$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: sXSbF5KKUj6UUEXUOXYF/2LAfNTYUAEEXBGuRDarYkI= Subject key identifier: E5:F1:FA:2D:1C:DA:3D:AF:B2:52:CA:49:25:FC:1B:72:54:07:3C:37 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 35A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 3595 Signing time: Sat 24 Oct 2026 14:40:19 +0000 Manifest this update: Sat 24 Oct 2026 14:40:18 +0000 Manifest next update: Sat 31 Oct 2026 14:40:18 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: GlrMjiy+HQBb69+OXVoLRm1M7ulQerApW9R5rK2ufFQ=) 2: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) 3: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) 4: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13735 (0x35a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Oct 24 14:40:18 2026 GMT Not After : Oct 31 14:40:18 2026 GMT Subject: CN=6adcc353-62de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:b1:06:0e:74:36:02:75:1a:63:f4:cf:b2: 3f:96:0e:7b:9d:10:86:f0:1d:05:47:33:2f:c9:6e: 8e:39:a1:c1:ba:6a:7c:77:a4:2c:0a:11:95:42:6e: d4:d6:41:a6:34:18:14:94:74:34:e1:53:f0:76:41: 1c:12:f7:f5:cd:bd:f0:84:0a:d4:5b:08:de:35:f0: b0:d1:90:05:52:1d:ed:83:b5:bd:66:e0:f6:c7:ac: d3:f3:90:55:23:70:72:35:87:b1:86:ab:cf:35:ad: 21:ec:17:b4:4f:c8:e5:be:6e:87:2a:68:4b:91:22: 0b:6c:99:91:d1:48:9c:87:b1:bc:47:0b:76:f5:8d: 38:2e:22:5b:08:42:df:32:ba:c1:f4:87:17:15:c0: 4e:8a:99:08:56:97:b7:ce:aa:d5:ac:d7:14:03:70: 9d:00:7d:c0:ea:f4:08:d7:36:19:17:68:52:64:31: 39:55:84:b2:3f:53:eb:d7:81:14:a3:36:b8:ea:bb: 28:a3:85:99:57:5c:5c:50:8c:5f:80:d4:8f:a5:17: db:19:4c:bc:ed:be:e1:61:04:54:c4:e7:c6:fe:f5: 6a:da:63:49:d1:23:8d:9b:fb:73:1c:d4:a3:78:1b: 65:cf:6b:0e:7e:cf:ee:58:50:32:6d:9f:06:76:93: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F1:FA:2D:1C:DA:3D:AF:B2:52:CA:49:25:FC:1B:72:54:07:3C:37 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7d:a8:d7:15:64:ef:e6:bc:5d:58:59:bc:80:66:50:03:3f: be:b3:24:2d:e8:b2:b3:8f:59:11:5e:f5:6c:36:97:82:2e:4b: c0:e4:2c:67:14:7e:e3:df:cf:49:02:bb:5e:7f:e2:8a:44:60: eb:cf:f9:98:87:76:0c:2e:c7:20:c7:8c:f4:98:e5:0c:e8:70: e1:10:27:08:f3:fc:65:4a:a2:b5:39:b9:c7:74:53:f0:c7:f0: 69:4e:b4:8c:31:63:77:23:6e:42:66:42:d7:de:8f:84:94:ff: d1:8a:a5:33:c8:1a:ca:5d:41:05:a1:12:c4:8d:f6:63:0e:f7: 09:69:8d:1e:d5:da:82:06:02:0e:81:8e:2a:a8:a0:66:ec:32: b6:98:97:44:fb:ad:47:db:b1:f8:93:3c:f4:17:31:74:7e:80: 8a:fe:5c:88:9c:04:ef:8f:d3:ea:0d:e7:b8:2e:4b:0a:15:3b: d5:ea:14:77:3d:69:ff:3d:36:65:03:30:82:19:15:86:cd:32: 34:60:ef:b9:64:12:94:c9:3a:4d:aa:bc:37:2a:71:76:03:35: c7:5c:eb:b3:31:50:e5:91:6f:0e:fe:81:c3:94:34:f8:06:88: 9b:d7:ee:76:bb:3b:3e:44:ab:5a:92:34:2d:2a:41:dc:ca:65: f2:38:7c:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYxMDI0MTQ0MDE4WhcNMjYxMDMxMTQ0MDE4WjAYMRYwFAYD VQQDEw02YWRjYzM1My02MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquWxBg50NgJ1GmP0z7I/lg57nRCG8B0FRzMvyW6OOaHBump8d6QsChGVQm7U 1kGmNBgUlHQ04VPwdkEcEvf1zb3whArUWwjeNfCw0ZAFUh3tg7W9ZuD2x6zT85BV I3ByNYexhqvPNa0h7Be0T8jlvm6HKmhLkSILbJmR0Uich7G8Rwt29Y04LiJbCELf MrrB9IcXFcBOipkIVpe3zqrVrNcUA3CdAH3A6vQI1zYZF2hSZDE5VYSyP1Pr14EU oza46rsoo4WZV1xcUIxfgNSPpRfbGUy87b7hYQRUxOfG/vVq2mNJ0SONm/tzHNSj eBtlz2sOfs/uWFAybZ8GdpOkTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXx+i0c 2j2vslLKSSX8G3JUBzw3MB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAan2o1xVk7+a8XVhZvIBmUAM/vrMkLeiys49ZEV71bDaXgi5LwOQsZxR+49/P SQK7Xn/iikRg68/5mId2DC7HIMeM9JjlDOhw4RAnCPP8ZUqitTm5x3RT8MfwaU60 jDFjdyNuQmZC196PhJT/0YqlM8gayl1BBaESxI32Yw73CWmNHtXaggYCDoGOKqig ZuwytpiXRPutR9ux+JM89BcxdH6Aiv5ciJwE74/T6g3nuC5LChU71eoUdz1p/z02 ZQMwghkVhs0yNGDvuWQSlMk6Taq8NypxdgM1x1zrszFQ5ZFvDv6Bw5Q0+AaIm9fu drs7PkSrWpI0LSpB3Mpl8jh80w== -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:24 2026 by rpki-client