$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: jNX1usMssZ10IIPFlq62zqzdwGM5vz3MTrDl2uEQcNA= Subject key identifier: E0:6E:6B:DB:0C:CD:7D:88:17:7C:B2:0B:7A:FA:22:7C:4E:20:C1:97 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 10DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 10D3 Signing time: Wed 20 May 2026 17:19:13 +0000 Manifest this update: Wed 20 May 2026 17:19:12 +0000 Manifest next update: Wed 27 May 2026 17:19:12 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: 3YkXUkjjDJGz89NepItkRCnfmqABoXXOHbX6XXKo6W4=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: HxPDHKbAptGURrp1VPcHC1Bsg9OYOIPrENYm1X1q9Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4318 (0x10de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: May 20 17:19:12 2026 GMT Not After : May 27 17:19:12 2026 GMT Subject: CN=6a0ded11-40e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:43:8f:02:26:7c:e5:ca:18:31:74:d9:ff: 96:7f:10:5c:03:49:0b:53:62:17:5c:f7:a3:56:28: 33:70:08:81:4d:5c:b0:9d:d8:b8:04:16:f7:fb:01: 06:2a:84:5e:71:6c:73:a5:c8:66:d6:aa:57:cc:bf: ef:6e:0f:75:b8:19:25:c9:f1:13:31:92:78:09:43: 7b:03:95:84:10:de:b5:7e:7e:81:04:d4:17:b2:be: ae:66:c7:40:61:3f:8e:54:32:46:cd:3f:40:93:b7: ef:a8:8c:8e:a5:51:22:19:96:52:e3:5c:69:0c:ae: 2a:b0:22:1f:c7:bb:4b:c3:00:01:4a:28:67:08:62: 9b:fe:8d:f8:b3:4a:04:e9:c6:a7:bf:03:fa:17:17: 59:96:96:4d:34:9a:34:43:54:17:54:93:38:44:89: 8b:e7:5a:d1:a1:ef:69:12:a5:40:c4:53:df:c5:16: 9e:9b:83:ae:77:ba:24:27:2e:05:53:70:7f:28:5a: a7:1a:e3:dc:8c:ba:41:40:47:5a:b5:3c:82:28:c2: 6a:69:99:98:cb:bc:ee:67:77:27:4b:9b:0f:09:4d: a0:e5:70:4e:92:4e:ba:e7:99:bb:05:19:49:ed:d7: 44:80:be:d8:ee:1c:fc:b1:33:5b:25:18:99:ad:53: 6e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6E:6B:DB:0C:CD:7D:88:17:7C:B2:0B:7A:FA:22:7C:4E:20:C1:97 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:67:b8:e3:fe:26:97:9c:e9:f0:57:99:f5:0d:f0:bd:06:0f: 24:41:b9:75:0e:ae:b8:7b:26:af:5a:42:35:48:4b:b6:17:08: 73:a7:33:c1:3a:cc:42:75:92:5e:d3:ae:1b:2c:46:8e:47:19: 56:aa:d6:7a:c3:f8:fb:79:c4:e5:2c:0d:1d:ee:a3:a8:82:ff: 81:a5:1e:9e:55:69:da:65:bd:17:80:31:d8:c5:d3:05:a8:c2: 5b:d3:3a:8e:3f:3f:fd:98:a7:f0:6d:ce:4e:2d:49:5f:60:f4: f0:80:00:18:4d:d5:0c:04:53:0d:44:36:6a:22:8a:94:f0:c6: 5e:4f:11:cd:22:e6:dd:cf:84:5c:3a:44:c1:b1:63:8b:00:17: 01:4c:1f:95:d7:a8:f9:7b:cb:82:c9:a3:5c:ba:b0:62:52:1a: 3b:0a:2f:76:77:2d:54:0d:d4:4c:9d:5f:34:68:a8:e8:dc:4f: e4:54:64:5a:77:9a:7e:f7:5c:5a:c5:5c:99:75:3c:99:91:48: 9f:3d:99:15:26:13:77:14:23:83:f2:a0:d3:25:ec:7f:d8:a9: 2d:ee:77:f9:09:57:28:1e:14:40:28:40:13:ec:a3:c1:0a:7b: 50:ff:dd:79:5f:6e:ae:63:a5:81:09:68:36:3e:17:0d:9c:49: 81:ce:1e:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjYwNTIwMTcxOTEyWhcNMjYwNTI3MTcxOTEyWjAYMRYwFAYD VQQDEw02YTBkZWQxMS00MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOhDjwImfOXKGDF02f+WfxBcA0kLU2IXXPejVigzcAiBTVywndi4BBb3+wEG KoRecWxzpchm1qpXzL/vbg91uBklyfETMZJ4CUN7A5WEEN61fn6BBNQXsr6uZsdA YT+OVDJGzT9Ak7fvqIyOpVEiGZZS41xpDK4qsCIfx7tLwwABSihnCGKb/o34s0oE 6canvwP6FxdZlpZNNJo0Q1QXVJM4RImL51rRoe9pEqVAxFPfxRaem4Oud7okJy4F U3B/KFqnGuPcjLpBQEdatTyCKMJqaZmYy7zuZ3cnS5sPCU2g5XBOkk6655m7BRlJ 7ddEgL7Y7hz8sTNbJRiZrVNu9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBua9sM zX2IF3yyC3r6InxOIMGXMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIWe44/4ml5zp8FeZ9Q3wvQYPJEG5dQ6uuHsmr1pCNUhLthcIc6czwTrMQnWS XtOuGyxGjkcZVqrWesP4+3nE5SwNHe6jqIL/gaUenlVp2mW9F4Ax2MXTBajCW9M6 jj8//Zin8G3OTi1JX2D08IAAGE3VDARTDUQ2aiKKlPDGXk8RzSLm3c+EXDpEwbFj iwAXAUwfldeo+XvLgsmjXLqwYlIaOwovdnctVA3UTJ1fNGio6NxP5FRkWneafvdc WsVcmXU8mZFInz2ZFSYTdxQjg/Kg0yXsf9ipLe53+QlXKB4UQChAE+yjwQp7UP/d eV9urmOlgQloNj4XDZxJgc4efg== -----END CERTIFICATE-----Generated at Thu May 21 09:39:14 2026 by rpki-client