$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: ceFdILwLrJUM8kCVp2byQQABdXcFRnD+OJePYWWzhNc= Subject key identifier: B8:D9:7E:DD:0D:59:9E:3D:38:F5:3D:59:8D:D0:65:9E:40:FC:3D:A7 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0D8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0D6E Signing time: Sat 26 Sep 2026 18:07:05 +0000 Manifest this update: Sat 26 Sep 2026 18:07:05 +0000 Manifest next update: Sat 03 Oct 2026 18:07:05 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: 8bV4kDjae6vst+M8gbchU4CQ8KJblb1GGLxv0BzQPrI=) 2: fJnNJysfFnJZhwNg-xYouA3ZQgY.asa (hash: eeRBJjN/rZzzyTGMnMswne4db36QBc0hDwGn8eXvBSg=) 3: A0632940737D11F091340126C4F9AE02.roa (hash: XYU/OfbvTvF81SZSB9Dz1TfcctHinmn1NKkNjqg6sxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Sep 26 18:07:05 2026 GMT Not After : Oct 3 18:07:05 2026 GMT Subject: CN=6ab809c9-8443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:e5:aa:f5:64:b6:dc:e9:b2:04:ad:cf:8b: a4:b6:e7:ea:25:c4:7e:99:8b:ea:c4:31:25:48:6b: db:cc:92:83:a3:53:30:f3:4d:cb:35:25:99:2d:b6: 8e:bf:5a:e6:aa:3c:a5:2a:23:2c:ba:ba:0d:f4:92: 45:0a:81:df:f7:62:5f:09:c9:ce:be:13:a9:63:32: 2a:25:8f:ac:62:58:3a:32:87:88:a2:38:ee:8a:c2: f7:df:1b:41:23:7b:42:4e:dc:f5:ac:37:62:1c:a2: 97:27:e1:9c:07:6a:ce:56:a9:92:1a:f4:00:42:b5: a0:60:79:fa:92:bc:b0:77:b0:c9:c3:64:5a:71:e6: 73:90:11:da:54:d5:d5:7f:17:cb:2b:85:c2:c3:d6: 7f:b0:91:6a:fa:46:1b:ca:79:d6:a6:e3:68:89:5a: 69:76:9e:68:de:05:3e:e6:6f:ad:da:cf:3a:a1:a0: 45:b1:5d:c1:5a:bb:35:77:16:21:0f:5f:9d:f0:8a: 15:2e:cb:22:46:98:39:6f:e7:8f:43:80:f7:c3:62: f9:57:a7:3d:9e:a7:42:e6:5b:48:62:51:fd:b1:90: b5:98:3e:04:9b:6d:72:34:c8:3f:12:06:e9:10:5b: ab:6f:f5:ec:15:66:83:2e:a5:b2:10:97:65:07:2f: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D9:7E:DD:0D:59:9E:3D:38:F5:3D:59:8D:D0:65:9E:40:FC:3D:A7 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:98:e9:7c:33:16:b4:3a:06:bc:40:db:62:bb:fb:7a:30:96: 9e:d7:78:f6:76:8b:ff:6f:e9:26:dc:d7:10:ea:a7:33:23:7e: 5c:ff:fc:f1:83:ed:cb:48:89:80:30:dd:0b:34:12:e0:a0:be: 11:41:f5:10:33:3e:d8:43:8b:4a:e2:28:4b:41:97:7c:94:4e: f9:e9:d9:15:ad:6c:5f:ea:3e:6d:b4:b2:f5:82:82:47:a7:46: 9c:73:78:36:36:b8:e5:eb:be:17:91:7e:73:2f:b2:92:49:6e: 7d:29:cc:47:5d:0e:47:7b:dc:43:12:4e:34:e4:5b:b1:29:d6: 9a:8e:91:45:f3:b4:77:5f:55:fd:9c:23:67:30:07:fc:4c:8d: 60:ec:7d:3b:22:39:42:11:8e:26:6f:51:36:93:d0:13:9a:52: 41:4d:5f:4a:a4:83:e9:3e:41:14:12:e9:03:25:4c:cb:d8:98: 6f:34:ce:de:bf:94:db:18:0b:c7:5e:57:b7:64:70:16:48:15: 64:a9:ec:9f:ba:78:55:af:51:86:d5:5d:3b:7c:98:80:03:f7: 41:b3:4f:01:3d:df:ac:56:a2:2f:2a:45:6e:d4:19:10:29:fb: 23:0d:35:b8:9c:72:d4:96:4a:2c:57:39:68:3d:06:5b:db:38: 77:01:db:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjYwOTI2MTgwNzA1WhcNMjYxMDAzMTgwNzA1WjAYMRYwFAYD VQQDEw02YWI4MDljOS04NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkblqvVkttzpsgStz4uktufqJcR+mYvqxDElSGvbzJKDo1Mw803LNSWZLbaO v1rmqjylKiMsuroN9JJFCoHf92JfCcnOvhOpYzIqJY+sYlg6MoeIojjuisL33xtB I3tCTtz1rDdiHKKXJ+GcB2rOVqmSGvQAQrWgYHn6krywd7DJw2RaceZzkBHaVNXV fxfLK4XCw9Z/sJFq+kYbynnWpuNoiVppdp5o3gU+5m+t2s86oaBFsV3BWrs1dxYh D1+d8IoVLssiRpg5b+ePQ4D3w2L5V6c9nqdC5ltIYlH9sZC1mD4Em21yNMg/Egbp EFurb/XsFWaDLqWyEJdlBy913wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjZft0N WZ49OPU9WY3QZZ5A/D2nMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFpjpfDMWtDoGvEDbYrv7ejCWntd49naL/2/pJtzXEOqnMyN+XP/88YPty0iJ gDDdCzQS4KC+EUH1EDM+2EOLSuIoS0GXfJRO+enZFa1sX+o+bbSy9YKCR6dGnHN4 Nja45eu+F5F+cy+ykklufSnMR10OR3vcQxJONORbsSnWmo6RRfO0d19V/ZwjZzAH /EyNYOx9OyI5QhGOJm9RNpPQE5pSQU1fSqSD6T5BFBLpAyVMy9iYbzTO3r+U2xgL x15Xt2RwFkgVZKnsn7p4Va9RhtVdO3yYgAP3QbNPAT3frFaiLypFbtQZECn7Iw01 uJxy1JZKLFc5aD0GW9s4dwHbdg== -----END CERTIFICATE-----Generated at Mon Sep 28 16:27:08 2026 by rpki-client