$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: 5m4DZ0HF9d+KLw5+sRV6un2dhG16EOW+iegzSHQ1zAw= Subject key identifier: 6A:AA:D6:1F:46:23:A1:70:0D:D5:C5:5A:5B:F4:C8:57:89:57:47:B6 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 35A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 358E Signing time: Sat 10 Oct 2026 14:40:47 +0000 Manifest this update: Sat 10 Oct 2026 14:40:46 +0000 Manifest next update: Sat 17 Oct 2026 14:40:46 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: yjF4k4zA+jqzaWtTsUokilRnxqBn8hwg4PlB0JxueQU=) 2: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) 4: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13728 (0x35a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Oct 10 14:40:46 2026 GMT Not After : Oct 17 14:40:46 2026 GMT Subject: CN=6aca4e6f-121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:f0:e0:95:b4:94:8d:99:60:75:e0:9a:28: 01:c9:86:77:21:f7:41:d3:e5:2d:38:dc:ac:c0:7a: 3e:6b:87:6d:0d:72:7f:74:bd:33:1f:a9:e8:71:dd: 60:73:62:22:a3:ab:d3:67:6f:6a:10:0a:04:25:56: a4:d5:4b:b5:17:78:fe:13:57:93:dc:1a:5b:a7:d2: 30:64:c1:4c:46:ec:8d:50:5d:00:98:32:28:fc:b5: 20:1f:fc:2e:6c:9c:c6:54:e9:19:15:b6:13:ee:2f: 06:80:e4:c2:3f:c7:8d:ad:89:79:ba:21:be:48:b2: 86:25:3b:e5:1e:bb:77:de:72:c6:a9:4a:50:57:6b: 61:6f:af:25:58:9e:84:13:bf:a5:bf:40:cd:36:07: 93:9d:b8:ab:a7:e4:2a:27:ff:90:24:b8:76:dc:8c: 71:5b:62:9c:33:d1:0a:97:3f:5e:f9:57:55:db:2e: 20:12:66:76:00:10:46:d6:11:47:9d:80:2f:dc:f3: ce:78:73:7b:2c:26:3b:1f:b6:1e:c0:04:68:f3:3d: e1:f5:fa:2e:6e:71:f6:8f:8e:07:a9:bb:e4:62:2b: 2c:d9:3f:87:8e:77:9d:43:a4:24:10:16:50:cd:0e: d0:83:79:28:73:4e:e8:d7:fa:07:4d:4c:e8:2b:25: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AA:D6:1F:46:23:A1:70:0D:D5:C5:5A:5B:F4:C8:57:89:57:47:B6 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f0:03:a7:b1:d2:67:85:1b:99:36:96:5d:9b:41:8c:58:8d: e2:09:82:9a:8f:d2:cb:b2:c2:e6:1b:2c:0d:c7:d7:ba:68:c3: c7:ed:3b:17:1f:96:43:a7:d6:ca:c5:91:8a:60:62:6f:6f:df: bb:5e:e8:c1:b7:eb:d0:e7:fa:d0:29:1f:a6:02:1e:17:92:a0: aa:41:e8:0a:44:d0:d9:af:59:68:e0:7d:63:52:9f:16:21:a8: c6:40:33:03:4e:02:42:ab:49:19:be:e7:9e:6e:c9:48:00:67: 46:e7:b9:de:dd:bb:a1:a3:23:3b:8a:b4:93:0c:e5:9d:f4:20: c7:74:82:af:a4:e7:17:a4:97:25:02:56:aa:20:22:4b:9b:51: 95:4a:1b:d9:35:da:d7:21:e0:9e:de:c4:6c:7f:7a:3b:00:52: 96:97:4d:d8:7e:ed:71:be:b2:af:a4:80:ab:75:55:98:7d:8b: 58:6b:53:51:4d:5c:f5:9a:6c:c5:86:5d:ea:6f:3c:8a:7c:de: fd:53:43:05:7b:05:df:ac:fa:66:12:bd:d8:3c:99:3d:ab:79: 0a:b0:b2:58:37:e2:df:c4:5a:f4:0f:56:8b:07:ea:c2:4a:cd: dc:11:42:05:d7:28:31:38:ef:4d:b0:de:d8:d7:c1:f4:b5:c6: 45:e2:19:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYxMDEwMTQ0MDQ2WhcNMjYxMDE3MTQ0MDQ2WjAYMRYwFAYD VQQDEw02YWNhNGU2Zi0xMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGvw4JW0lI2ZYHXgmigByYZ3IfdB0+UtONyswHo+a4dtDXJ/dL0zH6nocd1g c2Iio6vTZ29qEAoEJVak1Uu1F3j+E1eT3Bpbp9IwZMFMRuyNUF0AmDIo/LUgH/wu bJzGVOkZFbYT7i8GgOTCP8eNrYl5uiG+SLKGJTvlHrt33nLGqUpQV2thb68lWJ6E E7+lv0DNNgeTnbirp+QqJ/+QJLh23IxxW2KcM9EKlz9e+VdV2y4gEmZ2ABBG1hFH nYAv3PPOeHN7LCY7H7YewARo8z3h9foubnH2j44HqbvkYiss2T+HjnedQ6QkEBZQ zQ7Qg3koc07o1/oHTUzoKyWSmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqq1h9G I6FwDdXFWlv0yFeJV0e2MB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/ADp7HSZ4UbmTaWXZtBjFiN4gmCmo/Sy7LC5hssDcfXumjDx+07Fx+WQ6fW ysWRimBib2/fu17owbfr0Of60CkfpgIeF5KgqkHoCkTQ2a9ZaOB9Y1KfFiGoxkAz A04CQqtJGb7nnm7JSABnRue53t27oaMjO4q0kwzlnfQgx3SCr6TnF6SXJQJWqiAi S5tRlUob2TXa1yHgnt7EbH96OwBSlpdN2H7tcb6yr6SAq3VVmH2LWGtTUU1c9Zps xYZd6m88inze/VNDBXsF36z6ZhK92DyZPat5CrCyWDfi38Ra9A9WiwfqwkrN3BFC BdcoMTjvTbDe2NfB9LXGReIZQw== -----END CERTIFICATE-----Generated at Sun Oct 11 23:14:27 2026 by rpki-client