$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: nM0QsoT5UsdeD4BktirisFOQkxrVwbMdRyUlZhF2a/Q= Subject key identifier: DD:EA:07:75:64:1F:E0:F6:24:00:2A:72:A1:37:D8:FC:78:62:01:29 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0D4E Signing time: Sun 26 Jul 2026 18:22:23 +0000 Manifest this update: Sun 26 Jul 2026 18:22:22 +0000 Manifest next update: Sun 02 Aug 2026 18:22:22 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: oadMswbQ2Ado6B6VtsP33ZYiSS1z7n3B5NhpfVnA2D8=) 2: fJnNJysfFnJZhwNg-xYouA3ZQgY.asa (hash: eeRBJjN/rZzzyTGMnMswne4db36QBc0hDwGn8eXvBSg=) 3: A0632940737D11F091340126C4F9AE02.roa (hash: XYU/OfbvTvF81SZSB9Dz1TfcctHinmn1NKkNjqg6sxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Jul 26 18:22:22 2026 GMT Not After : Aug 2 18:22:22 2026 GMT Subject: CN=6a66505f-f8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:99:bc:11:ee:70:07:87:26:b7:97:c6:4d: 5b:9b:a7:5c:c1:f1:ef:10:f0:54:49:56:9a:7a:ba: 82:20:93:c5:65:f9:7a:b3:54:38:46:dd:f6:6a:9a: d9:59:66:49:87:cc:17:cb:9d:ff:c7:0e:f6:5a:30: 91:6d:bc:03:38:32:ce:cb:d2:44:6e:35:c4:9a:28: ab:2a:9c:3a:18:05:9a:22:3d:8e:26:c8:da:49:fc: 65:c7:0d:86:ee:c5:c9:48:dd:7a:fc:76:05:f8:f8: 9b:0e:1c:90:0d:6b:15:d5:5d:1e:4f:85:3a:c0:5e: 65:1c:a0:a2:d2:d1:47:70:1a:59:ca:92:2d:76:28: 65:be:aa:69:0d:4c:9b:8e:99:79:d2:c4:df:c2:c3: b4:f9:9c:7f:84:b2:38:df:4e:ba:9e:0f:e5:41:c8: e8:92:74:53:cd:90:0c:5a:82:73:d3:5c:4e:e0:5c: 8a:d4:05:92:b9:6b:3e:d2:f0:cd:de:25:f6:06:77: 35:9f:89:d3:3a:8d:d4:4e:28:30:4b:7e:76:61:71: bc:88:dc:53:4f:68:2d:79:a7:b3:86:15:51:c2:b2: e2:64:dd:32:77:a7:13:27:e0:07:1e:3c:90:69:87: 94:f5:df:33:75:b9:aa:96:02:8a:36:e2:15:7c:2b: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EA:07:75:64:1F:E0:F6:24:00:2A:72:A1:37:D8:FC:78:62:01:29 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c1:c9:1a:2f:88:a1:39:80:32:01:17:bf:a2:db:75:3d:3d: db:e3:6d:dd:b8:1e:fb:4d:06:82:8f:58:2b:82:44:39:f3:82: 0f:92:4d:4e:23:8c:ed:d2:ba:24:dc:63:03:9c:09:33:ab:98: 1f:dc:b9:29:e1:19:b9:c2:e1:a8:34:44:af:13:ce:14:70:f3: 73:0e:21:4e:50:68:35:32:c9:95:10:3b:3a:f6:ad:32:ad:ff: e7:71:fc:7d:2c:bb:a2:5e:db:bc:70:1b:c3:c3:73:f4:83:d8: 67:10:c9:92:4a:5c:d5:77:ba:b6:04:d5:47:77:8a:eb:7c:25: 6e:ef:5f:f0:1e:6b:e8:a4:bd:05:4c:de:a7:60:07:b6:87:0c: 2e:cc:77:37:3e:ba:5d:13:73:c3:39:a0:1c:bf:77:21:91:3f: a8:c9:84:00:4e:a9:e1:97:53:6c:cc:e2:30:b3:60:a1:fc:70: 0c:1c:72:a1:c9:11:f0:29:4d:3e:56:e1:6d:d6:ad:f6:93:af: cc:b4:a5:a4:00:b0:79:af:53:18:19:30:f3:90:f2:36:ce:79: 9e:b7:a3:09:8e:de:c4:46:7e:07:e3:d1:8d:88:02:d7:a6:63: 8c:1a:9e:1c:7e:8a:7c:28:df:8f:99:7e:93:ef:f7:96:c0:d1: cd:63:3a:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjYwNzI2MTgyMjIyWhcNMjYwODAyMTgyMjIyWjAYMRYwFAYD VQQDEw02YTY2NTA1Zi1mOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJCZvBHucAeHJreXxk1bm6dcwfHvEPBUSVaaerqCIJPFZfl6s1Q4Rt32aprZ WWZJh8wXy53/xw72WjCRbbwDODLOy9JEbjXEmiirKpw6GAWaIj2OJsjaSfxlxw2G 7sXJSN16/HYF+PibDhyQDWsV1V0eT4U6wF5lHKCi0tFHcBpZypItdihlvqppDUyb jpl50sTfwsO0+Zx/hLI43066ng/lQcjoknRTzZAMWoJz01xO4FyK1AWSuWs+0vDN 3iX2Bnc1n4nTOo3UTigwS352YXG8iNxTT2gteaezhhVRwrLiZN0yd6cTJ+AHHjyQ aYeU9d8zdbmqlgKKNuIVfCtP3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3qB3Vk H+D2JAAqcqE32Px4YgEpMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARcHJGi+IoTmAMgEXv6LbdT092+Nt3bge+00Ggo9YK4JEOfOCD5JNTiOM7dK6 JNxjA5wJM6uYH9y5KeEZucLhqDRErxPOFHDzcw4hTlBoNTLJlRA7OvatMq3/53H8 fSy7ol7bvHAbw8Nz9IPYZxDJkkpc1Xe6tgTVR3eK63wlbu9f8B5r6KS9BUzep2AH tocMLsx3Nz66XRNzwzmgHL93IZE/qMmEAE6p4ZdTbMziMLNgofxwDBxyockR8ClN Plbhbdat9pOvzLSlpACwea9TGBkw85DyNs55nrejCY7exEZ+B+PRjYgC16ZjjBqe HH6KfCjfj5l+k+/3lsDRzWM6uA== -----END CERTIFICATE-----Generated at Tue Jul 28 14:48:35 2026 by rpki-client