$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: hFZsG8HOL5/4EV6gqp3O1RrkfI6D66+hXN5rklF3qgs= Subject key identifier: D6:C8:CF:4C:B7:34:B6:4F:36:EF:7B:8B:9B:69:7D:F2:F5:6F:ED:79 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 3564 Signing time: Mon 20 Jul 2026 14:42:43 +0000 Manifest this update: Mon 20 Jul 2026 14:42:43 +0000 Manifest next update: Mon 27 Jul 2026 14:42:43 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: JWw6wFhNYiZX84sGHTov7Gc8griGDw/UdOTMHfhOq8c=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) 4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Jul 20 14:42:43 2026 GMT Not After : Jul 27 14:42:43 2026 GMT Subject: CN=6a5e33e3-2694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:49:f1:da:c3:0c:60:8a:ce:5e:30:7c:70: 77:5e:97:e3:b4:57:b8:64:6a:4d:6e:b9:75:d2:d3: db:9e:37:cb:ba:b6:e6:36:59:fd:04:07:93:3e:39: b4:1b:85:02:85:79:90:8d:83:ab:e3:dc:bd:a0:af: 88:9b:96:77:f6:88:86:c9:cc:1e:f0:00:18:4d:17: 58:a3:46:e3:ae:6c:9a:c5:21:7b:63:98:6d:b8:37: dc:9b:64:59:87:f1:51:ec:11:0c:bc:89:ff:38:25: fc:2a:ce:33:5f:b1:82:89:77:9a:bc:a5:4d:d9:ee: 5e:d5:02:58:19:01:82:87:4c:9a:e7:94:f4:f1:cb: 0a:f9:de:e6:ee:2d:4a:7e:e5:15:44:2a:6a:08:25: d2:1c:38:72:58:1f:42:30:89:cc:42:40:48:79:c6: 37:af:f3:aa:0f:dd:b0:18:4b:f9:1b:3b:7f:76:a1: 59:22:80:da:cb:d0:2d:59:62:75:f3:64:eb:14:f9: 35:98:e8:50:5a:d3:f2:e6:29:9d:cf:de:7a:79:89: ca:04:a5:e6:7f:10:2b:75:48:78:ff:01:93:9e:92: c8:d0:53:32:8f:23:80:37:07:fa:77:ee:2c:c4:64: d2:22:bf:d5:e5:eb:e3:f1:39:ea:a5:db:e9:48:9b: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:CF:4C:B7:34:B6:4F:36:EF:7B:8B:9B:69:7D:F2:F5:6F:ED:79 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ee:f3:f5:bc:66:e9:8f:e3:de:b9:9d:52:30:56:2a:41:3a: a9:b3:3f:d2:ac:27:fb:a6:96:c0:d4:32:63:73:1c:96:c3:eb: a7:e0:92:82:92:60:c2:aa:4a:08:6a:3c:03:4d:d2:f4:37:66: a7:ae:fa:05:f6:56:30:df:d7:ae:b9:70:f2:ed:d4:58:b8:9d: 69:f4:59:ff:29:a2:8c:bf:55:fd:d7:02:db:47:db:33:d9:17: d6:ca:c4:8b:60:6e:fe:2a:d1:cd:11:79:ba:42:5e:d7:80:cb: dc:c5:11:b6:fc:6d:2d:a0:f5:6b:29:1a:ab:c7:9b:7c:19:61: 75:4a:27:84:38:a0:c8:21:4b:3d:7d:0d:28:4e:c3:d7:c2:e9: f7:bc:4f:8d:4c:4a:01:0d:37:73:f5:f6:12:51:fd:14:f6:85: b4:7d:6c:d0:97:1a:9d:71:fc:25:b7:c5:09:ca:55:cb:e3:a9: ac:3e:54:73:26:13:5d:99:2f:37:3b:12:c0:28:5e:93:cf:7a: e5:c1:ab:a8:a7:93:28:60:59:fe:76:96:b1:9f:c4:4b:87:66: 4f:1a:37:5f:a3:73:f1:c6:71:1e:f2:f7:3c:b9:98:13:ed:75: b0:e6:3f:0a:bb:1e:88:26:a7:46:2c:82:9d:b1:5b:8a:92:40: e6:54:18:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYwNzIwMTQ0MjQzWhcNMjYwNzI3MTQ0MjQzWjAYMRYwFAYD VQQDEw02YTVlMzNlMy0yNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwddJ8drDDGCKzl4wfHB3XpfjtFe4ZGpNbrl10tPbnjfLurbmNln9BAeTPjm0 G4UChXmQjYOr49y9oK+Im5Z39oiGycwe8AAYTRdYo0bjrmyaxSF7Y5htuDfcm2RZ h/FR7BEMvIn/OCX8Ks4zX7GCiXeavKVN2e5e1QJYGQGCh0ya55T08csK+d7m7i1K fuUVRCpqCCXSHDhyWB9CMInMQkBIecY3r/OqD92wGEv5Gzt/dqFZIoDay9AtWWJ1 82TrFPk1mOhQWtPy5imdz956eYnKBKXmfxArdUh4/wGTnpLI0FMyjyOANwf6d+4s xGTSIr/V5evj8TnqpdvpSJuUNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbIz0y3 NLZPNu97i5tpffL1b+15MB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnu7z9bxm6Y/j3rmdUjBWKkE6qbM/0qwn+6aWwNQyY3MclsPrp+CSgpJgwqpK CGo8A03S9Ddmp676BfZWMN/Xrrlw8u3UWLidafRZ/ymijL9V/dcC20fbM9kX1srE i2Bu/irRzRF5ukJe14DL3MURtvxtLaD1aykaq8ebfBlhdUonhDigyCFLPX0NKE7D 18Lp97xPjUxKAQ03c/X2ElH9FPaFtH1s0JcanXH8JbfFCcpVy+OprD5UcyYTXZkv NzsSwChek8965cGrqKeTKGBZ/naWsZ/ES4dmTxo3X6Nz8cZxHvL3PLmYE+11sOY/ CrseiCanRiyCnbFbipJA5lQYrA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:27:51 2026 by rpki-client