$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: nMkPGOQY9lo22/yLLMvJ4yR2GkqwBHbHAs0+QOlcnJQ= Subject key identifier: 1B:10:FE:FD:43:4F:DC:93:77:6D:47:78:40:E4:2A:F8:53:57:D2:D0 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 06A3 Signing time: Mon 08 Sep 2025 22:19:19 +0000 Manifest this update: Mon 08 Sep 2025 22:19:19 +0000 Manifest next update: Mon 15 Sep 2025 22:19:19 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: BbtsRDILc9qXwRFHgRZC1FjLk9rkPZKbWuw8zPusdR8=) 2: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: ntDkjaC865eNsdL1eeREE7s9XqnSTKvFFR31XD30l48=) 3: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Sep 8 22:19:19 2025 GMT Not After : Sep 15 22:19:19 2025 GMT Subject: CN=68bf5667-9134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:59:ed:51:df:d3:e5:d6:ed:31:4a:f8:64: 68:bb:ab:e0:b8:2d:b6:5a:bb:d8:4d:ea:d0:2e:c7: 86:b4:3f:b1:35:6a:51:14:73:20:80:4d:32:6a:fa: eb:4a:82:9f:98:87:7a:7e:2c:ed:0d:e5:2d:d4:2b: e0:96:06:55:1d:71:f8:a2:33:6c:82:e6:da:46:0b: 53:05:38:d9:62:0e:48:bd:9f:d9:87:90:b9:71:51: 7d:28:cd:f7:a4:22:18:13:02:12:06:71:09:bd:72: bc:99:c4:9c:fb:f9:bd:c3:84:f8:88:32:79:9f:f7: 11:9d:e1:5c:56:9e:2c:0b:01:38:1b:75:73:a2:c2: d6:f6:9a:6d:54:e7:1c:4e:03:20:f9:97:84:5f:14: 54:04:c4:28:6d:ba:95:f1:59:4c:8e:c3:79:a3:d7: 73:9f:71:0c:b7:49:a4:53:a4:2e:59:20:af:43:2b: b1:ae:52:d0:25:55:c3:87:9a:40:62:fd:ab:12:99: 81:6c:6f:23:be:5e:d5:8c:1b:b4:dd:93:b6:1b:7b: ea:cf:42:6a:7f:66:8d:6a:42:6f:26:e0:2c:02:39: 45:3c:e2:c4:16:7b:7c:57:8c:e4:63:4c:5e:9d:f4: 9e:32:3f:38:b9:d9:e5:af:bf:27:d5:ee:3a:45:f8: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:10:FE:FD:43:4F:DC:93:77:6D:47:78:40:E4:2A:F8:53:57:D2:D0 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e9:6d:04:d4:ca:5a:4e:eb:64:db:d5:b8:45:11:9e:ed:da: dc:8e:73:20:19:79:f3:37:fb:26:dd:0b:94:bd:d6:cc:eb:0d: 00:10:3e:1e:40:12:5e:e9:de:3c:d2:9a:ad:7d:3e:97:04:c1: 0b:1c:ea:90:4e:00:5d:1d:53:2a:0a:a2:71:b0:2c:0c:b3:d5: ab:93:df:62:26:ab:f4:bf:10:13:98:cd:36:a2:1e:fa:ac:4b: 1a:fb:89:a8:29:82:a2:1d:b6:b0:60:da:1d:0a:6c:5a:32:bc: 12:16:16:0d:36:87:93:0e:e2:3c:05:26:94:36:3b:47:6d:3a: dd:a0:e1:bc:f6:06:95:34:69:18:e0:4f:67:cd:0a:27:76:c9: e4:1f:57:f6:26:33:4f:23:d2:71:a7:79:e0:f1:db:82:f3:32: d6:d6:4d:be:68:01:a2:25:f3:80:61:f2:04:05:ca:08:a7:a1: da:13:b5:f7:c3:98:32:6b:f1:99:4c:2d:ad:77:b5:2e:5a:47: 40:58:66:51:4a:1e:f5:b8:26:6e:7e:4f:34:95:38:70:57:4d: 3e:02:38:ec:57:62:42:38:20:14:1e:f8:d5:e6:bd:61:34:a9: 1d:1b:10:95:ed:6d:8f:b2:16:4f:b9:78:2d:b2:eb:ff:ae:d7: e2:21:02:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUwOTA4MjIxOTE5WhcNMjUwOTE1MjIxOTE5WjAYMRYwFAYD VQQDEw02OGJmNTY2Ny05MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeVZ7VHf0+XW7TFK+GRou6vguC22WrvYTerQLseGtD+xNWpRFHMggE0yavrr SoKfmId6fiztDeUt1CvglgZVHXH4ojNsgubaRgtTBTjZYg5IvZ/Zh5C5cVF9KM33 pCIYEwISBnEJvXK8mcSc+/m9w4T4iDJ5n/cRneFcVp4sCwE4G3VzosLW9pptVOcc TgMg+ZeEXxRUBMQobbqV8VlMjsN5o9dzn3EMt0mkU6QuWSCvQyuxrlLQJVXDh5pA Yv2rEpmBbG8jvl7VjBu03ZO2G3vqz0Jqf2aNakJvJuAsAjlFPOLEFnt8V4zkY0xe nfSeMj84udnlr78n1e46RfgHhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsQ/v1D T9yTd21HeEDkKvhTV9LQMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO6W0E1MpaTutk29W4RRGe7drcjnMgGXnzN/sm3QuUvdbM6w0AED4e QBJe6d480pqtfT6XBMELHOqQTgBdHVMqCqJxsCwMs9Wrk99iJqv0vxATmM02oh76 rEsa+4moKYKiHbawYNodCmxaMrwSFhYNNoeTDuI8BSaUNjtHbTrdoOG89gaVNGkY 4E9nzQondsnkH1f2JjNPI9Jxp3ng8duC8zLW1k2+aAGiJfOAYfIEBcoIp6HaE7X3 w5gya/GZTC2td7UuWkdAWGZRSh71uCZufk80lThwV00+AjjsV2JCOCAUHvjV5r1h NKkdGxCV7W2PshZPuXgtsuv/rtfiIQJI -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:08 2025 by rpki-client