$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: vBnsr//O8xZ7Vkr+zhy6BLqI7Oh57HA9S4SMXEIMHUM= Subject key identifier: A2:2D:77:92:ED:E5:88:3B:BB:E4:5E:88:69:65:94:A1:0C:FA:35:B0 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08F6 Signing time: Sat 10 Oct 2026 20:26:53 +0000 Manifest this update: Sat 10 Oct 2026 20:26:52 +0000 Manifest next update: Sat 17 Oct 2026 20:26:52 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: aahO7X56eMQ+YOQ7wcgnx2PP8XvQmD5U2q4jav0OlKo=) 2: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) 3: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 4: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 5: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) 6: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 7: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 8: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Oct 10 20:26:52 2026 GMT Not After : Oct 17 20:26:52 2026 GMT Subject: CN=6aca9f8d-cff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:c3:f6:ea:90:f4:67:0a:a4:63:1e:bc:92: a0:24:86:47:c3:24:28:eb:5e:29:ea:87:c5:69:3e: 65:04:fc:9f:b3:ec:44:de:5b:74:95:49:cb:35:46: a8:ef:e4:0d:39:da:8e:46:96:f9:ce:73:f5:26:b2: 92:c7:f2:07:b2:bf:18:85:af:ce:0d:4d:81:19:f6: 49:a0:dc:dd:40:e3:10:2d:0b:f2:96:a6:24:63:70: 67:0c:be:23:d9:a1:fb:46:67:13:aa:02:df:60:d1: 3c:68:28:70:d1:e4:45:7d:aa:54:df:da:8c:21:e1: e5:b2:20:1a:ec:f5:04:ac:ae:46:c3:75:2e:f7:a6: a8:a1:89:e4:ca:1b:b5:a1:00:19:30:73:08:82:74: 63:13:57:67:31:32:1d:7a:3b:a2:3f:40:8b:c8:75: 40:ab:c9:cf:6b:ea:d8:52:a9:0c:15:6c:da:47:33: 12:67:b9:3d:79:08:ed:12:ad:df:a4:fb:8c:23:1a: 30:c3:0d:40:d1:0d:ad:d2:97:36:30:a6:14:0e:b9: 36:96:7f:01:57:8a:09:f1:89:c4:6d:b6:41:53:6c: 7b:04:be:2c:c1:d2:67:c5:11:3e:e5:ef:21:08:d0: 61:0e:dc:7b:84:66:d4:d0:c8:c9:db:fa:05:6c:80: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2D:77:92:ED:E5:88:3B:BB:E4:5E:88:69:65:94:A1:0C:FA:35:B0 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:57:33:ea:05:0b:7c:ae:1a:94:2f:bf:30:8f:d5:56:28:1d: b8:e9:18:1e:f2:cb:d8:22:ff:f4:ac:7d:83:df:76:c6:46:bf: 47:29:2f:59:28:92:85:61:03:79:1e:15:ee:cf:12:6a:5b:73: 42:fc:d6:26:a2:39:04:c0:6e:ae:01:47:a2:fd:7c:00:2c:1d: 37:5e:cb:0e:96:90:81:41:87:69:fa:e1:f8:58:6d:70:7e:64: 22:e2:bb:94:6b:f1:26:0e:6c:84:c4:92:f3:24:1b:9e:23:b7: 1a:20:4e:b4:d1:6d:5b:2a:a2:9a:34:0d:1f:ce:b4:02:6f:fd: a6:ef:5e:6f:da:a3:1b:8c:07:96:8a:23:f6:58:9e:a5:6c:fb: 9d:c1:cd:e9:8d:9f:a2:d0:c5:9b:ae:a6:8d:e5:31:1b:4d:3b: 33:ff:c8:80:6b:ae:de:5f:85:07:8b:17:1f:a2:5b:b6:c0:46: c8:ee:af:7c:69:38:d3:1a:99:25:87:cf:f9:c8:d0:cc:f5:ea: 90:d6:db:63:d3:09:71:ff:75:32:2f:13:28:df:37:58:12:99: fb:23:b5:de:1d:e7:2a:16:80:e6:31:18:0e:93:f1:c2:e7:52: b3:6c:13:97:85:b4:32:a2:2a:bf:29:94:52:1d:94:e5:d2:3f: 63:44:cf:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYxMDEwMjAyNjUyWhcNMjYxMDE3MjAyNjUyWjAYMRYwFAYD VQQDEw02YWNhOWY4ZC1jZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqLD9uqQ9GcKpGMevJKgJIZHwyQo614p6ofFaT5lBPyfs+xE3lt0lUnLNUao 7+QNOdqORpb5znP1JrKSx/IHsr8Yha/ODU2BGfZJoNzdQOMQLQvylqYkY3BnDL4j 2aH7RmcTqgLfYNE8aChw0eRFfapU39qMIeHlsiAa7PUErK5Gw3Uu96aooYnkyhu1 oQAZMHMIgnRjE1dnMTIdejuiP0CLyHVAq8nPa+rYUqkMFWzaRzMSZ7k9eQjtEq3f pPuMIxowww1A0Q2t0pc2MKYUDrk2ln8BV4oJ8YnEbbZBU2x7BL4swdJnxRE+5e8h CNBhDtx7hGbU0MjJ2/oFbICK8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKItd5Lt 5Yg7u+ReiGlllKEM+jWwMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvFcz6gULfK4alC+/MI/VVigduOkYHvLL2CL/9Kx9g992xka/RykvWSiShWED eR4V7s8SaltzQvzWJqI5BMBurgFHov18ACwdN17LDpaQgUGHafrh+FhtcH5kIuK7 lGvxJg5shMSS8yQbniO3GiBOtNFtWyqimjQNH860Am/9pu9eb9qjG4wHlooj9lie pWz7ncHN6Y2fotDFm66mjeUxG007M//IgGuu3l+FB4sXH6JbtsBGyO6vfGk40xqZ JYfP+cjQzPXqkNbbY9MJcf91Mi8TKN83WBKZ+yO13h3nKhaA5jEYDpPxwudSs2wT l4W0MqIqvymUUh2U5dI/Y0TPgA== -----END CERTIFICATE-----Generated at Sun Oct 11 04:25:24 2026 by rpki-client