$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: 3fKJCFoqs9VLAUwi7y2Vt4XNaO3I6h8kHndTnnC1q8o= Subject key identifier: F2:24:9C:40:CA:2F:D3:CA:59:FA:3A:CD:EC:AC:B9:E3:9C:21:53:CB Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 0685 Signing time: Fri 18 Jul 2025 22:38:52 +0000 Manifest this update: Fri 18 Jul 2025 22:38:51 +0000 Manifest next update: Fri 25 Jul 2025 22:38:51 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: 84N5lOlJV0YmD/vkbCxJKWeYrtCqiOrPpPcuo+AJClk=) 2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Jul 18 22:38:51 2025 GMT Not After : Jul 25 22:38:51 2025 GMT Subject: CN=687accfc-9273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:91:6b:52:2e:0f:8e:be:90:e6:bf:16:d9: ca:7f:dc:67:e3:13:d8:c3:5d:d2:33:f9:3c:25:39: a8:21:51:50:1e:9c:d2:2b:24:61:82:bf:e9:c6:10: f5:27:a4:bd:09:6b:f0:15:7d:67:74:fb:05:8c:3f: 7f:70:0b:bb:dd:3e:94:79:ad:85:29:98:4c:0c:6b: 99:45:4a:a8:67:41:8d:0d:d9:a6:41:db:d1:9f:9d: fd:ff:46:9b:3b:56:63:0d:4a:cd:42:f1:03:93:56: a7:99:ab:b4:bb:3d:1a:50:b2:16:85:5e:12:94:2b: 6b:07:97:99:ce:8b:67:b2:93:40:15:8b:30:7e:83: ec:90:13:de:c8:5c:3f:a6:e8:f4:de:d8:8e:da:7c: 0d:3e:d7:86:6a:b5:26:bc:19:e7:4a:9a:b6:06:56: cb:a7:3b:46:1f:8f:db:04:7a:c3:bc:54:13:4e:15: 54:f3:c2:d6:d0:e6:c1:e0:39:3d:28:7f:a2:a6:1c: 9a:5c:3c:a1:97:c3:df:34:98:85:fd:09:8c:f7:eb: 88:0b:d1:8e:62:39:67:bf:36:2d:c1:a9:bc:b2:72: 0c:e1:0b:d7:92:25:e5:52:dd:82:e7:10:47:0a:59: 33:3e:f8:26:b8:93:71:c9:93:d8:d8:28:1e:a6:bf: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:9C:40:CA:2F:D3:CA:59:FA:3A:CD:EC:AC:B9:E3:9C:21:53:CB X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b3:15:92:c6:c9:3d:56:db:17:f4:3b:21:6f:6b:9c:c4:d2: 8f:81:04:4f:00:fa:c5:f4:ce:d7:f9:c0:cf:f5:bb:60:87:f8: b1:3c:43:d3:0c:76:22:64:38:5e:e8:78:f2:3f:5b:39:4b:1e: 23:fc:6f:7c:dd:91:6f:bc:3d:4d:a6:49:e2:e3:a3:21:86:85: 70:d4:67:f4:da:b1:6d:7c:9d:c8:c1:5b:bb:2e:3d:c8:b0:62: 05:97:d5:f5:94:fe:91:e3:f8:8c:af:45:ed:fc:0e:c7:c0:09: c1:ba:2a:bf:28:03:4a:99:f5:b7:69:2e:54:96:15:22:6a:c6: ca:e6:23:83:c8:82:23:d7:38:a9:6c:2b:f9:e9:c2:77:30:b7: 85:53:75:da:22:a8:97:8b:c7:f7:f0:13:89:c3:ed:8c:d7:e4: 45:f6:ca:a1:8a:bf:0c:ca:2b:84:73:af:6b:c6:0b:30:3e:84: 9f:ba:57:6e:a8:1d:c8:08:2b:51:d2:ce:60:4f:c8:a5:50:d8: ad:44:c2:8b:b8:31:fd:a8:d7:0b:b0:a8:76:47:44:1d:43:e3: 27:d9:42:d4:cb:91:fb:7e:cf:60:2d:bb:c7:1d:23:6d:d0:bb: c0:a5:ee:e4:a9:98:a4:b5:49:65:29:54:4a:37:be:c9:3b:09: d2:1e:f9:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUwNzE4MjIzODUxWhcNMjUwNzI1MjIzODUxWjAYMRYwFAYD VQQDEw02ODdhY2NmYy05MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt6Ra1IuD46+kOa/FtnKf9xn4xPYw13SM/k8JTmoIVFQHpzSKyRhgr/pxhD1 J6S9CWvwFX1ndPsFjD9/cAu73T6Uea2FKZhMDGuZRUqoZ0GNDdmmQdvRn539/0ab O1ZjDUrNQvEDk1anmau0uz0aULIWhV4SlCtrB5eZzotnspNAFYswfoPskBPeyFw/ puj03tiO2nwNPteGarUmvBnnSpq2BlbLpztGH4/bBHrDvFQTThVU88LW0ObB4Dk9 KH+iphyaXDyhl8PfNJiF/QmM9+uIC9GOYjlnvzYtwam8snIM4QvXkiXlUt2C5xBH ClkzPvgmuJNxyZPY2Cgepr9yUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIknEDK L9PKWfo6zeysueOcIVPLMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNsxWSxsk9VtsX9Dshb2ucxNKPgQRPAPrF9M7X+cDP9btgh/ixPEPT DHYiZDhe6HjyP1s5Sx4j/G983ZFvvD1Npkni46MhhoVw1Gf02rFtfJ3IwVu7Lj3I sGIFl9X1lP6R4/iMr0Xt/A7HwAnBuiq/KANKmfW3aS5UlhUiasbK5iODyIIj1zip bCv56cJ3MLeFU3XaIqiXi8f38BOJw+2M1+RF9sqhir8MyiuEc69rxgswPoSfuldu qB3ICCtR0s5gT8ilUNitRMKLuDH9qNcLsKh2R0QdQ+Mn2ULUy5H7fs9gLbvHHSNt 0LvApe7kqZiktUllKVRKN77JOwnSHvkk -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:25 2025 by rpki-client