$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft File: guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json) Hash identifier: jEumW9o2SgOQ9688kHHOfJkX1rCuxlEbYBfelT4SZVI= Subject key identifier: 87:52:D3:B0:B8:07:C0:64:B9:9B:8F:60:68:4B:9D:7D:69:CF:9F:7A Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 Certificate issuer: /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft Manifest number: C1 Signing time: Sat 19 Jul 2025 06:03:30 +0000 Manifest this update: Sat 19 Jul 2025 06:03:30 +0000 Manifest next update: Sat 26 Jul 2025 06:03:30 +0000 Files and hashes: 1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: aPUCqsOmDGVcQAV7bbY4UdJ8eji9WBVnKo9ZHLhln6U=) 2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Validity Not Before: Jul 19 06:03:30 2025 GMT Not After : Jul 26 06:03:30 2025 GMT Subject: CN=687b3532-e405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:63:82:69:c0:04:c3:59:f3:b9:c0:34:a0: 00:dc:ed:e9:01:9c:99:9c:08:a6:32:31:6d:4f:51: ba:ef:60:f8:b0:db:4d:db:f3:96:4f:d9:ca:2a:ce: 81:4c:21:bb:18:fe:9c:1d:b7:f7:5f:7c:44:1b:ee: 0c:10:b5:bf:e9:66:bc:4b:94:fa:bb:52:51:b4:25: 76:09:f2:16:a2:28:40:1a:a8:07:06:20:47:84:e9: 61:db:9e:5d:d9:78:7c:b5:67:75:e5:10:f9:04:c2: eb:95:76:18:96:78:6d:90:32:6c:48:ba:5a:90:b8: 6e:53:41:f8:f9:b1:49:b9:19:e4:de:3b:fc:11:d0: 08:e2:86:54:0f:9a:87:4d:42:0b:8e:92:1d:61:5d: 29:b5:fd:79:65:7e:db:cd:7a:92:a2:38:07:34:2c: 8e:fc:b5:38:73:a9:cf:0a:5d:40:06:65:dd:01:6e: 53:40:43:3a:67:cd:d1:7c:a7:b0:99:a7:73:35:8a: e4:3e:5d:a4:88:db:83:f5:8f:b6:01:5b:aa:f1:c5: 46:4f:5f:3c:32:4a:d2:1a:c4:3f:d3:2a:d5:12:74: ff:ed:54:d8:73:3f:91:ca:a4:3b:02:b3:0c:a7:5c: 69:ba:08:ee:93:de:2f:65:ac:c0:99:f5:e2:81:93: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:D3:B0:B8:07:C0:64:B9:9B:8F:60:68:4B:9D:7D:69:CF:9F:7A X509v3 Authority Key Identifier: keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:07:11:42:8c:e6:37:0a:f7:70:e4:88:a5:ae:ad:8c:f0:24: 85:29:e9:67:de:60:9a:cd:29:56:2e:fe:b1:78:fb:d7:9e:72: ce:bc:ff:26:9e:c0:2c:fb:37:5c:fb:5f:f1:3d:d6:66:f2:ff: 48:35:f3:5e:c1:e4:aa:24:33:78:a5:28:36:56:31:27:37:6a: ec:d4:2f:ac:06:59:63:55:12:f7:93:bd:91:5c:08:21:d0:dc: 7c:ff:9c:31:d6:73:e4:32:be:48:25:49:a1:3a:e7:5f:eb:56: e8:bd:08:40:20:e4:8b:25:fd:d4:47:e2:a6:a4:42:3b:f7:4e: 7c:0e:f3:59:63:49:28:9c:1a:e0:46:ff:bf:ee:4b:dd:37:6d: cf:a7:db:dd:1e:87:a0:a4:36:03:29:1f:7e:18:cb:19:22:22: ff:c7:a2:ab:91:5b:f0:5e:2b:47:c6:e7:2a:82:d8:cd:57:51: 95:25:ec:16:1a:bb:4e:25:d1:64:68:04:6d:b3:1f:78:0b:d4: 98:17:2f:60:de:15:13:9d:d4:b1:aa:f4:1b:f4:95:da:87:62: 35:64:64:ad:37:52:e9:5e:79:0d:91:35:7d:a0:17:a5:ec:ad: 06:72:7f:cd:8c:15:56:2a:83:9f:67:11:24:14:9e:2c:55:11: f8:68:19:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2 RDJFN0U0RTYwHhcNMjUwNzE5MDYwMzMwWhcNMjUwNzI2MDYwMzMwWjAYMRYwFAYD VQQDEw02ODdiMzUzMi1lNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgtjgmnABMNZ87nANKAA3O3pAZyZnAimMjFtT1G672D4sNtN2/OWT9nKKs6B TCG7GP6cHbf3X3xEG+4MELW/6Wa8S5T6u1JRtCV2CfIWoihAGqgHBiBHhOlh255d 2Xh8tWd15RD5BMLrlXYYlnhtkDJsSLpakLhuU0H4+bFJuRnk3jv8EdAI4oZUD5qH TUILjpIdYV0ptf15ZX7bzXqSojgHNCyO/LU4c6nPCl1ABmXdAW5TQEM6Z83RfKew madzNYrkPl2kiNuD9Y+2AVuq8cVGT188MkrSGsQ/0yrVEnT/7VTYcz+RyqQ7ArMM p1xpugjuk94vZazAmfXigZPJPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdS07C4 B8BkuZuPYGhLnX1pz596MB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J YUEzVEFOLV8taXR0TG41T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmBxFCjOY3Cvdw5Iilrq2M8CSFKeln3mCazSlWLv6xePvXnnLOvP8m nsAs+zdc+1/xPdZm8v9INfNeweSqJDN4pSg2VjEnN2rs1C+sBlljVRL3k72RXAgh 0Nx8/5wx1nPkMr5IJUmhOudf61bovQhAIOSLJf3UR+KmpEI79058DvNZY0konBrg Rv+/7kvdN23Pp9vdHoegpDYDKR9+GMsZIiL/x6KrkVvwXitHxucqgtjNV1GVJewW GrtOJdFkaARtsx94C9SYFy9g3hUTndSxqvQb9JXah2I1ZGStN1LpXnkNkTV9oBel 7K0Gcn/NjBVWKoOfZxEkFJ4sVRH4aBnV -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:21 2025 by rpki-client