$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: jw/3ulpMx50P8hmpyoTyvkhxKEgQfjVKzcB/s+R3RtA= Subject key identifier: 88:4A:17:A5:30:64:FD:2F:D1:5A:E3:BA:02:0C:91:0B:3A:38:AF:07 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 3565 Signing time: Wed 22 Jul 2026 14:43:01 +0000 Manifest this update: Wed 22 Jul 2026 14:43:01 +0000 Manifest next update: Wed 29 Jul 2026 14:43:01 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: Dca8c5oUUS0wsLYRh1zlID47wymNhmswW7g+fQIihDo=) 2: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: E2m3GG0CyyLNe3em7BY2AGdLBy8YhmSii0OKLOGYkJg=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI=) 4: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13687 (0x3577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Jul 22 14:43:01 2026 GMT Not After : Jul 29 14:43:01 2026 GMT Subject: CN=6a60d6f5-02fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:8a:32:e0:80:f1:66:e4:a7:0a:fd:5d:4c: 05:bf:f9:1d:2d:49:ea:36:42:e0:f1:4c:64:17:33: bf:a7:a4:1a:85:f8:be:79:71:7e:0b:7e:f8:e3:14: b4:35:59:a5:cf:1b:36:f0:ba:fc:4c:a9:8b:0c:e8: d4:ff:7a:8b:a7:6f:72:ca:2e:60:93:33:9d:d9:11: 26:33:28:50:45:ce:d2:2a:a0:d2:83:fe:3a:2e:be: e8:6b:ec:3c:8d:8e:26:e4:2f:fa:1c:a6:a7:7c:2f: 0f:03:60:fd:ad:22:9d:9a:c2:36:42:8b:b8:65:33: 3d:49:bd:1e:0a:8f:c7:61:d6:ac:21:ce:4c:0c:fd: 92:52:7f:7e:59:74:90:02:39:ab:aa:c6:1b:2f:5c: 85:ac:0a:66:04:48:7a:31:c1:d0:49:b8:22:b7:58: 0a:cd:f8:69:2d:d5:74:05:7a:29:9b:b5:f9:2d:ee: a8:b3:59:b1:77:18:19:97:b7:ad:3d:a4:22:b0:84: 26:56:b8:ee:a3:b6:8c:fe:a2:72:b5:4c:6d:a6:a8: 53:11:1a:00:1b:c7:0c:56:9b:98:0a:87:8e:c0:d6: fc:b8:13:55:26:84:02:47:67:7d:53:65:73:50:c5: 6f:a6:96:82:39:9d:90:12:54:8c:d1:e7:a2:d4:2f: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4A:17:A5:30:64:FD:2F:D1:5A:E3:BA:02:0C:91:0B:3A:38:AF:07 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0f:93:1a:f7:65:e0:73:ac:bf:bc:2e:0c:18:db:95:24:e5: ea:4f:8a:11:f5:40:39:1d:44:29:fc:f6:8d:a7:27:96:37:55: d8:b7:bf:a3:9f:41:09:f1:8b:bc:07:72:55:19:40:59:eb:d4: da:64:83:84:93:43:dc:5a:49:15:b2:3e:76:00:bd:c0:29:6e: 14:aa:bc:5f:c1:03:74:bc:3f:12:e1:b7:4c:0d:ff:d7:4f:17: c0:22:ea:19:3e:09:9a:79:aa:4b:95:9b:3c:0f:8b:34:94:71: 03:f2:4c:2c:15:84:40:9d:38:ec:03:43:50:94:09:8e:59:03: 65:cc:e9:a1:d1:d4:b6:02:ff:ec:99:ba:d8:57:14:d4:14:1d: cc:51:2d:b0:ef:61:8c:cf:9e:b9:1d:99:38:54:55:de:23:18: d4:de:82:eb:95:40:9a:d9:96:96:d1:15:fc:69:25:fe:77:6d: c9:79:a7:62:bb:1a:4c:6e:f0:55:b2:d7:be:66:0d:55:be:94: 4e:bf:df:09:01:e5:02:f6:29:89:2f:dd:48:d4:25:c7:a9:e1: f8:d6:62:9e:a0:f9:02:17:62:de:a6:f6:ca:f6:ed:ba:0d:0a: ee:00:8e:2e:4e:c4:c8:63:7f:54:3f:a8:e3:8b:4f:e0:7f:b0: 45:85:3b:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjYwNzIyMTQ0MzAxWhcNMjYwNzI5MTQ0MzAxWjAYMRYwFAYD VQQDEw02YTYwZDZmNS0wMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg+KMuCA8Wbkpwr9XUwFv/kdLUnqNkLg8UxkFzO/p6Qahfi+eXF+C3744xS0 NVmlzxs28Lr8TKmLDOjU/3qLp29yyi5gkzOd2REmMyhQRc7SKqDSg/46Lr7oa+w8 jY4m5C/6HKanfC8PA2D9rSKdmsI2Qou4ZTM9Sb0eCo/HYdasIc5MDP2SUn9+WXSQ AjmrqsYbL1yFrApmBEh6McHQSbgit1gKzfhpLdV0BXopm7X5Le6os1mxdxgZl7et PaQisIQmVrjuo7aM/qJytUxtpqhTERoAG8cMVpuYCoeOwNb8uBNVJoQCR2d9U2Vz UMVvppaCOZ2QElSM0eei1C9c0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhKF6Uw ZP0v0VrjugIMkQs6OK8HMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEQ+TGvdl4HOsv7wuDBjblSTl6k+KEfVAOR1EKfz2jacnljdV2Le/o59BCfGL vAdyVRlAWevU2mSDhJND3FpJFbI+dgC9wCluFKq8X8EDdLw/EuG3TA3/108XwCLq GT4JmnmqS5WbPA+LNJRxA/JMLBWEQJ047ANDUJQJjlkDZczpodHUtgL/7Jm62FcU 1BQdzFEtsO9hjM+euR2ZOFRV3iMY1N6C65VAmtmWltEV/Gkl/ndtyXmnYrsaTG7w VbLXvmYNVb6UTr/fCQHlAvYpiS/dSNQlx6nh+NZinqD5Ahdi3qb2yvbtug0K7gCO Lk7EyGN/VD+o44tP4H+wRYU7Hg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:34:20 2026 by rpki-client