$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: g7mWfO26hFJtivraYyQ92NBRXRFLhayd0pP1avZKrHc= Subject key identifier: E5:02:5B:96:7C:BF:B3:1B:B7:F1:B4:A6:04:B4:E8:4B:2A:7C:50:A9 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 08CD Signing time: Wed 22 Jul 2026 20:57:15 +0000 Manifest this update: Wed 22 Jul 2026 20:57:14 +0000 Manifest next update: Wed 29 Jul 2026 20:57:14 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: fSO5PvQf0cf9Nq6gLOgaqXmAPriatnXmVOJB/Bu6+AA=) 2: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=) 3: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: PAdaUQdgxLqlRVvXqSXWvpxOh++4R6fUgpb+g4DfWLQ=) 4: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: Ri5k4nLTM5FjFiPGDGnVI9CNKEFUe5ZKCW1t9xCMnX8=) 5: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: FQqCDGGqTojypvXesbKpGYk6ii1pltU7UAGeLGSKQKc=) 6: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: KZWhQJFaOr1QVhDjy5/s3avBTK0WORA9qEg2B6F1JIM=) 7: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: c0dFynBGoAipYefjIF2Nt8mMzxmiVkaUrs6Ri6s7zMw=) 8: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: nWU6XTdSC8J1WjeMu+XQqxcze/9LJeinmviggvmDm6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jul 22 20:57:14 2026 GMT Not After : Jul 29 20:57:14 2026 GMT Subject: CN=6a612eab-94c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:da:b4:22:14:aa:3a:c5:3d:b5:b6:78:fe:d7: 93:8e:9d:9f:cf:99:69:d9:1f:7b:c2:c0:90:ac:95: a5:4c:3a:74:93:87:f1:64:cc:08:98:29:4f:53:be: b7:e7:c2:1e:58:f2:6b:b0:d2:c8:00:e0:39:e9:43: f0:43:f4:f2:2f:13:f3:ce:76:af:e3:28:40:79:10: 67:ce:bd:ad:3c:6f:bf:39:cf:55:e5:71:7d:88:7a: be:03:e1:ce:6d:e6:b9:a5:5b:f2:61:9c:55:c7:b1: 6e:ee:a5:ab:08:2a:e8:41:1e:5a:73:de:c7:94:ec: 5a:b9:63:7b:8c:8a:9e:86:ae:52:ed:8f:2e:f6:8e: 28:f0:75:b0:a7:a3:de:56:88:d1:cc:c1:4d:32:52: 68:d8:68:a5:ef:a4:09:8f:bd:db:db:8c:b2:bc:26: 31:af:3d:3b:e6:e1:86:73:f1:6d:36:ae:b1:d7:c7: ad:b4:72:e7:c9:ae:9f:02:1d:68:99:ff:82:a5:eb: c4:71:da:d4:c5:d3:59:ac:81:4e:25:eb:5c:76:54: d8:8e:14:d7:bb:81:c6:70:c1:6a:25:ba:a7:20:27: 86:e2:cb:64:14:c6:bd:4c:d3:63:e7:cd:90:26:32: 31:aa:cd:4e:f3:04:43:bb:4d:36:66:3e:1f:73:cd: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:5B:96:7C:BF:B3:1B:B7:F1:B4:A6:04:B4:E8:4B:2A:7C:50:A9 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:02:79:ff:f5:d8:55:32:ee:62:0a:34:24:c5:c3:13:81: 99:7b:fe:b8:ad:09:0a:58:18:12:a2:30:9b:85:5e:f0:9f:99: 11:3e:2b:ad:25:a8:49:b5:74:92:ce:4b:9f:ae:84:59:70:b7: 54:da:a6:9a:d8:ec:bd:3f:f7:6e:36:13:ac:68:ec:6e:87:b3: e2:42:1b:5c:41:03:5b:69:b7:92:59:f0:0f:ae:52:32:d8:67: ba:a1:f4:f7:a9:10:2b:ce:d6:5a:ef:a6:0e:74:c9:1f:c7:2e: a7:9f:17:35:a5:cc:6a:f1:5e:ac:90:77:55:0e:e2:01:3e:ce: 58:57:45:7b:6d:bd:c4:8b:b4:8a:c9:2a:c4:6c:5e:67:ba:8a: 63:4c:ba:80:b3:48:24:07:f0:d8:8b:22:ae:e5:64:63:d1:8e: a5:bd:c8:ec:d9:40:9b:26:33:98:36:01:cb:d2:49:05:52:eb: fa:6c:12:43:a9:b3:f9:6a:1a:39:33:47:23:80:cc:13:82:ee: 09:e5:e5:72:14:74:e7:02:55:a1:1e:e9:59:5d:2a:42:e5:82: 66:36:84:4b:54:eb:f8:6e:42:e9:be:16:cc:13:8f:4b:2b:aa: 3e:b0:47:de:02:67:c5:21:8d:84:d1:51:56:36:fb:99:db:7f: 2f:6e:05:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjYwNzIyMjA1NzE0WhcNMjYwNzI5MjA1NzE0WjAYMRYwFAYD VQQDEw02YTYxMmVhYi05NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dq0IhSqOsU9tbZ4/teTjp2fz5lp2R97wsCQrJWlTDp0k4fxZMwImClPU763 58IeWPJrsNLIAOA56UPwQ/TyLxPzznav4yhAeRBnzr2tPG+/Oc9V5XF9iHq+A+HO bea5pVvyYZxVx7Fu7qWrCCroQR5ac97HlOxauWN7jIqehq5S7Y8u9o4o8HWwp6Pe VojRzMFNMlJo2Gil76QJj73b24yyvCYxrz075uGGc/FtNq6x18ettHLnya6fAh1o mf+CpevEcdrUxdNZrIFOJetcdlTYjhTXu4HGcMFqJbqnICeG4stkFMa9TNNj582Q JjIxqs1O8wRDu002Zj4fc82LvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUCW5Z8 v7Mbt/G0pgS06EsqfFCpMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfgCef/12FUy7mIKNCTFwxOBmXv+uK0JClgYEqIwm4Ve8J+ZET4rrSWoSbV0 ks5Ln66EWXC3VNqmmtjsvT/3bjYTrGjsboez4kIbXEEDW2m3klnwD65SMthnuqH0 96kQK87WWu+mDnTJH8cup58XNaXMavFerJB3VQ7iAT7OWFdFe229xIu0iskqxGxe Z7qKY0y6gLNIJAfw2IsiruVkY9GOpb3I7NlAmyYzmDYBy9JJBVLr+mwSQ6mz+Woa OTNHI4DME4LuCeXlchR05wJVoR7pWV0qQuWCZjaES1Tr+G5C6b4WzBOPSyuqPrBH 3gJnxSGNhNFRVjb7mdt/L24FCA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:27:12 2026 by rpki-client