$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: mqIRkMbs7+nxg5dDrLrhjkAw/XcWmm+sehsKYNjP26w= Subject key identifier: 49:FD:1A:A1:89:81:6D:09:68:85:BC:47:28:B5:39:26:62:4C:CC:48 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 089C Signing time: Thu 16 Apr 2026 20:29:10 +0000 Manifest this update: Thu 16 Apr 2026 20:29:10 +0000 Manifest next update: Thu 23 Apr 2026 20:29:10 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: /5Zr+b/d4+o5g5IND/3Y9scncluSJqfntpvBVitcbG8=) 2: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 4: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 5: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 6: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) 7: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 8: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Apr 16 20:29:10 2026 GMT Not After : Apr 23 20:29:10 2026 GMT Subject: CN=69e14696-766b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:44:82:96:77:eb:8c:c7:72:e4:56:09:9b: 6e:5b:6d:a8:31:b7:f6:25:97:19:ee:95:20:ac:18: 60:28:78:36:ce:0d:aa:2c:a4:4d:6e:4f:ed:b3:46: 73:3c:b6:c2:03:b7:4c:ee:dd:c2:67:ee:f4:d1:f4: b1:c0:e6:a8:ff:ec:84:02:c3:cf:43:58:cd:bf:5e: 82:5e:04:74:ad:af:e5:5e:39:a0:e6:16:c2:85:7a: 7f:0d:8c:e2:73:8a:3a:a5:56:fc:3a:66:3b:04:2f: 56:d7:31:88:70:be:9a:50:fe:29:ae:5c:c9:12:3b: 5f:0e:b5:b6:37:52:57:96:7c:a3:85:c7:45:e6:57: 70:f8:07:ad:59:23:c1:29:7f:7b:66:1c:9b:c6:bc: b8:cc:d2:d3:fd:11:c8:6a:35:92:6f:d0:fd:a9:72: c8:1d:cb:65:99:e2:46:19:34:78:bc:4b:82:08:26: 0a:31:9b:ec:1b:c6:e9:6b:af:be:9a:4b:b6:67:be: de:d4:1a:52:08:f5:aa:69:9a:70:ed:32:fe:a7:a7: 93:88:23:2b:3f:f8:22:0d:a1:e1:6d:22:e6:ed:b4: 60:74:82:4c:f0:a7:5f:d3:a7:3b:2c:b3:95:1e:4d: 19:3a:cb:78:58:cf:f1:73:6f:02:33:e3:d0:d8:be: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:1A:A1:89:81:6D:09:68:85:BC:47:28:B5:39:26:62:4C:CC:48 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:69:73:f9:81:72:3f:4b:3e:0d:c1:c9:bc:0f:78:97:4f:c0: cc:5e:3a:41:7c:47:31:f2:05:91:9c:e9:f0:0d:c0:5c:32:8e: ec:72:c1:29:09:7d:06:e9:1f:54:4f:d4:6c:ac:a1:f0:0d:18: 21:65:c6:fd:73:f4:aa:b9:dd:4b:f0:32:e9:49:25:38:8e:8d: 0c:c8:29:64:3c:65:89:ba:7d:eb:d9:28:76:02:d6:2d:fa:15: 76:ca:e6:63:01:27:28:36:a0:eb:31:c2:6d:a7:59:65:85:aa: 7d:26:be:62:55:16:12:d7:7b:09:34:7f:ee:35:fd:ff:eb:4f: 73:f7:0b:b0:af:14:03:e5:86:26:e6:66:67:ce:d3:e5:bd:cb: 1f:6d:56:f3:a5:41:18:d5:8d:fe:46:13:e9:5a:1a:20:4c:6a: 1e:5b:fb:b4:fd:13:9e:a3:3e:da:b9:5b:08:e7:6b:fa:3f:12: 63:a7:7f:e1:eb:6b:84:b5:c6:29:5b:70:fb:86:0e:13:c0:97: 8d:f2:1b:e7:b7:5b:6e:f8:90:df:c0:a6:c3:ab:aa:47:11:85: fd:8a:f9:0e:91:c7:5e:ef:47:3d:c0:4f:2d:71:7b:87:16:54: 45:7b:de:92:3d:ea:a8:9d:ec:1d:8b:26:98:0f:17:d9:58:da: 56:d8:07:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwNDE2MjAyOTEwWhcNMjYwNDIzMjAyOTEwWjAYMRYwFAYD VQQDEw02OWUxNDY5Ni03NjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrhEgpZ364zHcuRWCZtuW22oMbf2JZcZ7pUgrBhgKHg2zg2qLKRNbk/ts0Zz PLbCA7dM7t3CZ+700fSxwOao/+yEAsPPQ1jNv16CXgR0ra/lXjmg5hbChXp/DYzi c4o6pVb8OmY7BC9W1zGIcL6aUP4prlzJEjtfDrW2N1JXlnyjhcdF5ldw+AetWSPB KX97Zhybxry4zNLT/RHIajWSb9D9qXLIHctlmeJGGTR4vEuCCCYKMZvsG8bpa6++ mku2Z77e1BpSCPWqaZpw7TL+p6eTiCMrP/giDaHhbSLm7bRgdIJM8Kdf06c7LLOV Hk0ZOst4WM/xc28CM+PQ2L6sKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEn9GqGJ gW0JaIW8Ryi1OSZiTMxIMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyWlz+YFyP0s+DcHJvA94l0/AzF46QXxHMfIFkZzp8A3AXDKO7HLBKQl9Bukf VE/UbKyh8A0YIWXG/XP0qrndS/Ay6UklOI6NDMgpZDxlibp969kodgLWLfoVdsrm YwEnKDag6zHCbadZZYWqfSa+YlUWEtd7CTR/7jX9/+tPc/cLsK8UA+WGJuZmZ87T 5b3LH21W86VBGNWN/kYT6VoaIExqHlv7tP0TnqM+2rlbCOdr+j8SY6d/4etrhLXG KVtw+4YOE8CXjfIb57dbbviQ38Cmw6uqRxGF/Yr5DpHHXu9HPcBPLXF7hxZURXve kj3qqJ3sHYsmmA8X2VjaVtgHQg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:55 2026 by rpki-client