$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: pP3Z1ZsiHVTX3nTPs5bArifa7mnQYbqEZOSWpaT7EcU= Subject key identifier: 5C:EB:43:4B:1C:9A:95:50:58:1F:3E:79:27:0D:6D:5D:E4:8B:F3:BE Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08D0 Signing time: Tue 28 Jul 2026 20:50:53 +0000 Manifest this update: Tue 28 Jul 2026 20:50:52 +0000 Manifest next update: Tue 04 Aug 2026 20:50:52 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: 4CpkmzBYnmjNxlcMcwoqYaP16AfQ98xB3xoWxpUrMv0=) 2: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 3: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 5: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) 7: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 8: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jul 28 20:50:52 2026 GMT Not After : Aug 4 20:50:52 2026 GMT Subject: CN=6a69162d-602d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:4f:3b:bd:f8:9b:d8:ff:e5:8d:4e:67:4c: fd:8f:ee:8d:83:d9:1c:c3:f2:31:6c:75:9b:65:96: a2:d8:0f:8d:90:2a:b4:2b:3c:86:32:4a:53:84:48: d7:61:bd:75:a7:18:ec:6c:58:86:48:08:c5:3c:e7: b8:52:e9:f2:58:52:a4:15:0f:e8:5a:31:a8:32:af: 1d:16:2d:a5:75:bf:52:1a:9d:7a:ad:c5:37:e1:d5: f3:47:1b:58:0b:d9:2d:16:fb:b3:e8:00:c1:6e:46: 73:9d:04:b2:86:6e:79:52:d2:81:7c:6b:37:4e:ca: dd:b0:ea:d7:f7:5e:f2:fe:a3:1d:74:31:eb:b5:82: 8c:a8:7d:0f:df:69:84:3d:21:46:17:2c:1f:6b:0b: db:1b:87:e5:24:c4:6a:6b:16:b3:ae:4d:0b:92:9d: 51:7d:c3:8a:fe:61:6f:66:87:7b:e0:64:37:04:d0: 18:23:66:ca:4c:df:cc:50:60:eb:72:b1:ed:2c:cf: ac:29:da:06:2f:fb:5b:1d:c8:2a:dd:a7:85:28:85: cd:97:d5:8f:af:5d:3a:54:4a:b4:5e:e7:5c:f6:e7: d8:5f:a4:9b:5d:df:4e:7c:42:ca:d8:b9:0a:5c:ce: 2f:19:e0:ec:e4:21:ce:0b:46:64:ed:b9:30:ce:6c: 46:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:43:4B:1C:9A:95:50:58:1F:3E:79:27:0D:6D:5D:E4:8B:F3:BE X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:df:57:97:c3:fe:b8:fc:69:39:00:08:87:0d:64:c5:95:08: dc:3e:18:16:0f:9e:93:9c:04:20:bc:9a:01:80:8f:fc:a6:48: a0:ec:d5:4e:a2:4d:64:82:c1:aa:4f:15:6b:52:58:21:73:77: 02:cc:4e:7a:c6:59:d6:0d:4c:aa:08:51:27:e1:fd:06:ea:00: 9e:0e:be:28:cb:56:f4:3c:e8:f9:5a:f3:4b:53:15:87:51:86: 7f:f4:96:bf:34:ae:63:5d:1e:a1:8c:74:15:12:38:5f:66:dc: cf:c4:e5:50:93:26:3f:1c:87:d4:95:1e:03:38:e9:10:5c:6b: e0:c5:87:0b:8f:75:2c:9d:6d:f5:7f:c9:6c:4f:97:23:b6:b2: 0a:7b:d0:9b:64:3f:35:84:87:2c:34:f9:98:f9:5f:23:55:af: e7:88:00:9c:bc:80:be:4b:ef:8c:be:aa:94:fb:f2:ea:61:70: 04:a0:2f:1e:0c:6c:8f:7d:74:f8:22:22:f6:f7:58:26:66:46: 92:4e:ce:26:f5:9b:29:95:25:8d:ee:4a:c1:eb:6d:ce:0d:e7: 1d:eb:dd:38:1b:50:9d:94:4a:5f:3a:66:c0:5f:31:9a:4d:f5: c4:9f:4a:ab:94:4a:55:d6:7a:8c:3a:c3:e4:c7:92:54:22:ac: a4:f4:e3:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwNzI4MjA1MDUyWhcNMjYwODA0MjA1MDUyWjAYMRYwFAYD VQQDEw02YTY5MTYyZC02MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshZPO734m9j/5Y1OZ0z9j+6Ng9kcw/IxbHWbZZai2A+NkCq0KzyGMkpThEjX Yb11pxjsbFiGSAjFPOe4UunyWFKkFQ/oWjGoMq8dFi2ldb9SGp16rcU34dXzRxtY C9ktFvuz6ADBbkZznQSyhm55UtKBfGs3TsrdsOrX917y/qMddDHrtYKMqH0P32mE PSFGFywfawvbG4flJMRqaxazrk0Lkp1RfcOK/mFvZod74GQ3BNAYI2bKTN/MUGDr crHtLM+sKdoGL/tbHcgq3aeFKIXNl9WPr106VEq0Xudc9ufYX6SbXd9OfELK2LkK XM4vGeDs5CHOC0Zk7bkwzmxGVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzrQ0sc mpVQWB8+eScNbV3ki/O+MB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA299Xl8P+uPxpOQAIhw1kxZUI3D4YFg+ek5wEILyaAYCP/KZIoOzVTqJNZILB qk8Va1JYIXN3AsxOesZZ1g1MqghRJ+H9BuoAng6+KMtW9Dzo+VrzS1MVh1GGf/SW vzSuY10eoYx0FRI4X2bcz8TlUJMmPxyH1JUeAzjpEFxr4MWHC491LJ1t9X/JbE+X I7ayCnvQm2Q/NYSHLDT5mPlfI1Wv54gAnLyAvkvvjL6qlPvy6mFwBKAvHgxsj310 +CIi9vdYJmZGkk7OJvWbKZUlje5Kwettzg3nHevdOBtQnZRKXzpmwF8xmk31xJ9K q5RKVdZ6jDrD5MeSVCKspPTjkA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:18:25 2026 by rpki-client