$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: erIRFFIqobAjwIsOfH+Kpx02sSg7DvNlxWXquP15K2k= Subject key identifier: C3:3F:49:DC:4A:45:17:AA:F3:7E:0F:D3:BA:02:D6:69:3B:69:54:9C Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 092A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08D9 Signing time: Fri 14 Aug 2026 20:29:31 +0000 Manifest this update: Fri 14 Aug 2026 20:29:31 +0000 Manifest next update: Fri 21 Aug 2026 20:29:31 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: e1DwWDqrx/GbEMYIftaXB4+gAGw6YXtf/ydhU2+AlhE=) 2: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 3: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 4: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) 6: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 7: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 8: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 20:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2346 (0x92a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Aug 14 20:29:31 2026 GMT Not After : Aug 21 20:29:31 2026 GMT Subject: CN=6a7f7aab-2b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:ab:68:65:c0:b3:e8:0c:95:5d:0a:0a:4a: ed:bd:6c:b1:9b:72:32:3a:ea:d1:a4:0f:3c:4c:f9: bc:bc:75:31:14:67:c4:0a:c6:fd:58:08:fa:06:8e: 39:36:41:20:d7:08:72:bc:04:09:24:2a:dc:54:2b: 8f:9f:c1:f7:31:70:ba:6e:e3:8c:08:44:33:ee:9c: fe:c1:37:1c:40:ec:ad:39:26:f1:99:45:3b:a8:38: fa:7c:3b:b8:92:fa:d9:13:38:fe:5b:68:74:16:ac: bd:c2:bb:f9:2b:ef:86:74:74:78:a0:24:0d:63:40: 6d:5d:70:ba:5e:96:a8:de:a3:68:b4:43:6d:29:b3: 11:fc:ec:8e:f8:20:41:7d:fe:e9:b7:79:c7:24:f1: d6:e2:17:b9:f6:6e:cf:de:19:68:6c:04:58:4c:dd: 48:18:2a:5b:a8:d8:cc:fa:74:dd:4c:3a:f4:7e:ff: 1e:15:1f:e1:06:63:84:b5:b4:d7:fc:c5:7c:e1:3d: d9:b8:59:19:86:32:df:1e:55:ef:47:cd:30:ac:43: 9d:f9:6b:ca:71:19:3e:6d:80:9e:01:0f:a1:11:1b: 30:d3:1c:6c:d0:c0:74:7b:9c:f0:f6:67:15:b9:ee: 5f:71:71:71:07:1d:92:19:fc:07:97:c2:1f:2e:f0: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:49:DC:4A:45:17:AA:F3:7E:0F:D3:BA:02:D6:69:3B:69:54:9C X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:15:31:7d:f6:b8:a3:36:41:7e:74:cb:31:f3:8c:6c:09:a7: b0:de:e2:ef:45:80:b0:26:e8:36:32:90:24:99:4d:db:27:67: 2b:4a:48:f9:90:45:fe:e4:ea:b3:18:6e:4a:c3:5f:78:33:5e: 9e:23:0f:41:48:3d:c4:60:62:5f:21:2f:22:28:8b:14:48:b3: 9d:29:09:ce:e0:6c:0a:cc:6d:19:2e:f8:d3:e8:7c:ee:b2:d1: a6:a7:85:d9:0e:96:be:7c:74:d6:0f:41:63:ac:a8:f3:eb:e1: 95:d0:67:60:24:57:e8:84:ae:d1:40:36:c4:a7:03:6d:d3:9d: da:6b:18:a7:96:94:e5:f2:7c:8c:a8:df:60:88:db:d4:57:18: 41:27:d4:ab:d2:9c:ab:6b:fd:53:f6:c3:06:6b:67:ef:92:5e: be:42:0a:6d:dc:44:d9:3b:19:bd:49:47:da:2e:34:3f:ed:20: ab:7c:f4:35:af:3e:18:77:70:64:ff:c7:c9:aa:b8:a8:9c:fc: 9c:72:c1:1a:c4:8d:2a:eb:21:79:75:af:ef:f9:20:1c:4b:5d: 4f:b4:c2:75:00:03:51:75:fb:55:fa:0d:df:fc:ac:61:69:85: d1:58:16:30:c4:d7:81:31:52:a1:ab:ac:9d:7f:d0:0b:f6:95: 48:e9:6b:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwODE0MjAyOTMxWhcNMjYwODIxMjAyOTMxWjAYMRYwFAYD VQQDEw02YTdmN2FhYi0yYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUuraGXAs+gMlV0KCkrtvWyxm3IyOurRpA88TPm8vHUxFGfECsb9WAj6Bo45 NkEg1whyvAQJJCrcVCuPn8H3MXC6buOMCEQz7pz+wTccQOytOSbxmUU7qDj6fDu4 kvrZEzj+W2h0Fqy9wrv5K++GdHR4oCQNY0BtXXC6Xpao3qNotENtKbMR/OyO+CBB ff7pt3nHJPHW4he59m7P3hlobARYTN1IGCpbqNjM+nTdTDr0fv8eFR/hBmOEtbTX /MV84T3ZuFkZhjLfHlXvR80wrEOd+WvKcRk+bYCeAQ+hERsw0xxs0MB0e5zw9mcV ue5fcXFxBx2SGfwHl8IfLvB9CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMM/SdxK RReq834P07oC1mk7aVScMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZBUxffa4ozZBfnTLMfOMbAmnsN7i70WAsCboNjKQJJlN2ydnK0pI+ZBF/uTq sxhuSsNfeDNeniMPQUg9xGBiXyEvIiiLFEiznSkJzuBsCsxtGS740+h87rLRpqeF 2Q6Wvnx01g9BY6yo8+vhldBnYCRX6ISu0UA2xKcDbdOd2msYp5aU5fJ8jKjfYIjb 1FcYQSfUq9Kcq2v9U/bDBmtn75JevkIKbdxE2TsZvUlH2i40P+0gq3z0Na8+GHdw ZP/Hyaq4qJz8nHLBGsSNKusheXWv7/kgHEtdT7TCdQADUXX7VfoN3/ysYWmF0VgW MMTXgTFSoausnX/QC/aVSOlrJg== -----END CERTIFICATE-----Generated at Sat Aug 15 13:00:45 2026 by rpki-client