$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: w8jhAaizE2E7/XdRYh4bNpIegosMNQS4aOUsx1qEmZE= Subject key identifier: 43:2A:F6:26:0F:27:84:08:6C:B6:2A:BB:DB:CC:7C:BE:14:A0:5C:D6 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 066C Signing time: Fri 30 May 2025 22:38:24 +0000 Manifest this update: Fri 30 May 2025 22:38:23 +0000 Manifest next update: Fri 06 Jun 2025 22:38:23 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: XQxgcEpAis0KA15LvIfGzJpz5DjBHKE0gTbf0V6Ah1w=) 2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: May 30 22:38:23 2025 GMT Not After : Jun 6 22:38:23 2025 GMT Subject: CN=683a3360-c57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:97:41:e4:d9:93:28:4a:5f:62:38:2f:f7: f2:d8:2c:37:10:00:ed:c5:d6:97:f6:c1:9c:b5:05: 47:99:2b:cf:22:dd:81:5f:25:e0:2f:50:b9:89:39: 90:a3:bb:81:15:03:b2:1c:b6:4c:74:be:fe:ac:aa: cc:e2:6a:b0:bb:87:08:bc:eb:9d:63:51:f4:50:3b: 16:d2:98:ff:8a:be:01:b3:62:37:94:3d:c7:40:d6: 10:1d:71:fe:9e:53:8c:db:d4:e2:d2:40:41:9d:63: d6:ea:c9:84:dc:fb:47:b9:29:0e:a2:0a:a7:7c:88: 5e:81:bc:3b:c7:d4:4b:c8:35:c1:f1:01:a7:3e:e1: 6a:49:9e:92:8b:1c:4a:8f:ce:33:d0:db:f2:09:d6: 9c:0a:be:22:d6:74:a4:d3:06:dc:bf:30:74:7f:84: 92:95:f9:c0:40:2e:70:50:d4:50:c6:51:c2:bc:21: c0:97:25:c7:9a:2e:8b:cd:92:60:3e:2e:6e:c2:33: 16:68:7d:0f:8b:ef:14:58:2a:73:3c:47:35:2b:c2: b1:82:c4:dc:f9:b1:4e:8b:26:15:f1:72:bb:1e:8b: bd:dc:24:fe:74:74:5a:52:a1:ec:7c:80:26:2b:20: d6:10:a5:e6:b7:67:5f:5e:52:a4:3c:52:b6:1c:60: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:F6:26:0F:27:84:08:6C:B6:2A:BB:DB:CC:7C:BE:14:A0:5C:D6 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:64:84:8d:ce:51:42:44:ff:92:17:0b:ce:3c:3d:61:5f:1e: ff:9e:fc:bc:5e:40:30:e1:47:7a:02:bf:f4:7e:b4:c4:1d:79: c6:26:36:11:54:41:96:62:9f:a4:19:a2:c6:55:a8:05:47:1e: 3f:e1:fc:bc:58:07:80:ea:b6:6a:f8:67:c8:22:68:f4:20:48: 84:2b:bc:44:d5:e1:9b:62:b4:69:9a:7d:b8:2e:c5:77:d3:e9: fa:e0:12:c3:f6:8e:2a:31:2d:5b:e1:7a:b7:51:f2:33:fd:cb: 45:08:5f:ca:35:4b:40:14:7d:eb:e8:5b:a6:c5:64:0b:97:ae: d8:53:82:66:8e:b0:cb:99:87:37:ff:79:37:f8:13:45:57:2c: 9c:fa:64:b3:ab:c7:09:e5:40:83:4c:09:10:cf:86:49:88:e9: c4:ad:5e:9a:ba:c8:1e:69:0e:3b:b3:dd:74:f0:63:b4:dd:e4: 7c:4e:0b:7b:4c:5f:29:c2:60:65:70:22:87:05:c8:37:80:0f: 0e:56:93:3b:f0:c4:d9:27:6c:a1:a8:de:91:54:4c:9b:55:67: b5:6f:31:eb:e9:20:c0:24:c6:ce:23:30:b3:96:87:19:31:64: 83:57:2b:ba:92:f3:0f:a8:48:03:29:91:10:5e:e5:67:f2:3d: 39:d5:7f:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUwNTMwMjIzODIzWhcNMjUwNjA2MjIzODIzWjAYMRYwFAYD VQQDEw02ODNhMzM2MC1jNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AaXQeTZkyhKX2I4L/fy2Cw3EADtxdaX9sGctQVHmSvPIt2BXyXgL1C5iTmQ o7uBFQOyHLZMdL7+rKrM4mqwu4cIvOudY1H0UDsW0pj/ir4Bs2I3lD3HQNYQHXH+ nlOM29Ti0kBBnWPW6smE3PtHuSkOogqnfIhegbw7x9RLyDXB8QGnPuFqSZ6SixxK j84z0NvyCdacCr4i1nSk0wbcvzB0f4SSlfnAQC5wUNRQxlHCvCHAlyXHmi6LzZJg Pi5uwjMWaH0Pi+8UWCpzPEc1K8KxgsTc+bFOiyYV8XK7Hou93CT+dHRaUqHsfIAm KyDWEKXmt2dfXlKkPFK2HGDiaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMq9iYP J4QIbLYqu9vMfL4UoFzWMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEZISNzlFCRP+SFwvOPD1hXx7/nvy8XkAw4Ud6Ar/0frTEHXnGJjYR VEGWYp+kGaLGVagFRx4/4fy8WAeA6rZq+GfIImj0IEiEK7xE1eGbYrRpmn24LsV3 0+n64BLD9o4qMS1b4Xq3UfIz/ctFCF/KNUtAFH3r6FumxWQLl67YU4JmjrDLmYc3 /3k3+BNFVyyc+mSzq8cJ5UCDTAkQz4ZJiOnErV6ausgeaQ47s9108GO03eR8Tgt7 TF8pwmBlcCKHBcg3gA8OVpM78MTZJ2yhqN6RVEybVWe1bzHr6SDAJMbOIzCzlocZ MWSDVyu6kvMPqEgDKZEQXuVn8j051X+n -----END CERTIFICATE-----Generated at Sat May 31 15:16:23 2025 by rpki-client