$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: 6XXpjrXAG/sMCJovUoFaMd+j++RYQcaq1aQElKLhdMw= Subject key identifier: 06:F6:84:CD:8C:5D:D7:B7:DC:D3:58:56:8A:CE:FE:F2:FD:62:AF:A8 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0890 Signing time: Tue 24 Mar 2026 20:21:57 +0000 Manifest this update: Tue 24 Mar 2026 20:21:56 +0000 Manifest next update: Tue 31 Mar 2026 20:21:56 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: 1JmVz6DRcZc3WHwbE9oxymEY9K6+1TCML2BHF5xNZPY=) 2: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: AJCPY6gXO2zyo2U10GhSfGU9o4iE1Zv4wHbAEbhh+Pw=) 3: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: PS301Jk6Y0cHef12GbxlhtyzdISxudlooBdL/pYkI1M=) 4: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: PzLLkSB5J2MZJf6IsORgtS1K1mhp7rG5kzX8OnLBvKw=) 5: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: fyTpRXaLemZhNDBM3gpMKafp5N6Q8cViUDzIODGW4Po=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: eXVJ0u7wZXMBnL7wo1/N8615nU+3Q3ZJVgqXJixwzJg=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: IurGq+/p74kj0cOYI7IIex6bTsVIQg2alWHiMdd13ts=) 8: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: 8rMyLXRhDBgNo1OZW/Og41SCndsNpZ+BloQ2F9KYexc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Mar 24 20:21:56 2026 GMT Not After : Mar 31 20:21:56 2026 GMT Subject: CN=69c2f265-5f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:a5:5c:a3:9b:79:da:ac:0a:3c:2d:3a:da: c1:e0:a3:36:47:c0:79:b3:24:03:31:77:62:17:eb: 8d:ae:55:e8:3f:7b:83:8b:b2:5b:09:61:66:5c:01: b1:9e:33:80:11:42:c3:45:ff:9e:fd:31:f4:eb:07: c1:e3:a4:88:82:a3:34:e3:87:82:55:19:c1:bc:3e: d1:cb:c8:da:2f:e9:12:c7:cf:fd:e2:b6:f8:4e:02: ed:04:1c:d4:38:9f:15:93:3d:dc:30:69:11:ac:e0: f9:b0:39:cc:03:aa:2f:b3:ab:57:89:aa:d3:74:64: f1:16:19:4c:9f:4b:04:42:a6:4b:ba:2c:6d:f4:66: 0e:a4:0f:fe:a9:fe:e8:38:19:97:2d:40:da:5d:99: 21:17:e6:0d:81:76:ae:b5:ba:51:f5:b8:eb:ad:0b: 99:fa:7d:9e:73:a2:b8:4a:1d:25:6f:68:e8:55:f5: 96:ae:e6:4f:93:f9:df:ec:d7:91:31:fc:75:0c:cb: 86:84:5b:64:73:42:46:7d:46:54:e8:13:ec:4d:18: 27:e2:cf:0c:58:ff:4f:fd:0d:15:c1:44:5a:b8:5e: 85:a3:f0:f0:8a:72:27:9e:ff:36:89:b9:04:a0:41: 40:4d:12:75:ff:8c:b4:c5:91:07:13:47:a3:9c:10: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:84:CD:8C:5D:D7:B7:DC:D3:58:56:8A:CE:FE:F2:FD:62:AF:A8 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f6:68:8e:65:09:a0:b9:75:6f:d8:26:62:21:27:83:7d:a2: 33:e0:c1:bd:48:bb:a7:be:a7:f9:9a:b6:09:46:94:7b:54:97: ea:6c:c4:38:cb:f6:00:16:34:50:db:9f:e1:5d:a7:c0:11:a3: 8e:c9:5b:77:4c:4a:ad:47:9b:ed:65:d3:de:16:82:91:f5:5b: 61:ab:91:9f:7e:de:d2:26:82:63:e8:f1:e4:56:1d:ab:a5:17: 17:57:87:be:7b:c0:c1:e3:a8:98:12:b1:bf:45:42:ca:e0:5a: c7:68:01:35:8f:63:ad:f4:68:5a:ae:fe:62:d2:b4:fd:d1:47: 8f:47:5f:77:59:cd:97:1a:93:00:69:67:a8:1e:54:8f:87:e7: 6e:53:fe:c7:a7:7c:20:8a:d0:6a:77:63:10:1c:5e:28:35:63: 18:c9:bf:54:99:8e:77:72:50:75:67:99:23:92:98:a9:d0:69: 93:55:7c:7a:cf:56:6e:22:7d:ac:e9:79:11:6a:87:1d:72:55: 5d:9f:a7:46:16:f1:1a:35:84:f5:46:46:0a:61:9a:2f:6a:2f: 2f:a6:f0:7c:75:2e:20:2a:1c:8c:b7:48:79:e8:f5:9e:ac:5b: c0:03:cc:f2:95:90:dd:76:71:8b:15:74:7f:b7:66:fc:ce:92: 14:08:ef:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwMzI0MjAyMTU2WhcNMjYwMzMxMjAyMTU2WjAYMRYwFAYD VQQDEw02OWMyZjI2NS01ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma2lXKObedqsCjwtOtrB4KM2R8B5syQDMXdiF+uNrlXoP3uDi7JbCWFmXAGx njOAEULDRf+e/TH06wfB46SIgqM044eCVRnBvD7Ry8jaL+kSx8/94rb4TgLtBBzU OJ8Vkz3cMGkRrOD5sDnMA6ovs6tXiarTdGTxFhlMn0sEQqZLuixt9GYOpA/+qf7o OBmXLUDaXZkhF+YNgXautbpR9bjrrQuZ+n2ec6K4Sh0lb2joVfWWruZPk/nf7NeR Mfx1DMuGhFtkc0JGfUZU6BPsTRgn4s8MWP9P/Q0VwURauF6Fo/DwinInnv82ibkE oEFATRJ1/4y0xZEHE0ejnBCDNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAb2hM2M Xde33NNYVorO/vL9Yq+oMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAffZojmUJoLl1b9gmYiEng32iM+DBvUi7p76n+Zq2CUaUe1SX6mzEOMv2ABY0 UNuf4V2nwBGjjslbd0xKrUeb7WXT3haCkfVbYauRn37e0iaCY+jx5FYdq6UXF1eH vnvAweOomBKxv0VCyuBax2gBNY9jrfRoWq7+YtK0/dFHj0dfd1nNlxqTAGlnqB5U j4fnblP+x6d8IIrQandjEBxeKDVjGMm/VJmOd3JQdWeZI5KYqdBpk1V8es9WbiJ9 rOl5EWqHHXJVXZ+nRhbxGjWE9UZGCmGaL2ovL6bwfHUuICocjLdIeej1nqxbwAPM 8pWQ3XZxixV0f7dm/M6SFAjvgQ== -----END CERTIFICATE-----Generated at Thu Mar 26 22:50:18 2026 by rpki-client