$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: C5rV0Xv4Zj951JHJeswI7Saui/WRyfP8ZHB6Cseq4ok= Subject key identifier: F4:6A:55:2F:A9:F8:0E:74:98:4F:B3:78:FC:6F:6E:B7:64:76:E4:D3 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08AA Signing time: Thu 14 May 2026 20:35:47 +0000 Manifest this update: Thu 14 May 2026 20:35:47 +0000 Manifest next update: Thu 21 May 2026 20:35:47 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: M9S3BXNujBq6rxB0j9lRykE1g86oSXYuiEx2cf6SNfQ=) 2: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 3: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 4: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 5: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 6: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) 7: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) 8: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 20:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: May 14 20:35:47 2026 GMT Not After : May 21 20:35:47 2026 GMT Subject: CN=6a063223-8ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:f2:a5:61:df:52:89:17:3c:ad:ab:31:49: e3:09:3c:41:55:03:a6:84:42:f4:ff:2e:96:b7:75: b8:aa:ef:5f:bf:5f:3c:47:73:d7:cd:fe:c2:61:25: 12:2b:f7:ca:ef:e4:63:08:6d:ee:06:ff:74:c6:e7: 7a:db:79:eb:91:44:1d:98:fa:6f:dc:61:33:0c:c8: 6c:8e:f9:34:b7:3b:3a:e5:64:23:0c:07:4f:ec:ed: bb:40:74:81:2e:36:a6:86:0c:6c:b4:5b:d7:07:14: 6a:1c:43:be:c3:21:74:b5:db:4c:b7:28:72:72:b2: 12:7f:51:9d:3f:bb:8b:22:56:b0:8b:fc:f2:30:56: 59:14:e6:0f:7e:ec:35:29:84:d6:c2:e4:18:2a:94: ef:a6:8b:27:13:76:2d:d6:33:2f:17:a6:96:40:e0: 25:3e:38:29:c6:a8:e6:d2:10:dd:c9:df:f6:bc:14: 04:38:9f:87:63:75:bc:c1:29:52:ef:af:a9:e7:80: 66:2d:4a:c8:81:49:16:70:13:11:ff:c5:f1:78:93: 8b:0b:82:96:97:65:7e:2d:48:05:f6:ae:c9:01:0c: 19:ef:14:75:41:a7:87:eb:36:e9:18:49:75:15:0a: f0:5d:25:c4:a7:18:d9:cf:ce:d4:76:04:9d:dd:e6: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6A:55:2F:A9:F8:0E:74:98:4F:B3:78:FC:6F:6E:B7:64:76:E4:D3 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:0a:ca:cf:ed:45:5b:9a:61:e8:17:d8:0d:40:e4:2e:11:25: 90:e1:2c:d2:1c:f5:99:2f:70:c3:40:8f:36:de:15:f8:e5:c2: 69:3e:6f:f0:70:f3:35:a3:63:97:d1:a6:57:6b:fd:25:1d:6f: 75:31:49:dc:19:0e:54:f5:03:3d:58:fa:64:0b:19:1e:32:8a: df:17:38:7d:be:6c:3a:fa:36:b1:19:48:b9:14:ee:84:d3:c4: 87:f9:8b:43:f9:49:7f:cc:ab:73:6c:2c:cc:e9:6d:6a:ed:14: 8f:89:f4:60:5c:a2:61:42:ff:63:71:ea:1e:9b:ad:61:1d:d4: 10:2b:d7:b5:d8:86:c9:48:6a:38:b2:85:47:4b:69:53:6b:dd: 09:71:b4:e8:c5:db:b2:00:b0:72:02:1b:e8:2c:86:7e:40:77: a8:da:ce:c6:94:6d:c9:52:88:88:78:88:69:41:af:5f:fd:1c: c5:a6:77:6b:f9:8f:a8:ec:56:1b:32:4c:50:ff:c2:6e:27:1c: 5d:41:7f:f3:79:d3:94:9c:8c:e6:8e:de:51:ab:83:a8:b3:ba: f1:f7:61:a7:aa:fa:89:c5:df:fc:0a:de:2f:87:85:7e:da:8b: 6b:11:95:a4:fe:e0:f1:f0:13:0c:19:cf:84:2a:7f:d2:b4:f2: 0c:8a:1f:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwNTE0MjAzNTQ3WhcNMjYwNTIxMjAzNTQ3WjAYMRYwFAYD VQQDEw02YTA2MzIyMy04ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSLypWHfUokXPK2rMUnjCTxBVQOmhEL0/y6Wt3W4qu9fv188R3PXzf7CYSUS K/fK7+RjCG3uBv90xud623nrkUQdmPpv3GEzDMhsjvk0tzs65WQjDAdP7O27QHSB LjamhgxstFvXBxRqHEO+wyF0tdtMtyhycrISf1GdP7uLIlawi/zyMFZZFOYPfuw1 KYTWwuQYKpTvposnE3Yt1jMvF6aWQOAlPjgpxqjm0hDdyd/2vBQEOJ+HY3W8wSlS 76+p54BmLUrIgUkWcBMR/8XxeJOLC4KWl2V+LUgF9q7JAQwZ7xR1QaeH6zbpGEl1 FQrwXSXEpxjZz87UdgSd3eYR7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRqVS+p +A50mE+zePxvbrdkduTTMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAswrKz+1FW5ph6BfYDUDkLhElkOEs0hz1mS9ww0CPNt4V+OXCaT5v8HDzNaNj l9GmV2v9JR1vdTFJ3BkOVPUDPVj6ZAsZHjKK3xc4fb5sOvo2sRlIuRTuhNPEh/mL Q/lJf8yrc2wszOltau0Uj4n0YFyiYUL/Y3HqHputYR3UECvXtdiGyUhqOLKFR0tp U2vdCXG06MXbsgCwcgIb6CyGfkB3qNrOxpRtyVKIiHiIaUGvX/0cxaZ3a/mPqOxW GzJMUP/CbiccXUF/83nTlJyM5o7eUauDqLO68fdhp6r6icXf/AreL4eFftqLaxGV pP7g8fATDBnPhCp/0rTyDIofeg== -----END CERTIFICATE-----Generated at Fri May 15 15:47:40 2026 by rpki-client