$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: k+Dg97oItDdiefJ5XOvY0SfX4lKm7Kftn3B4VV2U+BY= Subject key identifier: CB:A0:0C:40:E4:11:AB:1E:30:6D:5D:E5:4E:7C:28:F7:7A:CD:B4:23 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08A9 Signing time: Tue 12 May 2026 20:36:59 +0000 Manifest this update: Tue 12 May 2026 20:36:58 +0000 Manifest next update: Tue 19 May 2026 20:36:58 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: HYN3iW2RYbKr0qrY0wKCssFbxXyu58nYKkGfQpfZLUk=) 2: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) 3: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) 4: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 5: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) 6: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 7: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 8: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2298 (0x8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: May 12 20:36:58 2026 GMT Not After : May 19 20:36:58 2026 GMT Subject: CN=6a038f6b-d85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3d:ab:19:be:b7:0f:12:96:ee:21:09:58:b9: b1:5c:76:f7:27:89:bb:c2:a5:ec:17:0c:2e:7d:c8: a6:97:3b:2e:9b:11:9d:72:e6:62:19:82:60:a1:fc: 22:57:33:1f:e4:70:7f:95:c6:48:66:40:87:79:3f: 37:0a:91:13:b5:2b:05:fd:b9:25:f8:51:38:fa:30: d3:ac:d3:db:9a:be:0a:90:12:f6:94:ac:16:7b:78: b9:7e:69:db:07:ff:12:e6:0b:4c:87:57:00:a4:d4: 71:e3:91:5d:58:7f:75:6d:12:a8:4f:77:7e:64:18: ac:10:73:a0:e8:60:39:58:c3:e4:38:aa:91:1b:31: 98:88:f6:b0:96:1b:e8:53:b5:b7:90:32:a4:cc:44: 01:33:7a:a1:e9:c7:f1:49:3a:3b:f6:bc:9c:05:f8: 8f:2e:94:c5:ac:0d:29:8f:4f:fe:c2:14:6f:46:99: fe:bb:ca:c5:66:69:f2:79:15:e1:c7:93:24:ae:ae: 5b:9b:56:6a:ac:19:ae:ee:e9:3f:01:79:7b:9a:3b: 95:5c:3b:e2:8c:f1:f6:cf:07:be:3e:c9:d0:52:86: dc:05:63:e8:79:f2:8a:28:09:fd:b8:2d:1f:e6:1f: b0:fb:b6:e2:68:c9:3b:49:e9:2a:40:26:ce:e6:1e: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A0:0C:40:E4:11:AB:1E:30:6D:5D:E5:4E:7C:28:F7:7A:CD:B4:23 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ee:a7:8b:26:0d:13:16:1f:51:e6:59:7b:62:0b:a2:4f:47: 26:2b:7a:e1:91:5e:b7:5c:94:0e:01:70:f3:10:15:61:6c:54: 6e:08:d4:c1:ee:76:3b:b4:6f:05:bf:b3:51:1f:00:44:a8:9d: b9:7f:a0:38:53:d9:c9:2f:12:12:0b:4c:53:02:39:aa:0d:90: ae:82:2d:1f:41:9b:c7:5f:07:25:e0:08:6e:fe:c3:d7:8e:2d: 85:f1:30:f0:19:c9:75:60:f7:fe:5f:cb:af:c8:6d:6e:16:a4: 28:7d:b1:82:c8:26:5f:58:cb:c3:e9:88:ad:2c:72:73:5b:8d: 4c:29:86:d4:18:10:04:32:d7:b1:58:21:54:d0:19:12:e4:93: 87:df:64:cd:de:8f:9b:8d:d3:62:2f:08:b4:42:e7:67:54:13: 64:dc:03:23:eb:91:ed:e0:6f:cf:26:eb:34:df:bc:6b:92:2e: a2:11:49:c0:fd:38:a6:1f:4d:3a:c5:cc:c7:fc:40:06:95:87: cf:c2:90:52:d8:3c:1b:1a:91:f5:2f:13:8b:89:29:21:9d:37: 65:1f:0e:c4:15:1a:2f:a3:9c:73:90:e3:7f:f5:03:aa:b6:e9: 8b:ed:e0:b3:a0:b0:a9:40:4f:b1:fc:83:9e:89:f4:77:46:92: 71:fd:68:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwNTEyMjAzNjU4WhcNMjYwNTE5MjAzNjU4WjAYMRYwFAYD VQQDEw02YTAzOGY2Yi1kODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+D2rGb63DxKW7iEJWLmxXHb3J4m7wqXsFwwufcimlzsumxGdcuZiGYJgofwi VzMf5HB/lcZIZkCHeT83CpETtSsF/bkl+FE4+jDTrNPbmr4KkBL2lKwWe3i5fmnb B/8S5gtMh1cApNRx45FdWH91bRKoT3d+ZBisEHOg6GA5WMPkOKqRGzGYiPawlhvo U7W3kDKkzEQBM3qh6cfxSTo79rycBfiPLpTFrA0pj0/+whRvRpn+u8rFZmnyeRXh x5Mkrq5bm1ZqrBmu7uk/AXl7mjuVXDvijPH2zwe+PsnQUobcBWPoefKKKAn9uC0f 5h+w+7biaMk7SekqQCbO5h4pkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMugDEDk EaseMG1d5U58KPd6zbQjMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABe6niyYNExYfUeZZe2ILok9HJit64ZFet1yUDgFw8xAVYWxUbgjUwe52O7Rv Bb+zUR8ARKiduX+gOFPZyS8SEgtMUwI5qg2QroItH0Gbx18HJeAIbv7D144thfEw 8BnJdWD3/l/Lr8htbhakKH2xgsgmX1jLw+mIrSxyc1uNTCmG1BgQBDLXsVghVNAZ EuSTh99kzd6Pm43TYi8ItELnZ1QTZNwDI+uR7eBvzybrNN+8a5IuohFJwP04ph9N OsXMx/xABpWHz8KQUtg8GxqR9S8Ti4kpIZ03ZR8OxBUaL6Occ5Djf/UDqrbpi+3g s6CwqUBPsfyDnon0d0aScf1ouw== -----END CERTIFICATE-----Generated at Wed May 13 16:13:24 2026 by rpki-client