$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: tXmo0PiZjtrsXRyn85DChK9+N4fJpZUhpSlaVi08QI0= Subject key identifier: FA:CE:F0:01:99:DC:EF:67:38:3E:B3:07:B0:BE:6E:1D:51:DE:B9:4A Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 3585 Signing time: Tue 22 Sep 2026 14:40:32 +0000 Manifest this update: Tue 22 Sep 2026 14:40:32 +0000 Manifest next update: Tue 29 Sep 2026 14:40:32 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: r71khQI0sMh9aGvcSaqENlc4lyaAzgZBgFTasRRlWS0=) 2: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) 3: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) 4: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13719 (0x3597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Sep 22 14:40:32 2026 GMT Not After : Sep 29 14:40:32 2026 GMT Subject: CN=6ab29360-04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:24:eb:d2:e9:76:e3:6e:5a:2d:3a:6b:bc: 7f:c6:06:74:2d:91:ac:86:16:04:9d:b6:b8:4c:25: d6:e2:87:be:31:30:64:e4:cb:f0:81:37:d6:e1:c3: 36:0f:c8:ae:5c:93:2b:d9:26:95:8b:83:a1:2d:51: 36:51:de:2e:03:47:3b:53:a2:1d:76:62:80:d7:fc: 3f:d2:8b:e0:6e:4e:4e:58:dc:64:30:a0:c5:cf:ef: 5a:35:ed:97:12:3d:7e:8a:47:af:46:8b:af:97:be: 26:b6:91:0f:22:4f:58:c8:e5:c3:f5:95:8b:a2:3d: 83:78:96:9b:26:33:61:17:49:e7:d7:e8:06:ba:a5: fb:ad:44:9d:67:12:b8:6c:b9:b1:24:b7:ba:05:3a: 4a:d2:f1:33:a2:33:b3:6e:c5:c2:f0:93:96:79:f0: 82:b9:87:9d:c8:9a:c9:9b:ac:4c:85:de:d8:84:13: 68:56:6b:cb:42:fa:31:94:fa:6c:b6:8d:fa:77:3a: a8:d2:91:4e:63:cb:08:45:67:2f:e5:fc:a9:17:c3: 01:02:33:3a:44:f6:a8:d1:24:b5:c3:0c:17:ba:ca: 92:4b:c8:55:7a:4b:bb:0d:61:f3:ab:a9:d7:d3:d4: 25:ca:88:02:5e:0c:61:15:2c:84:3d:24:9c:0a:59: 88:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CE:F0:01:99:DC:EF:67:38:3E:B3:07:B0:BE:6E:1D:51:DE:B9:4A X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2f:2a:c5:e4:60:a9:5e:eb:3f:2a:b5:1d:aa:39:f0:2f:5c: 3b:0c:80:3d:b9:13:69:5e:f6:62:57:1a:d5:ab:de:d0:99:e8: ee:98:e9:3e:c1:91:78:2f:9f:e3:d7:5d:47:06:e3:08:2f:3e: 05:8d:28:f4:f6:3f:d6:7b:55:d3:3d:94:36:8a:0f:0c:66:d1: 27:98:45:d0:92:bc:8b:31:18:86:e3:ee:56:ed:74:d1:29:ad: 14:1d:f1:df:3c:f1:c3:b5:88:44:18:44:f6:ab:45:85:0d:93: e3:1d:f4:0a:a6:4c:eb:ee:b3:01:1d:dc:6b:f5:85:7d:57:17: 2c:2b:ac:7f:44:95:8f:d2:d5:23:b1:a1:f2:91:16:bf:c0:dc: 03:6c:af:8c:d4:9f:a8:50:c2:b5:09:7a:60:6e:b3:c7:5c:18: 49:72:d1:2a:23:91:e9:b5:e0:01:38:d0:c0:47:00:ef:2c:15: a8:74:03:ae:ff:23:53:9e:8a:11:ea:f6:b9:8a:2e:2c:a0:e7: 2f:94:bc:74:83:3f:9e:a7:68:27:93:6a:11:05:b5:e0:5b:a3: 7e:be:1b:ef:fc:07:c1:08:91:b9:f6:c8:e6:41:ce:4c:7a:46: e8:65:7b:b0:d8:02:93:cb:8c:70:81:09:c4:73:2e:52:ca:19: c6:1c:57:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYwOTIyMTQ0MDMyWhcNMjYwOTI5MTQ0MDMyWjAYMRYwFAYD VQQDEw02YWIyOTM2MC0wNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vQk69LpduNuWi06a7x/xgZ0LZGshhYEnba4TCXW4oe+MTBk5MvwgTfW4cM2 D8iuXJMr2SaVi4OhLVE2Ud4uA0c7U6IddmKA1/w/0ovgbk5OWNxkMKDFz+9aNe2X Ej1+ikevRouvl74mtpEPIk9YyOXD9ZWLoj2DeJabJjNhF0nn1+gGuqX7rUSdZxK4 bLmxJLe6BTpK0vEzojOzbsXC8JOWefCCuYedyJrJm6xMhd7YhBNoVmvLQvoxlPps to36dzqo0pFOY8sIRWcv5fypF8MBAjM6RPao0SS1wwwXusqSS8hVeku7DWHzq6nX 09QlyogCXgxhFSyEPSScClmIKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrO8AGZ 3O9nOD6zB7C+bh1R3rlKMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALy8qxeRgqV7rPyq1Hao58C9cOwyAPbkTaV72Ylca1ave0Jno7pjpPsGReC+f 49ddRwbjCC8+BY0o9PY/1ntV0z2UNooPDGbRJ5hF0JK8izEYhuPuVu100SmtFB3x 3zzxw7WIRBhE9qtFhQ2T4x30CqZM6+6zAR3ca/WFfVcXLCusf0SVj9LVI7Gh8pEW v8DcA2yvjNSfqFDCtQl6YG6zx1wYSXLRKiOR6bXgATjQwEcA7ywVqHQDrv8jU56K Eer2uYouLKDnL5S8dIM/nqdoJ5NqEQW14Fujfr4b7/wHwQiRufbI5kHOTHpG6GV7 sNgCk8uMcIEJxHMuUsoZxhxXMg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:52:05 2026 by rpki-client