$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: lB4k1MHQrlF+WoHMcmJhDnueqC7MsBOEs6ntcjRfBD0= Subject key identifier: 91:0C:35:97:31:70:7E:88:79:7A:0A:93:0F:42:04:2B:9B:A0:7C:4D Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 357A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 3568 Signing time: Tue 28 Jul 2026 14:43:26 +0000 Manifest this update: Tue 28 Jul 2026 14:43:26 +0000 Manifest next update: Tue 04 Aug 2026 14:43:26 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: nODzKKbujt5h8NJZUGbXgZFzDRhU+RcPr6VAYiyAI1w=) 2: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) 3: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) 4: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13690 (0x357a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Jul 28 14:43:26 2026 GMT Not After : Aug 4 14:43:26 2026 GMT Subject: CN=6a68c00e-124e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:16:0a:55:ba:36:65:ab:b8:ec:34:ed:2d: 22:26:fc:be:dc:c1:99:e5:55:4a:9c:92:0d:ae:7d: 32:ac:ad:d9:94:38:91:b6:58:4a:6c:13:85:e2:19: f3:94:d7:1a:4b:2d:c9:45:17:32:1e:02:91:06:db: 46:14:f2:7b:e9:d2:74:6e:c7:fd:f7:52:59:29:4c: 65:96:b9:56:df:ee:4a:40:c9:ed:80:73:2f:26:1a: d7:d8:ab:cc:7a:f5:f9:3c:b4:1b:98:55:ea:a4:81: 01:34:5b:0c:db:2a:31:ae:d9:c9:4d:78:43:76:5e: 33:cb:51:3c:22:c4:6c:99:ab:f2:06:ce:83:17:c6: 7c:ee:13:6c:34:cc:7f:2e:bd:c3:d2:b3:06:a6:2b: 96:c0:09:4f:d6:9f:75:35:2b:ea:b4:20:75:98:9f: 22:f8:79:a6:32:4d:10:9d:0b:b7:21:c2:15:ca:6e: b5:f0:5f:12:a0:97:cf:b3:54:02:b4:49:6b:2e:09: 7e:c9:9f:e3:32:1d:5f:0e:81:2c:8b:75:c4:79:2d: 15:e9:31:82:4f:49:7a:5f:05:41:24:25:7c:e1:d2: e1:f3:58:12:be:17:c2:98:e8:49:f9:f1:cf:ca:09: 2c:51:01:c9:de:cc:e7:ec:e1:00:47:e8:b0:6b:82: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0C:35:97:31:70:7E:88:79:7A:0A:93:0F:42:04:2B:9B:A0:7C:4D X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:bd:57:3d:5d:f2:af:52:a8:28:fe:99:61:fc:9a:f5:8f:2d: 24:5e:69:91:1b:7b:57:4d:ec:58:ce:f9:c3:8a:af:90:c9:59: 0c:be:aa:8d:9d:26:d5:e8:6c:21:3d:86:40:b5:40:0c:1d:4c: 3f:c0:6c:7b:b1:b9:c5:95:7e:a9:22:f3:27:58:0e:ca:c2:38: c9:b4:fb:b6:a2:7d:89:12:14:39:3d:b1:18:98:4b:d5:4d:c8: 24:0e:14:ca:f8:c7:3a:db:17:bf:61:87:f9:ed:a8:c6:dc:76: c2:b7:bf:83:eb:8c:90:57:f0:a4:b7:37:19:fc:00:a4:13:32: 16:38:e0:8f:cf:69:e8:bf:fe:b1:ce:60:f9:98:46:a9:53:bb: f2:75:2e:e1:0c:32:65:4c:86:2e:2d:6f:65:ea:2b:45:ca:d5: 54:c3:47:ec:70:6a:b5:9d:c8:04:63:c4:62:de:ba:8e:a7:93: 08:bd:65:1c:9e:35:74:49:2f:2b:66:a5:10:4c:9a:2c:86:88: c4:98:c4:3b:91:0d:e9:c2:b1:dc:7a:c9:60:78:d7:a3:d6:09: 44:d0:f9:af:0b:b7:36:cb:5d:5e:a2:67:40:ce:80:34:6d:78: 0b:63:d4:71:9e:ef:65:3a:ec:05:1e:85:c6:7f:e1:7c:9d:2d: 0d:f8:0e:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYwNzI4MTQ0MzI2WhcNMjYwODA0MTQ0MzI2WjAYMRYwFAYD VQQDEw02YTY4YzAwZS0xMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvYWClW6NmWruOw07S0iJvy+3MGZ5VVKnJINrn0yrK3ZlDiRtlhKbBOF4hnz lNcaSy3JRRcyHgKRBttGFPJ76dJ0bsf991JZKUxllrlW3+5KQMntgHMvJhrX2KvM evX5PLQbmFXqpIEBNFsM2yoxrtnJTXhDdl4zy1E8IsRsmavyBs6DF8Z87hNsNMx/ Lr3D0rMGpiuWwAlP1p91NSvqtCB1mJ8i+HmmMk0QnQu3IcIVym618F8SoJfPs1QC tElrLgl+yZ/jMh1fDoEsi3XEeS0V6TGCT0l6XwVBJCV84dLh81gSvhfCmOhJ+fHP ygksUQHJ3szn7OEAR+iwa4KnyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEMNZcx cH6IeXoKkw9CBCuboHxNMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFL1XPV3yr1KoKP6ZYfya9Y8tJF5pkRt7V03sWM75w4qvkMlZDL6qjZ0m1ehs IT2GQLVADB1MP8Bse7G5xZV+qSLzJ1gOysI4ybT7tqJ9iRIUOT2xGJhL1U3IJA4U yvjHOtsXv2GH+e2oxtx2wre/g+uMkFfwpLc3GfwApBMyFjjgj89p6L/+sc5g+ZhG qVO78nUu4QwyZUyGLi1vZeorRcrVVMNH7HBqtZ3IBGPEYt66jqeTCL1lHJ41dEkv K2alEEyaLIaIxJjEO5EN6cKx3HrJYHjXo9YJRND5rwu3NstdXqJnQM6ANG14C2PU cZ7vZTrsBR6Fxn/hfJ0tDfgOmQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:07:18 2026 by rpki-client