$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: vkYFeDvAn+7wqO28B1sGd0XUq05XUMsMeCLGgNL6TxU= Subject key identifier: 38:95:FF:E7:A9:0B:3F:34:D0:41:21:4F:9B:21:D3:B2:58:67:A6:BF Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 352E Signing time: Sat 04 Apr 2026 14:40:57 +0000 Manifest this update: Sat 04 Apr 2026 14:40:57 +0000 Manifest next update: Sat 11 Apr 2026 14:40:57 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: 8IJQSfdSdoVHr0SRDnYVtojopQFP4lkX0EgPP5Qoqgs=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) 3: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) 4: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Apr 4 14:40:57 2026 GMT Not After : Apr 11 14:40:57 2026 GMT Subject: CN=69d122f9-8107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:47:f6:d5:fc:ec:66:5b:45:0e:51:31:fe: 24:2a:58:37:e2:59:e1:9e:23:1a:9a:23:22:fc:86: cc:53:50:e6:66:88:15:50:ce:cb:64:a9:11:07:27: 9e:0f:3b:c4:3f:09:9d:b8:e3:86:e3:01:18:38:dc: f5:bc:cd:40:41:40:62:aa:b6:41:f8:a0:07:ad:d5: 5d:97:a3:d1:c9:99:1a:b8:4c:4e:34:76:f4:2a:c9: 5d:66:c3:9f:f7:3b:55:d4:8e:51:0c:fb:27:77:6c: 0f:a2:e5:70:5d:f4:ac:fd:89:39:94:60:dd:df:17: 79:6a:52:0a:cb:05:f3:61:42:f7:a5:ea:84:3d:0a: 1b:a1:c3:b0:5d:24:48:85:39:95:08:0f:94:0c:84: 20:6e:13:61:3f:f4:db:b8:4e:aa:a5:de:65:df:3d: 3e:1b:bb:6e:9d:32:91:94:41:af:3f:f5:de:a4:ac: c4:93:2b:21:c0:5b:f9:29:04:e5:fe:71:0a:3f:3a: e2:6b:2e:ba:42:24:91:0c:ff:a6:b0:ac:b8:43:a7: fc:ad:7d:6a:9a:61:b0:48:83:e4:d9:ca:20:1f:ef: 6f:d9:89:b7:73:16:41:f5:6d:e3:cd:a2:6b:05:5d: ea:82:b7:53:da:d2:4f:dd:eb:2b:5b:0e:a4:6d:1d: f7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:95:FF:E7:A9:0B:3F:34:D0:41:21:4F:9B:21:D3:B2:58:67:A6:BF X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8d:37:56:a9:71:a0:4c:24:41:0d:96:bc:63:93:a9:ae:24: e3:b7:81:87:ac:ea:f2:e6:60:e0:0e:19:6f:0b:23:55:ce:5b: 8c:b0:72:15:43:88:f1:8e:d5:76:48:f6:e9:a1:bf:50:28:37: 66:5f:29:28:c6:dd:cb:53:7b:f2:b7:c7:39:75:32:30:e0:1f: ea:61:99:38:9d:3c:bd:2b:7f:fd:43:62:95:6f:d1:94:0b:9d: 19:9d:74:fc:fd:b8:76:2c:46:3a:43:6f:73:82:dd:b5:f3:74: 23:dd:13:ac:60:b9:82:e6:c5:70:10:fd:2d:ee:90:ac:af:21: 27:0c:f7:a8:38:d1:22:a7:79:b0:c9:b6:80:fa:77:cd:43:5f: d7:13:8f:7e:66:55:41:fe:e6:23:4f:94:9a:fb:2a:9e:43:3e: 5a:bd:30:d4:07:22:5d:ec:7e:a5:63:6e:d9:e9:1b:23:a7:4f: 21:33:90:70:c1:44:ac:5d:4e:df:38:7f:2b:f9:73:c6:21:f0: 1e:34:4e:76:ff:21:0f:6b:f7:c8:a4:13:1e:6c:c1:f8:cd:1c: ee:3c:a2:d8:db:75:fb:7f:40:99:62:bd:76:dc:93:57:cb:7b: 6f:02:1a:1c:ed:fa:37:e4:8f:29:34:f3:92:6c:ee:ea:05:56: fc:cb:bc:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYwNDA0MTQ0MDU3WhcNMjYwNDExMTQ0MDU3WjAYMRYwFAYD VQQDEw02OWQxMjJmOS04MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxpH9tX87GZbRQ5RMf4kKlg34lnhniMamiMi/IbMU1DmZogVUM7LZKkRByee DzvEPwmduOOG4wEYONz1vM1AQUBiqrZB+KAHrdVdl6PRyZkauExONHb0KsldZsOf 9ztV1I5RDPsnd2wPouVwXfSs/Yk5lGDd3xd5alIKywXzYUL3peqEPQobocOwXSRI hTmVCA+UDIQgbhNhP/TbuE6qpd5l3z0+G7tunTKRlEGvP/XepKzEkyshwFv5KQTl /nEKPzriay66QiSRDP+msKy4Q6f8rX1qmmGwSIPk2cogH+9v2Ym3cxZB9W3jzaJr BV3qgrdT2tJP3esrWw6kbR331wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDiV/+ep Cz800EEhT5sh07JYZ6a/MB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJY03VqlxoEwkQQ2WvGOTqa4k47eBh6zq8uZg4A4ZbwsjVc5bjLByFUOI8Y7V dkj26aG/UCg3Zl8pKMbdy1N78rfHOXUyMOAf6mGZOJ08vSt//UNilW/RlAudGZ10 /P24dixGOkNvc4LdtfN0I90TrGC5gubFcBD9Le6QrK8hJwz3qDjRIqd5sMm2gPp3 zUNf1xOPfmZVQf7mI0+UmvsqnkM+Wr0w1AciXex+pWNu2ekbI6dPITOQcMFErF1O 3zh/K/lzxiHwHjROdv8hD2v3yKQTHmzB+M0c7jyi2Nt1+39AmWK9dtyTV8t7bwIa HO36N+SPKTTzkmzu6gVW/Mu8+Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:28 2026 by rpki-client