ed:21:f3:dc:45:06:db:41:8f:41:7a:e9:a4:c0:88:6c: 5b:43:33:e3:bd:9e:6d:14:f9:49:30:92:7a:bb:d7:9e:e5:58: b6:19:45:fd:2f:de:1e:cd:c9:e7:ec:01:a9:68:c5:61:d2:e3: 61:79:56:ed:15:91:c3:cc:88:8a:8c:9e:c4:fd:c9:46:d0:99: 5b:d1:4c:be:e3:84:e4:5c:f7:0f:d4:ff:34:f1:b7:30:12:e7: 44:98:4d:fa:f0:4a:e8:29:16:4f:ee:0b:7f:88:0a:2a:35:1d: 0c:2f:26:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjYxMTA1MDMwNzUxWhcNMjYxMTEyMDMwNzUxWjAYMRYwFAYD VQQDEw02YWViZjMwNy00MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ55TWCyT0Flt+Fp1bG3Mm3SckPkIBUE7kyX0l5+C+9/eRgEbBEF0uZ3dZL8 qLKTEx2FL9vILta7CHPU9Zc5MJhDD6p7/1XVhSErJ/Z6+A8K8HOA1Bd3LVcs1rjp RA0LU3tS9+IDLvn7qdqP64o68poYcD60DU+f+/etEqtV2XivAVAPW5tP4jRAsTwI 02qlAAQEk4VIVUrMFXPAe5J0uuuaFAifTMxk+9lExdvHxm+hV/ycYCFgJR1SWna3 6h4PaJClieHwK04daxn18JZdGXU4KBzAzVzCz9vR2AHflg/3gZvoTOTXud0VVFtl o4IBrXg/uKX5LVNRXcu1BTfY7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqeMFtR zxgDwrfmvdihwORb1h82MB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANX3whrA/efdpb9ivcKjGV5kyFTyOYz+PlwCiAGoACZQJMqqD7d+TIFAKRQF2 HQLCG1h08SemQ36OTCR5kfq3J1acktjEx/tmlMX2/WuE+HSVGFPl1mNLtFxM8eiV Rcn+1IuHs1BYF+BNyUBiYUdw4eD7gtEwiW1GKgEksItD3Nnni3/enM/SZVS5DhmC BdRLHGjtIfPcRQbbQY9BeumkwIhsW0Mz472ebRT5STCServXnuVYthlF/S/eHs3J 5+wBqWjFYdLjYXlW7RWRw8yIioyexP3JRtCZW9FMvuOE5Fz3D9T/NPG3MBLnRJhN +vBK6CkWT+4Lf4gKKjUdDC8mTw== -----END CERTIFICATE-----Generated at Thu Nov 5 14:31:23 2026 by rpki-client