$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: ifOkiAzNIZBCdiLVr/RTPznb7efMcPrxh+M6pk4mnw4= Subject key identifier: 66:B0:32:EB:98:D2:6B:74:34:DB:55:4B:4C:46:C1:CA:E3:B9:37:3E Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0892 Signing time: Sat 28 Mar 2026 20:29:19 +0000 Manifest this update: Sat 28 Mar 2026 20:29:19 +0000 Manifest next update: Sat 04 Apr 2026 20:29:19 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: n7HhyB/wvZ02qVUBPgibp7iCoqba9dDpMxJVxHHEZlk=) 2: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: eXVJ0u7wZXMBnL7wo1/N8615nU+3Q3ZJVgqXJixwzJg=) 3: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: fyTpRXaLemZhNDBM3gpMKafp5N6Q8cViUDzIODGW4Po=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: 8rMyLXRhDBgNo1OZW/Og41SCndsNpZ+BloQ2F9KYexc=) 5: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: PS301Jk6Y0cHef12GbxlhtyzdISxudlooBdL/pYkI1M=) 6: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: AJCPY6gXO2zyo2U10GhSfGU9o4iE1Zv4wHbAEbhh+Pw=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: IurGq+/p74kj0cOYI7IIex6bTsVIQg2alWHiMdd13ts=) 8: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: PzLLkSB5J2MZJf6IsORgtS1K1mhp7rG5kzX8OnLBvKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 20:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Mar 28 20:29:19 2026 GMT Not After : Apr 4 20:29:19 2026 GMT Subject: CN=69c83a1f-8ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:5e:bf:d2:52:24:31:7c:8a:8c:cd:b8:fb: 32:29:e3:42:a3:54:be:5c:6e:29:f9:cf:3f:ac:1e: e7:90:25:e2:44:f5:01:17:26:38:ff:0f:3b:b0:3e: 1e:e7:27:6c:22:49:b6:15:90:29:fb:95:fc:60:4c: 63:00:20:92:9c:b5:65:87:e0:9d:48:a9:bc:cc:b8: 6e:b8:35:65:6f:78:74:24:de:34:47:ed:a7:10:b5: be:a3:f1:c5:53:04:92:a7:fc:06:1f:33:54:c0:01: 89:59:c8:ca:a9:e6:25:ae:40:05:36:4e:d3:aa:a9: ed:5b:83:87:a2:9a:1d:9f:4d:4d:40:b7:9c:76:d3: be:52:0a:1e:42:1e:cd:bc:bd:93:0e:a0:27:aa:44: f4:e6:7f:89:7b:a9:15:b6:e6:53:ca:6e:1b:63:8e: 8e:bc:6e:27:bc:e9:77:1f:6a:7d:e4:7a:b0:3c:aa: b3:53:08:e0:d4:62:f8:d4:ef:fb:b8:66:4c:de:fc: cf:79:4f:e3:ce:b3:09:b1:f8:6a:06:47:ef:0e:e3: bc:27:4d:b0:e1:3b:b4:e7:53:95:c8:d7:29:ca:d5: 47:9e:ce:6b:96:e3:b1:9f:6e:76:27:ab:8d:da:a2: 07:0d:14:f9:01:50:4d:6e:23:56:1b:32:a6:33:16: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:32:EB:98:D2:6B:74:34:DB:55:4B:4C:46:C1:CA:E3:B9:37:3E X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:e0:8c:23:30:23:df:a0:6a:2e:dc:51:b9:1b:b3:15:12:b6: 40:21:67:c1:18:7e:f5:04:fa:45:27:94:b7:1b:82:ed:b9:7e: 63:b5:68:a5:d2:dd:1f:0c:f9:a5:77:63:38:1f:ac:17:d1:a9: 05:ef:e7:b7:7f:3f:7e:22:e3:4e:d1:d8:f7:05:15:c7:e0:a0: 8a:5d:27:7c:5a:7a:00:b7:05:5b:8c:51:0b:c1:0a:d6:50:c5: 43:cf:20:72:0d:cc:1b:75:0f:c0:09:a8:b6:bc:b1:f3:47:0d: 5d:58:83:73:d4:e9:4a:26:f0:0b:1a:17:9b:9f:e0:6b:62:92: c8:a2:c2:33:97:1a:cd:9b:3e:ef:7d:6f:c9:d0:14:af:e6:e6: a5:d2:17:95:4a:e1:14:88:b2:50:69:dd:75:2c:57:9c:4b:69: 6b:34:78:7e:59:c6:23:8c:61:c9:eb:4d:c4:73:10:61:5c:49: 51:ac:c6:a1:62:64:ec:48:a3:3d:c5:b4:58:3d:0a:96:fb:ab: 82:2e:1d:b6:34:3f:20:99:12:53:83:2f:af:6c:80:2e:25:fa: 97:44:6a:88:29:ea:cc:d9:fe:07:86:cb:24:1f:d1:2c:76:0f: 7b:62:61:0a:f9:f2:25:86:ea:c7:73:a8:46:10:c4:6c:77:e2: 8e:29:6f:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwMzI4MjAyOTE5WhcNMjYwNDA0MjAyOTE5WjAYMRYwFAYD VQQDEw02OWM4M2ExZi04YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUxev9JSJDF8iozNuPsyKeNCo1S+XG4p+c8/rB7nkCXiRPUBFyY4/w87sD4e 5ydsIkm2FZAp+5X8YExjACCSnLVlh+CdSKm8zLhuuDVlb3h0JN40R+2nELW+o/HF UwSSp/wGHzNUwAGJWcjKqeYlrkAFNk7TqqntW4OHopodn01NQLecdtO+UgoeQh7N vL2TDqAnqkT05n+Je6kVtuZTym4bY46OvG4nvOl3H2p95HqwPKqzUwjg1GL41O/7 uGZM3vzPeU/jzrMJsfhqBkfvDuO8J02w4Tu051OVyNcpytVHns5rluOxn252J6uN 2qIHDRT5AVBNbiNWGzKmMxaOcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGawMuuY 0mt0NNtVS0xGwcrjuTc+MB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu+CMIzAj36BqLtxRuRuzFRK2QCFnwRh+9QT6RSeUtxuC7bl+Y7VopdLdHwz5 pXdjOB+sF9GpBe/nt38/fiLjTtHY9wUVx+Cgil0nfFp6ALcFW4xRC8EK1lDFQ88g cg3MG3UPwAmotryx80cNXViDc9TpSibwCxoXm5/ga2KSyKLCM5cazZs+731vydAU r+bmpdIXlUrhFIiyUGnddSxXnEtpazR4flnGI4xhyetNxHMQYVxJUazGoWJk7Eij PcW0WD0Klvurgi4dtjQ/IJkSU4Mvr2yALiX6l0RqiCnqzNn+B4bLJB/RLHYPe2Jh CvnyJYbqx3OoRhDEbHfijilvAw== -----END CERTIFICATE-----Generated at Sun Mar 29 21:29:42 2026 by rpki-client