$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: ifhJTYOvCMDFB4rbu5jORO/8RaCyd70XoKt81VU7Uw4= Subject key identifier: D3:2E:6E:4B:46:BB:15:22:CC:2C:36:01:88:4B:C4:BE:76:42:60:3D Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0884 Signing time: Mon 02 Mar 2026 00:22:40 +0000 Manifest this update: Mon 02 Mar 2026 00:22:39 +0000 Manifest next update: Mon 09 Mar 2026 00:22:39 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: 389WPWfWtxBD0K0HRCdYa6ZDQ3AwXvMv2aL/l+ypyXo=) 2: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: IurGq+/p74kj0cOYI7IIex6bTsVIQg2alWHiMdd13ts=) 3: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: fyTpRXaLemZhNDBM3gpMKafp5N6Q8cViUDzIODGW4Po=) 4: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: AJCPY6gXO2zyo2U10GhSfGU9o4iE1Zv4wHbAEbhh+Pw=) 5: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: PS301Jk6Y0cHef12GbxlhtyzdISxudlooBdL/pYkI1M=) 6: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: PzLLkSB5J2MZJf6IsORgtS1K1mhp7rG5kzX8OnLBvKw=) 7: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: 8rMyLXRhDBgNo1OZW/Og41SCndsNpZ+BloQ2F9KYexc=) 8: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: eXVJ0u7wZXMBnL7wo1/N8615nU+3Q3ZJVgqXJixwzJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Mar 2 00:22:39 2026 GMT Not After : Mar 9 00:22:39 2026 GMT Subject: CN=69a4d850-03dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:64:62:69:70:73:56:27:d9:14:37:30:28: 3f:d6:5f:3d:b1:84:3c:26:be:56:9d:57:a3:c8:86: e2:57:98:fa:90:ac:a5:e5:96:a4:cb:61:bb:9b:ec: 11:f1:a9:39:14:12:c6:19:03:2d:e5:f2:48:66:95: c3:5e:13:8a:c8:e7:5c:71:bd:e6:f2:68:b5:d2:f8: 8b:5e:78:08:31:3f:3d:5d:39:ed:4e:2f:e0:81:95: 79:68:fe:f1:9f:aa:19:d2:c4:08:32:fe:2f:2e:06: 52:fa:b7:9f:05:9e:a9:09:7d:58:ae:46:40:cf:a9: ae:75:2f:14:94:74:eb:06:23:10:8c:99:3b:f8:40: ed:ae:1e:07:c9:31:2d:db:1a:92:74:82:86:97:21: 35:f5:7a:ca:dd:be:13:84:e6:bd:91:03:ca:d0:50: d8:89:f6:a8:b3:1f:40:f0:3c:7d:af:db:67:d9:27: b3:0e:ad:02:0f:1f:c9:d1:e2:85:3e:8f:3f:16:da: 55:31:96:fe:f7:c4:a0:3e:69:fb:c0:a1:ce:b9:ff: 89:28:20:15:15:b2:cc:66:40:9c:ac:d1:62:e5:34: b4:87:89:f8:b3:34:bc:8f:6a:46:60:cd:69:e1:42: 8e:7e:a5:98:94:43:6e:1a:7d:c5:0f:d1:c5:de:91: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2E:6E:4B:46:BB:15:22:CC:2C:36:01:88:4B:C4:BE:76:42:60:3D X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:92:fb:56:17:37:30:e3:e7:55:3d:67:52:a3:b3:e8:d5:7a: 2b:77:15:08:9a:20:4a:82:f8:41:d2:4e:23:85:95:f6:ac:5f: 35:7b:2d:b7:d8:45:83:22:ec:61:a0:0e:c8:dd:9b:63:82:46: 7f:29:33:08:bf:8f:c8:8c:46:ba:72:07:5d:fd:69:a3:a2:f0: ba:b3:e3:66:0f:e1:52:ec:c2:3a:0a:ed:b7:fa:24:a0:a8:aa: bc:06:52:66:52:d4:f3:64:80:15:e0:2a:70:9f:dd:1d:17:47: 42:13:9f:3e:1c:03:f8:51:8d:80:dc:9a:a1:dd:7a:21:b7:a6: fc:e0:77:d0:5f:f8:ee:9b:76:f2:72:ba:76:a3:6d:17:2b:9c: d2:e4:99:6b:20:62:d7:b7:78:4a:26:c7:5f:47:ee:5d:ee:4d: 92:6b:39:23:f5:22:6b:d8:23:d7:4e:ed:14:16:c6:8b:f7:be: 3e:90:c7:76:e4:1c:58:fc:45:7a:cc:08:cf:cc:b1:6b:f0:65: 39:1d:42:da:6d:c7:67:eb:bc:22:42:35:d4:32:14:20:59:30: e6:10:07:45:59:7f:fb:c6:0e:24:53:de:b9:9a:de:14:5d:46: 87:b3:98:2a:3c:a1:fc:a5:a1:d4:5e:fb:53:c1:7a:4d:89:d1: e5:31:15:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwMzAyMDAyMjM5WhcNMjYwMzA5MDAyMjM5WjAYMRYwFAYD VQQDEw02OWE0ZDg1MC0wM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWNkYmlwc1Yn2RQ3MCg/1l89sYQ8Jr5WnVejyIbiV5j6kKyl5Zaky2G7m+wR 8ak5FBLGGQMt5fJIZpXDXhOKyOdccb3m8mi10viLXngIMT89XTntTi/ggZV5aP7x n6oZ0sQIMv4vLgZS+refBZ6pCX1YrkZAz6mudS8UlHTrBiMQjJk7+EDtrh4HyTEt 2xqSdIKGlyE19XrK3b4ThOa9kQPK0FDYifaosx9A8Dx9r9tn2SezDq0CDx/J0eKF Po8/FtpVMZb+98SgPmn7wKHOuf+JKCAVFbLMZkCcrNFi5TS0h4n4szS8j2pGYM1p 4UKOfqWYlENuGn3FD9HF3pFK8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMubktG uxUizCw2AYhLxL52QmA9MB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAspL7Vhc3MOPnVT1nUqOz6NV6K3cVCJogSoL4QdJOI4WV9qxfNXstt9hFgyLs YaAOyN2bY4JGfykzCL+PyIxGunIHXf1po6LwurPjZg/hUuzCOgrtt/okoKiqvAZS ZlLU82SAFeAqcJ/dHRdHQhOfPhwD+FGNgNyaod16Ibem/OB30F/47pt28nK6dqNt Fyuc0uSZayBi17d4SibHX0fuXe5Nkms5I/Uia9gj107tFBbGi/e+PpDHduQcWPxF eswIz8yxa/BlOR1C2m3HZ+u8IkI11DIUIFkw5hAHRVl/+8YOJFPeuZreFF1Gh7OY Kjyh/KWh1F77U8F6TYnR5TEV2Q== -----END CERTIFICATE-----Generated at Mon Mar 2 16:55:14 2026 by rpki-client