$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: i3bZK23930CvQLXOj08loi/VDlZ2I8jaw37LFO/wZRo= Subject key identifier: E7:FF:FA:B0:9C:F2:B3:47:FB:03:BD:CB:A9:DA:F6:96:B8:62:24:A5 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08B9 Signing time: Fri 12 Jun 2026 20:32:50 +0000 Manifest this update: Fri 12 Jun 2026 20:32:50 +0000 Manifest next update: Fri 19 Jun 2026 20:32:50 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: BWHvRV9xZ8TmwjPd3/JCvB5Fkpug45vXGvobKWv7MSA=) 2: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) 3: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 4: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) 5: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 6: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 7: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 8: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 20:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jun 12 20:32:50 2026 GMT Not After : Jun 19 20:32:50 2026 GMT Subject: CN=6a2c6cf2-10aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:80:af:6c:23:93:4d:09:11:29:b2:33:42: 41:65:b8:26:aa:a5:41:e5:22:9b:5f:8f:89:df:a6: 32:73:69:77:41:e1:d2:bf:72:ee:cd:a6:00:22:b0: fd:48:5d:80:28:20:9d:94:8e:17:59:e3:18:8f:c8: ca:b4:21:76:42:4b:cc:0a:c3:52:05:44:0a:d6:81: be:ce:61:bb:bf:6f:6d:39:5b:00:27:96:08:92:dc: c6:96:ec:77:a0:a4:e5:c2:82:88:7c:8a:8d:65:8b: 6f:ae:a7:f2:67:ed:9d:e1:cc:fe:c8:fc:f9:60:fe: 14:1a:bd:0f:6a:77:23:e6:78:91:4d:dd:80:2b:7a: 2c:f5:c1:46:a3:36:a3:e4:41:ca:27:73:60:a0:53: 5d:e8:84:ab:14:49:5d:12:c6:71:71:ec:26:08:7f: 57:4a:ab:04:11:6f:ad:4c:8a:47:f0:bf:15:90:b9: 6d:be:10:66:c9:fb:4c:56:2a:94:75:8d:a0:cb:65: e9:c2:c0:84:2d:95:a7:f3:66:1c:8b:01:35:a3:b9: 95:82:db:76:7d:86:ce:c1:1d:2f:9f:28:44:a9:a8: bf:40:8d:98:f5:37:0a:a0:06:ff:75:89:ff:b6:46: 13:39:9e:26:41:8b:97:91:c2:45:ff:1b:1e:c8:c4: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FF:FA:B0:9C:F2:B3:47:FB:03:BD:CB:A9:DA:F6:96:B8:62:24:A5 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:78:7e:87:e1:1d:4b:41:c1:44:be:50:98:b2:c5:de:13:19: f2:2a:53:61:88:84:e0:2a:de:03:b9:92:84:95:8e:c1:34:4e: d5:b5:08:00:c8:a1:b9:fc:1d:3a:ff:b0:06:3c:57:8c:56:49: 5c:5a:6c:dc:60:7b:2e:15:56:d8:41:a3:cc:f9:da:6c:63:ac: 54:91:82:03:25:59:7d:ba:e0:5d:1e:09:2a:36:d8:14:59:94: d3:49:a8:86:97:5e:66:3d:57:51:96:34:f0:3f:19:cd:cb:4d: 2b:4e:0d:9a:52:66:c7:57:1f:a1:12:e3:b4:eb:8d:a7:59:ec: 8b:94:d0:a9:07:06:bf:45:b5:d7:fe:f9:ed:ba:14:09:c0:70: a5:74:a6:a4:10:2c:4c:79:b6:47:de:ea:b7:8d:3e:cc:82:1a: 3a:45:2b:37:a3:a3:3d:ee:b4:81:6e:7e:6f:fd:0d:22:33:08: ba:d9:01:20:ca:61:32:b2:1c:a7:e2:9a:26:07:e7:40:7d:34: f7:31:a8:80:5d:57:48:44:26:b5:e1:4f:9b:aa:2c:b9:11:3a: 6d:ef:63:34:fd:b9:ba:c8:61:ed:9d:04:5e:a9:1d:9f:c7:d8: 97:1c:d0:dc:17:fd:4f:6d:2d:0e:19:64:9f:94:1c:83:9d:c9: b5:d1:99:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwNjEyMjAzMjUwWhcNMjYwNjE5MjAzMjUwWjAYMRYwFAYD VQQDEw02YTJjNmNmMi0xMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDGAr2wjk00JESmyM0JBZbgmqqVB5SKbX4+J36Yyc2l3QeHSv3LuzaYAIrD9 SF2AKCCdlI4XWeMYj8jKtCF2QkvMCsNSBUQK1oG+zmG7v29tOVsAJ5YIktzGlux3 oKTlwoKIfIqNZYtvrqfyZ+2d4cz+yPz5YP4UGr0Pancj5niRTd2AK3os9cFGozaj 5EHKJ3NgoFNd6ISrFEldEsZxcewmCH9XSqsEEW+tTIpH8L8VkLltvhBmyftMViqU dY2gy2XpwsCELZWn82YciwE1o7mVgtt2fYbOwR0vnyhEqai/QI2Y9TcKoAb/dYn/ tkYTOZ4mQYuXkcJF/xseyMQ+EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOf/+rCc 8rNH+wO9y6na9pa4YiSlMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2Xh+h+EdS0HBRL5QmLLF3hMZ8ipTYYiE4CreA7mShJWOwTRO1bUIAMihufwd Ov+wBjxXjFZJXFps3GB7LhVW2EGjzPnabGOsVJGCAyVZfbrgXR4JKjbYFFmU00mo hpdeZj1XUZY08D8ZzctNK04NmlJmx1cfoRLjtOuNp1nsi5TQqQcGv0W11/757boU CcBwpXSmpBAsTHm2R97qt40+zIIaOkUrN6OjPe60gW5+b/0NIjMIutkBIMphMrIc p+KaJgfnQH009zGogF1XSEQmteFPm6osuRE6be9jNP25ushh7Z0EXqkdn8fYlxzQ 3Bf9T20tDhlkn5Qcg53JtdGZRQ== -----END CERTIFICATE-----Generated at Sun Jun 14 02:43:14 2026 by rpki-client