$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: pt6X+VchBRR7rGwg9cyyLpdFoSQZ/M/IV+fJIq7c6bI= Subject key identifier: 99:02:5A:72:24:0D:F9:E7:C0:CB:7E:5D:94:49:C4:E3:5E:6D:93:B8 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0CBB Signing time: Tue 04 Nov 2025 18:19:20 +0000 Manifest this update: Tue 04 Nov 2025 18:19:20 +0000 Manifest next update: Tue 11 Nov 2025 18:19:20 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: tPteRZ8kmq+cPvm+iBgtqgVBEbNCIwf7zGKWY2aHzaA=) 2: A0632940737D11F091340126C4F9AE02.roa (hash: A9CfvWHo8wQog2ij+U4wMZKQtVK7NG2gnZm4ccTlh58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3280 (0xcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Nov 4 18:19:20 2025 GMT Not After : Nov 11 18:19:20 2025 GMT Subject: CN=690a43a8-7d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:81:d9:9d:94:98:a0:cb:58:58:d8:1c:87: 5d:46:72:41:18:68:d5:dd:ca:b1:28:29:12:34:ba: c9:8d:12:e6:40:d8:b7:df:58:f2:6c:fd:f5:da:12: ae:09:bd:1a:b9:2e:75:c6:fb:d1:04:41:c1:e0:b7: 8c:b9:30:2a:de:d8:14:e6:78:be:c1:df:1e:03:8a: 33:05:c4:ca:45:34:cf:c5:d1:25:57:81:c0:6d:4c: f4:a3:fe:52:81:f6:0e:1a:9e:33:2c:cc:32:ab:17: d3:93:6f:23:7e:01:5b:79:84:78:8d:2b:5d:65:c2: 2a:f8:6d:db:2b:02:68:a4:24:d3:97:36:21:4a:37: e5:fb:93:9b:1f:26:b4:be:c4:78:ef:76:34:e2:73: d0:f3:1f:dd:10:f4:6e:41:aa:ca:1e:40:39:e6:27: 8f:14:0f:0e:ef:46:63:84:aa:4f:1b:56:68:3d:a8: b2:f0:91:ef:a6:60:d7:9b:0d:fe:05:e5:32:f7:d7: c4:79:76:d6:07:d8:60:c0:3e:66:b0:ff:fb:b7:01: a2:30:7d:66:cc:63:83:92:e2:fc:ba:45:58:40:39: 04:6e:dc:3d:43:eb:98:f7:ae:13:c6:b2:37:f0:b7: cf:bf:4d:42:36:e5:22:25:55:37:30:df:b5:4b:fd: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:5A:72:24:0D:F9:E7:C0:CB:7E:5D:94:49:C4:E3:5E:6D:93:B8 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:20:68:24:85:ed:38:11:f3:4b:db:94:31:06:29:a6:97:d3: 5b:22:a8:7a:25:25:ad:18:29:fd:08:65:c3:99:79:2b:81:ab: 43:cb:ad:67:32:7d:2f:36:d1:dd:d1:55:f1:6c:fe:fc:49:24: 2b:0a:7c:e8:57:a9:af:32:1b:2e:39:64:83:e1:65:c2:56:87: eb:13:09:5d:79:6e:09:49:48:0e:8f:e1:60:bf:3c:4f:48:0e: 78:cb:1e:9c:bd:d4:87:ac:7a:4f:b6:82:5f:f4:1f:56:d5:4c: 9e:b6:76:ad:cf:1e:e9:e3:7b:1e:d2:c2:24:b4:dc:ff:f9:37: da:73:dd:7a:36:8b:eb:85:c4:bb:8d:27:0d:43:51:c1:b7:2d: f4:8a:be:81:dc:f1:1f:3a:3d:8c:f6:f5:14:5f:9c:af:93:4c: 38:ba:52:cd:eb:d5:30:0d:ba:e6:6d:c8:d0:66:20:73:fe:70: 85:4a:ef:3e:6d:02:5b:63:72:d7:b4:27:62:ce:bf:d2:22:df: 40:b5:72:5a:f2:f3:27:51:00:d5:91:2e:23:88:fb:f0:34:fe: de:fc:c6:0c:6f:8c:fc:39:dd:02:13:29:4e:ca:9a:cc:85:78: 46:4f:b7:d9:f7:cb:4f:75:ed:73:e4:31:a7:92:c1:bf:3c:c2: 5f:bc:dd:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjUxMTA0MTgxOTIwWhcNMjUxMTExMTgxOTIwWjAYMRYwFAYD VQQDEw02OTBhNDNhOC03ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dmB2Z2UmKDLWFjYHIddRnJBGGjV3cqxKCkSNLrJjRLmQNi331jybP312hKu Cb0auS51xvvRBEHB4LeMuTAq3tgU5ni+wd8eA4ozBcTKRTTPxdElV4HAbUz0o/5S gfYOGp4zLMwyqxfTk28jfgFbeYR4jStdZcIq+G3bKwJopCTTlzYhSjfl+5ObHya0 vsR473Y04nPQ8x/dEPRuQarKHkA55iePFA8O70ZjhKpPG1ZoPaiy8JHvpmDXmw3+ BeUy99fEeXbWB9hgwD5msP/7twGiMH1mzGODkuL8ukVYQDkEbtw9Q+uY964TxrI3 8LfPv01CNuUiJVU3MN+1S/2IzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkCWnIk DfnnwMt+XZRJxONebZO4MB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXIGgkhe04EfNL25QxBimml9NbIqh6JSWtGCn9CGXDmXkrgatDy61n Mn0vNtHd0VXxbP78SSQrCnzoV6mvMhsuOWSD4WXCVofrEwldeW4JSUgOj+FgvzxP SA54yx6cvdSHrHpPtoJf9B9W1Uyetnatzx7p43se0sIktNz/+Tfac916NovrhcS7 jScNQ1HBty30ir6B3PEfOj2M9vUUX5yvk0w4ulLN69UwDbrmbcjQZiBz/nCFSu8+ bQJbY3LXtCdizr/SIt9AtXJa8vMnUQDVkS4jiPvwNP7e/MYMb4z8Od0CEylOyprM hXhGT7fZ98tPde1z5DGnksG/PMJfvN31 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:47 2025 by rpki-client