$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft File: GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json) Hash identifier: WWpYiPypsCH7/4Xoeah0HyGZfugKuGIFxOVrutw17+Y= Subject key identifier: 3D:42:5A:1E:DC:BD:25:00:35:2C:62:48:89:01:08:0C:10:1A:D7:03 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0EED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft Manifest number: 0ED2 Signing time: Tue 24 Mar 2026 17:32:20 +0000 Manifest this update: Tue 24 Mar 2026 17:32:20 +0000 Manifest next update: Tue 31 Mar 2026 17:32:20 +0000 Files and hashes: 1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: a2kZNaQoFv6qsBCawutmKF32uK24bOlBnjBEOq889fk=) 2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: f81oh/TFo3qHVNgAKwfZj9NYv7cN7F1ZMwUFU1LNjCw=) 3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: BHOVUhWB8Oqrgvkce7N8eoaaW6EsAxKMD/bGEq8z6S8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3821 (0xeed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Mar 24 17:32:20 2026 GMT Not After : Mar 31 17:32:20 2026 GMT Subject: CN=69c2caa4-4a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:b8:6b:d5:74:3e:48:ab:52:f3:83:67:80: d3:49:fb:eb:9b:60:f3:f5:5a:dc:44:4c:fc:27:d4: 72:b5:45:40:9b:b8:fc:bb:f6:71:aa:d2:9f:8b:1b: 2c:33:8b:b5:05:26:e9:d1:56:6b:25:8c:e5:d9:cc: cc:fb:9d:03:ce:52:a5:61:cf:15:83:5f:c4:33:c3: 93:7f:bb:d6:33:62:82:aa:c6:78:95:9f:0b:a7:dd: e0:8a:22:b0:62:44:f5:35:e5:b6:61:aa:f6:0f:96: d6:c7:84:ed:d8:ec:97:be:87:b4:c2:a2:24:73:3f: 58:e1:df:9f:1e:31:c2:9b:2e:74:3a:d4:22:2f:b2: c7:68:d7:86:e4:69:47:c2:49:7c:c6:fb:f2:00:98: 81:d1:83:1c:d1:31:8d:00:dd:5c:ad:cc:7a:01:34: 2e:bf:86:02:53:b8:04:07:d8:5a:e3:cb:ba:17:44: a0:aa:0d:a6:73:37:4e:cb:10:9f:3f:5a:0b:5c:26: 4e:97:53:a8:e7:4e:3c:e1:bd:78:b3:ce:f3:2a:ad: 9f:ed:a5:90:9f:38:ae:79:cd:48:5a:ff:35:a3:df: 14:61:ce:c5:c3:66:5e:5c:bd:01:9e:81:ba:c1:fc: 66:7f:cb:ba:4f:4e:7d:63:18:df:63:cb:8b:61:a1: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:42:5A:1E:DC:BD:25:00:35:2C:62:48:89:01:08:0C:10:1A:D7:03 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a2:12:b3:c5:dc:94:e4:bd:4e:2f:5a:e8:76:ad:89:0d:43: 5c:ae:c5:78:7a:f7:da:f7:eb:b8:4f:ac:91:1f:79:f1:35:4f: 3d:0a:d3:42:98:bc:95:d9:d9:90:24:a1:5c:00:f4:23:cd:50: c0:33:b6:d7:12:57:a1:e5:73:21:2b:ea:58:b8:40:f6:0c:75: 9e:f4:e9:c2:4d:ce:6a:23:1b:25:6e:36:57:60:d4:64:f5:2e: 45:b1:cf:b0:af:80:e3:9c:e4:54:6d:cf:29:51:8e:a1:26:d5: 8d:42:a6:e4:fd:ff:4b:d2:2c:3f:dc:20:5b:c1:2e:55:25:08: 00:56:8f:76:cb:cc:df:8c:2d:2a:57:db:d6:61:ec:39:72:fd: 28:9b:71:73:15:69:18:3c:ac:42:b9:87:b8:ef:7c:12:3b:ca: 68:40:ac:c6:56:2a:d4:c1:38:ff:7b:78:b9:b7:58:bf:5a:89: 6f:91:42:20:94:ff:48:11:da:3a:3b:22:12:20:58:6b:71:f5: 0d:0c:95:3f:13:b7:2c:ec:4b:ff:b0:f0:a0:d3:45:01:7d:f7: ef:88:4d:bd:41:c1:f8:8f:ef:5f:fe:14:8e:ba:7b:73:7a:6a: 71:7f:fb:4c:2e:2a:03:69:03:20:78:e9:a6:c4:23:ae:52:38: 55:9d:ac:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjYwMzI0MTczMjIwWhcNMjYwMzMxMTczMjIwWjAYMRYwFAYD VQQDEw02OWMyY2FhNC00YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx024a9V0PkirUvODZ4DTSfvrm2Dz9VrcREz8J9RytUVAm7j8u/ZxqtKfixss M4u1BSbp0VZrJYzl2czM+50DzlKlYc8Vg1/EM8OTf7vWM2KCqsZ4lZ8Lp93giiKw YkT1NeW2Yar2D5bWx4Tt2OyXvoe0wqIkcz9Y4d+fHjHCmy50OtQiL7LHaNeG5GlH wkl8xvvyAJiB0YMc0TGNAN1crcx6ATQuv4YCU7gEB9ha48u6F0Sgqg2mczdOyxCf P1oLXCZOl1Oo50484b14s87zKq2f7aWQnziuec1IWv81o98UYc7Fw2ZeXL0BnoG6 wfxmf8u6T059YxjfY8uLYaGd9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1CWh7c vSUANSxiSIkBCAwQGtcDMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN6ISs8XclOS9Ti9a6HatiQ1DXK7FeHr32vfruE+skR958TVPPQrTQpi8ldnZ kCShXAD0I81QwDO21xJXoeVzISvqWLhA9gx1nvTpwk3OaiMbJW42V2DUZPUuRbHP sK+A45zkVG3PKVGOoSbVjUKm5P3/S9IsP9wgW8EuVSUIAFaPdsvM34wtKlfb1mHs OXL9KJtxcxVpGDysQrmHuO98EjvKaECsxlYq1ME4/3t4ubdYv1qJb5FCIJT/SBHa OjsiEiBYa3H1DQyVPxO3LOxL/7DwoNNFAX3374hNvUHB+I/vX/4Ujrp7c3pqcX/7 TC4qA2kDIHjppsQjrlI4VZ2sYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:59:26 2026 by rpki-client