$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: R06G2ZUG6rEnLWcxYsgu9PbaYiN4b+IcTb/BtAnxXAc= Subject key identifier: 37:01:F9:69:D2:8D:DE:54:EE:59:17:C4:93:EE:BB:F6:16:BC:48:08 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0D0A Signing time: Tue 24 Mar 2026 18:00:35 +0000 Manifest this update: Tue 24 Mar 2026 18:00:34 +0000 Manifest next update: Tue 31 Mar 2026 18:00:34 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: Y+NX7G6lrqfEnb+hN8pzX9Q+qYHBTHAPWhcvHQrUYPQ=) 2: A0632940737D11F091340126C4F9AE02.roa (hash: jgDnyohF39lqxw7mpQvIsUiCStGHZCXanpLSjS5jMXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Mar 24 18:00:34 2026 GMT Not After : Mar 31 18:00:34 2026 GMT Subject: CN=69c2d143-e8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:e8:26:34:6f:6b:a2:43:59:dc:0a:e1:39: 3e:a2:3f:79:81:0a:13:49:5a:97:94:43:00:17:bd: f4:2a:fb:f5:6d:93:96:d1:a4:81:54:7a:c1:fe:93: 1f:f8:df:06:e3:e3:65:f2:4b:cb:f3:0f:49:a7:95: 92:4f:da:ce:a9:f2:d4:af:df:6d:e5:d7:e1:bf:71: 5c:25:f6:35:f7:68:1d:1b:af:ce:2c:f1:6d:f6:72: 75:13:d5:60:f6:eb:6b:0f:d1:a2:45:29:57:f5:16: cd:2f:f0:68:a9:5f:a8:e6:06:1c:ca:80:b0:02:10: a9:ee:35:52:b1:9f:20:17:78:48:5a:c3:1f:da:5b: a9:4e:4e:9e:bf:8d:ec:c1:35:ed:39:fe:77:93:c4: b7:8f:17:c4:59:ff:1b:60:c9:0e:90:2b:d4:98:d8: 6e:df:9a:74:3e:63:88:48:28:85:2e:a4:0f:5d:5e: 94:f1:48:63:99:00:0e:ab:bf:a3:ab:83:95:bd:d5: 7f:b2:5d:8c:c5:d8:8f:ee:fc:25:a4:97:82:7b:af: d0:be:dc:ef:0a:73:b0:73:2b:c4:1d:b7:8f:2c:31: 61:9e:97:f3:e3:48:c2:8e:ae:26:13:20:f6:b6:2a: f6:e9:a0:6a:e2:b5:2f:81:ef:cf:22:ef:c3:4c:0b: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:01:F9:69:D2:8D:DE:54:EE:59:17:C4:93:EE:BB:F6:16:BC:48:08 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:33:21:21:18:d9:94:5b:60:b3:d8:cd:04:74:eb:4e:72:fc: c7:8a:a2:cc:a7:b7:9f:f2:63:a6:5d:6e:15:fc:d2:e6:47:ac: b8:fd:e8:a0:1b:9a:02:1c:b6:0f:b7:50:66:fe:11:69:0b:19: 4d:18:60:ef:bc:ac:24:39:e1:d4:5b:4c:88:07:95:8c:1f:fe: 55:03:ac:fc:99:a9:43:7e:89:99:d9:69:f5:17:6e:cc:33:3c: 45:73:1b:d1:11:bf:b9:31:56:93:99:02:da:37:54:9d:77:65: bf:09:0a:1b:c3:2a:be:17:6a:2e:ac:fe:71:e6:9d:a0:0c:fd: bb:ca:a5:be:5d:31:c5:65:5a:c4:9f:de:da:d7:b8:76:87:f9: 38:27:27:e4:5a:b4:01:ee:7b:cd:17:c7:17:47:55:3e:df:c6: f9:4c:13:f6:df:ee:20:8c:f3:64:60:94:23:d8:39:50:ef:c4: f4:99:9c:09:99:d6:bd:2f:7f:67:54:95:56:03:90:6d:f3:26: f6:20:f4:e0:36:80:6c:5f:b1:2a:60:9c:2a:ef:f1:c9:b7:95: 54:73:5f:91:fb:02:1a:f6:01:0b:a3:2c:d1:ea:4b:2a:4d:10: 50:96:bf:1f:f0:29:c7:4a:8c:76:36:95:f4:d4:dc:37:d3:7a: 53:10:2b:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjYwMzI0MTgwMDM0WhcNMjYwMzMxMTgwMDM0WjAYMRYwFAYD VQQDEw02OWMyZDE0My1lOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHLoJjRva6JDWdwK4Tk+oj95gQoTSVqXlEMAF730Kvv1bZOW0aSBVHrB/pMf +N8G4+Nl8kvL8w9Jp5WST9rOqfLUr99t5dfhv3FcJfY192gdG6/OLPFt9nJ1E9Vg 9utrD9GiRSlX9RbNL/BoqV+o5gYcyoCwAhCp7jVSsZ8gF3hIWsMf2lupTk6ev43s wTXtOf53k8S3jxfEWf8bYMkOkCvUmNhu35p0PmOISCiFLqQPXV6U8UhjmQAOq7+j q4OVvdV/sl2MxdiP7vwlpJeCe6/QvtzvCnOwcyvEHbePLDFhnpfz40jCjq4mEyD2 tir26aBq4rUvge/PIu/DTAtWtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcB+WnS jd5U7lkXxJPuu/YWvEgIMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASjMhIRjZlFtgs9jNBHTrTnL8x4qizKe3n/Jjpl1uFfzS5kesuP3ooBuaAhy2 D7dQZv4RaQsZTRhg77ysJDnh1FtMiAeVjB/+VQOs/JmpQ36Jmdlp9RduzDM8RXMb 0RG/uTFWk5kC2jdUnXdlvwkKG8MqvhdqLqz+ceadoAz9u8qlvl0xxWVaxJ/e2te4 dof5OCcn5Fq0Ae57zRfHF0dVPt/G+UwT9t/uIIzzZGCUI9g5UO/E9JmcCZnWvS9/ Z1SVVgOQbfMm9iD04DaAbF+xKmCcKu/xybeVVHNfkfsCGvYBC6Ms0epLKk0QUJa/ H/Apx0qMdjaV9NTcN9N6UxArUA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:43:39 2026 by rpki-client