$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: 8bnC9RYuK0Ip8fs8bu4FYaqbtsIEFsIJp+5HfyTyzj4= Subject key identifier: CA:2D:A1:3F:63:48:E7:3E:6A:1B:20:15:6F:6D:68:8A:21:E8:BB:05 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0D6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0D4C Signing time: Wed 22 Jul 2026 18:19:42 +0000 Manifest this update: Wed 22 Jul 2026 18:19:41 +0000 Manifest next update: Wed 29 Jul 2026 18:19:41 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: wmHdbn+pnkH3Fvxl0NdzvrV+ZKjGP6dHi6kk7Da56F4=) 2: fJnNJysfFnJZhwNg-xYouA3ZQgY.asa (hash: eeRBJjN/rZzzyTGMnMswne4db36QBc0hDwGn8eXvBSg=) 3: A0632940737D11F091340126C4F9AE02.roa (hash: XYU/OfbvTvF81SZSB9Dz1TfcctHinmn1NKkNjqg6sxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3435 (0xd6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Jul 22 18:19:41 2026 GMT Not After : Jul 29 18:19:41 2026 GMT Subject: CN=6a6109be-f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:b3:54:2f:63:d4:e8:f0:e0:d9:87:98:9c: 5f:c8:de:6f:3a:2a:8e:7a:3d:70:56:98:30:70:19: 0f:1f:56:9c:06:f1:e4:27:81:1c:6a:4e:b1:2e:52: ef:49:f6:59:f0:30:f7:1e:b4:bb:50:82:b3:26:f9: 12:00:4e:c3:37:53:08:e1:62:e9:71:57:bd:89:fd: 5e:80:95:44:fc:72:f9:28:e6:53:32:5a:39:6a:4b: 5f:eb:b2:19:32:7f:ce:6e:36:a6:d2:05:3d:9e:dc: ab:04:88:ab:e5:92:dd:5f:0f:60:6e:91:49:f6:5b: a2:71:32:b9:0b:24:a1:8e:6e:1f:f6:ba:e5:37:56: 1a:6f:14:e8:94:a9:59:67:fa:3e:d3:98:e5:02:88: ec:96:bd:d0:c7:3b:98:6c:88:61:47:fc:4d:27:99: de:75:b4:40:b6:54:65:cc:41:da:5c:e9:b6:bf:6b: fc:25:9d:ac:d5:6e:80:11:ab:c2:f1:a1:fd:3d:16: 20:e4:98:dc:bd:fb:ef:a3:f1:5f:2e:67:d4:be:31: f4:3d:7b:2c:9b:8b:87:6f:6e:f0:fe:b6:9a:3e:d6: 27:7c:01:51:a8:ea:84:27:5e:53:8c:0b:0c:f9:31: e7:78:f5:61:17:0e:c3:60:61:70:f7:8b:98:52:ff: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2D:A1:3F:63:48:E7:3E:6A:1B:20:15:6F:6D:68:8A:21:E8:BB:05 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:45:21:04:50:b6:fc:f5:8f:c2:90:d6:98:06:eb:9d:a9:1b: 5a:f1:46:9f:44:00:25:a7:2a:83:a8:d2:1e:d0:dd:8d:c4:bc: 54:7f:b8:20:26:ff:df:b4:8e:5a:8e:bf:d0:b6:06:e9:16:16: c9:6f:6d:65:5c:fc:8b:d8:78:dc:c7:c3:3e:78:3f:e9:c2:2f: 99:93:d2:9f:27:c0:f0:18:35:9f:7c:d5:d1:aa:0a:e3:9f:30: 54:47:64:8e:65:a7:e0:75:94:a1:98:f9:30:98:5a:65:af:62: 3b:0c:8c:3c:6f:1e:4a:ce:5d:83:71:a0:6b:3c:61:9e:c4:7d: f3:72:d1:95:8d:ec:f0:ec:4c:e9:32:18:59:ee:8c:09:0a:45: 96:01:5e:1e:bd:a0:ed:f4:78:3a:95:a2:ff:5c:13:91:2d:77: 15:80:92:b6:3c:03:6d:2d:67:2a:a2:9a:ae:ed:ba:da:9e:a7: 37:16:65:35:c2:53:c4:cc:4f:6b:69:62:4d:2d:66:14:c8:de: 62:95:b6:36:75:2a:b2:85:12:c8:83:8e:a0:67:93:26:0e:37: 93:34:cd:3a:57:4e:b8:55:69:46:70:b4:bf:7e:eb:cb:2a:88: c4:3e:58:20:ed:92:5c:ea:03:6f:b6:1a:45:b1:64:1a:15:25: 20:a9:41:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjYwNzIyMTgxOTQxWhcNMjYwNzI5MTgxOTQxWjAYMRYwFAYD VQQDEw02YTYxMDliZS1mMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvGzVC9j1Ojw4NmHmJxfyN5vOiqOej1wVpgwcBkPH1acBvHkJ4Ecak6xLlLv SfZZ8DD3HrS7UIKzJvkSAE7DN1MI4WLpcVe9if1egJVE/HL5KOZTMlo5aktf67IZ Mn/Objam0gU9ntyrBIir5ZLdXw9gbpFJ9luicTK5CyShjm4f9rrlN1YabxTolKlZ Z/o+05jlAojslr3QxzuYbIhhR/xNJ5nedbRAtlRlzEHaXOm2v2v8JZ2s1W6AEavC 8aH9PRYg5Jjcvfvvo/FfLmfUvjH0PXssm4uHb27w/raaPtYnfAFRqOqEJ15TjAsM +THnePVhFw7DYGFw94uYUv91rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMotoT9j SOc+ahsgFW9taIoh6LsFMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArEUhBFC2/PWPwpDWmAbrnakbWvFGn0QAJacqg6jSHtDdjcS8VH+4ICb/37SO Wo6/0LYG6RYWyW9tZVz8i9h43MfDPng/6cIvmZPSnyfA8Bg1n3zV0aoK458wVEdk jmWn4HWUoZj5MJhaZa9iOwyMPG8eSs5dg3GgazxhnsR983LRlY3s8OxM6TIYWe6M CQpFlgFeHr2g7fR4OpWi/1wTkS13FYCStjwDbS1nKqKaru262p6nNxZlNcJTxMxP a2liTS1mFMjeYpW2NnUqsoUSyIOOoGeTJg43kzTNOldOuFVpRnC0v37ryyqIxD5Y IO2SXOoDb7YaRbFkGhUlIKlBlw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:03 2026 by rpki-client