$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: GEwXvJZzT5qjEWvJNiQl9Zex81iLRqDkfLvFp8xm1QI= Subject key identifier: 67:C7:F8:C4:5A:AC:03:0C:7C:D8:1D:88:57:A5:E9:4A:6C:BB:BC:37 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0D23 Signing time: Tue 12 May 2026 18:10:12 +0000 Manifest this update: Tue 12 May 2026 18:10:12 +0000 Manifest next update: Tue 19 May 2026 18:10:12 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: C66936H0pxmI0NV714f4QohyjYaRdl5wOWNysrSvK7Y=) 2: A0632940737D11F091340126C4F9AE02.roa (hash: jgDnyohF39lqxw7mpQvIsUiCStGHZCXanpLSjS5jMXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: May 12 18:10:12 2026 GMT Not After : May 19 18:10:12 2026 GMT Subject: CN=6a036d04-043a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:d0:36:8a:3a:c5:8e:03:6e:5c:fc:56:4b: fa:80:09:35:d8:30:90:01:c8:dc:28:10:97:29:d4: 26:5d:06:2a:f4:17:41:bc:2c:6e:4a:90:f7:61:4f: 72:c6:a0:f1:94:31:af:b0:9e:e0:56:7c:3d:46:3b: 41:c3:bc:4b:9b:bd:c0:a0:e3:f1:aa:35:3d:90:58: 06:6e:3a:df:32:85:33:ea:95:93:6c:e8:2b:40:a9: d7:82:8f:67:6f:ef:94:06:5a:d4:5b:89:08:84:cf: 4c:86:31:89:15:1e:1d:7e:a8:1f:aa:b8:eb:cd:1e: 15:96:94:87:8d:3f:e9:be:48:4d:ba:7c:43:b0:a1: e3:4a:e6:8d:61:cd:d9:26:b6:a5:a1:f7:51:a9:a1: 94:ae:93:28:bd:87:f6:f5:cf:98:02:c8:e1:df:43: f3:52:53:18:03:df:49:2f:28:01:bd:9b:22:75:e5: 4f:d1:bd:e1:e1:ad:dd:81:ba:dd:55:8b:3e:8a:23: 5a:75:02:81:c9:0f:a2:b9:f3:62:a6:f8:03:22:c8: 34:12:5e:be:fb:ef:ed:fa:8a:6b:99:ba:6c:4b:6d: 44:fc:6d:7c:1f:34:9e:dd:93:07:d7:b8:56:8f:34: 05:e4:e1:2d:04:9d:16:41:72:5e:26:aa:f1:1a:3f: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:F8:C4:5A:AC:03:0C:7C:D8:1D:88:57:A5:E9:4A:6C:BB:BC:37 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5b:fe:19:ab:4b:62:ed:62:3c:b8:10:72:3d:99:ad:d8:c0: 4e:e0:c4:b9:7a:f7:9d:7d:57:68:0c:18:00:a2:3a:1c:1f:29: 45:94:8f:95:06:b7:df:c7:7a:46:81:09:fb:11:b0:35:b2:de: e5:d0:e1:df:7c:66:5a:f9:7e:2c:5a:9c:08:c1:a4:64:d0:95: 12:c6:69:ff:a5:74:43:f0:61:82:91:10:95:c7:96:c9:ef:b4: 62:b8:54:21:f6:45:be:cb:7d:51:53:6f:b2:8f:ec:d6:0b:1b: 75:f9:9d:08:46:5e:b9:4e:4f:e4:12:18:a5:3c:59:f1:72:20: df:ca:e5:8b:74:06:5b:da:9d:4f:37:e7:85:7a:a4:06:78:6f: 8b:6c:07:f0:3c:dd:c7:4e:0c:97:eb:6a:a0:7a:a6:81:fa:78: aa:2d:54:36:1a:49:d1:d6:39:1b:6f:04:ab:65:90:05:9b:3f: 11:a0:53:05:6b:36:29:2d:53:1a:b0:51:1b:6e:14:89:f1:00: 9c:69:40:53:04:20:18:02:82:e6:08:e0:ea:4b:c7:73:14:23: 3a:e1:c1:e8:e7:73:1d:ba:70:10:d7:57:c7:41:9b:90:a8:5d: f8:c9:3e:19:dd:e7:3a:e2:4a:02:35:ee:0f:4f:9f:2e:05:b1: bd:ef:97:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjYwNTEyMTgxMDEyWhcNMjYwNTE5MTgxMDEyWjAYMRYwFAYD VQQDEw02YTAzNmQwNC0wNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrbQNoo6xY4Dblz8Vkv6gAk12DCQAcjcKBCXKdQmXQYq9BdBvCxuSpD3YU9y xqDxlDGvsJ7gVnw9RjtBw7xLm73AoOPxqjU9kFgGbjrfMoUz6pWTbOgrQKnXgo9n b++UBlrUW4kIhM9MhjGJFR4dfqgfqrjrzR4VlpSHjT/pvkhNunxDsKHjSuaNYc3Z JralofdRqaGUrpMovYf29c+YAsjh30PzUlMYA99JLygBvZsideVP0b3h4a3dgbrd VYs+iiNadQKByQ+iufNipvgDIsg0El6+++/t+oprmbpsS21E/G18HzSe3ZMH17hW jzQF5OEtBJ0WQXJeJqrxGj9ESwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfH+MRa rAMMfNgdiFel6Upsu7w3MB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI1v+GatLYu1iPLgQcj2ZrdjATuDEuXr3nX1XaAwYAKI6HB8pRZSPlQa338d6 RoEJ+xGwNbLe5dDh33xmWvl+LFqcCMGkZNCVEsZp/6V0Q/BhgpEQlceWye+0YrhU IfZFvst9UVNvso/s1gsbdfmdCEZeuU5P5BIYpTxZ8XIg38rli3QGW9qdTzfnhXqk Bnhvi2wH8Dzdx04Ml+tqoHqmgfp4qi1UNhpJ0dY5G28Eq2WQBZs/EaBTBWs2KS1T GrBRG24UifEAnGlAUwQgGAKC5gjg6kvHcxQjOuHB6OdzHbpwENdXx0GbkKhd+Mk+ Gd3nOuJKAjXuD0+fLgWxve+X+w== -----END CERTIFICATE-----Generated at Wed May 13 09:52:28 2026 by rpki-client