$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: A2egOacWx8vGL+pSOm6nDVSoR8+1RVtUilXKZTKmL9I= Subject key identifier: FB:C5:9B:0F:38:61:04:4F:4D:ED:9E:85:11:6F:57:DA:68:1C:52:76 Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 01C3 Signing time: Sat 31 May 2025 02:42:30 +0000 Manifest this update: Sat 31 May 2025 02:42:30 +0000 Manifest next update: Sat 07 Jun 2025 02:42:30 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: 8YmtcQQ4EdA93luT+yBJvb/eH/fpEmX9Le9/SzaQE8Q=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: May 31 02:42:30 2025 GMT Not After : Jun 7 02:42:30 2025 GMT Subject: CN=683a6c96-22bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:9f:98:f8:ef:ed:4e:5f:c8:2d:72:d3:23: a0:e2:8f:a7:a9:fb:13:35:16:ec:2d:d1:a3:2f:17: 88:79:b9:b9:53:0a:d5:72:58:9a:6d:5f:ed:ee:85: 3d:42:c8:d4:b1:b8:16:f3:50:be:5e:c9:42:6b:b3: 09:c5:a5:17:9e:51:72:f9:ab:d3:c9:1c:f5:19:d3: 84:88:9d:9b:25:2b:c6:0d:62:d4:c9:fb:1b:84:df: 04:73:2f:b1:35:39:93:c7:87:96:95:86:9e:3b:ba: 4d:e3:d0:0c:2b:1a:d4:6a:d0:1b:5b:c9:ee:2f:6e: 50:5f:9e:1c:9e:9b:bb:c5:2d:a1:9d:82:cd:a3:00: cf:2b:8d:21:a5:bc:bb:41:17:42:ec:43:f8:15:d4: f2:54:f4:d0:63:b7:3d:04:f2:6e:2a:70:92:67:c1: 58:b9:87:06:2e:03:f5:c6:a1:2e:f1:56:4e:10:c6: 28:4d:05:8d:1d:08:31:38:3b:d0:63:1f:b7:1c:66: 37:88:02:55:df:fc:73:f2:35:bd:3a:42:29:75:35: 28:34:6d:6d:f5:80:43:83:2c:50:da:88:82:44:aa: 1e:b2:17:e1:a2:8b:a2:79:02:0f:6c:f4:98:6d:3b: 5c:60:a9:42:4a:53:f0:e1:b3:b6:8e:87:f3:97:55: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C5:9B:0F:38:61:04:4F:4D:ED:9E:85:11:6F:57:DA:68:1C:52:76 X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:7b:ed:0c:53:8f:c2:b4:e1:8e:58:0b:1e:b7:48:79:a7:52: db:04:08:f0:c5:eb:98:20:fc:88:11:7b:ff:03:04:aa:bc:f0: 12:97:1c:4f:05:29:6f:75:4a:2e:d7:c4:d4:8d:67:9b:89:51: 44:9d:b6:51:28:46:0e:a3:69:2c:4f:1f:bc:6a:29:65:30:4a: f8:01:7e:fc:43:20:d1:c7:40:34:49:02:4e:0a:ee:e7:f3:c7: 46:5b:81:1a:82:54:71:a1:b8:ce:19:6f:00:95:29:20:56:71: 3b:ca:31:bb:89:7d:1d:01:43:ee:63:f7:ea:e0:8b:98:d8:bd: b7:b6:8c:1c:17:bc:3a:af:33:64:b2:12:e7:22:44:b8:51:da: 98:96:af:35:e1:4b:c2:d6:94:17:49:71:0e:17:03:2a:f3:32: 05:ed:0d:de:14:09:9b:74:69:ce:6c:6a:9e:1f:cb:5a:17:08: 1f:4b:96:0b:0f:e8:61:69:54:9e:60:d7:49:3e:c9:4f:2a:5b: c2:49:85:d0:09:14:24:29:5e:b3:8c:20:3e:d1:49:e1:e5:71: ef:8a:4b:35:d0:57:c0:36:66:03:3b:f6:34:a2:44:2f:d9:4d: 13:6a:45:5e:ff:24:ab:6b:24:34:44:f3:c9:54:f4:59:14:39: 49:21:0c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUwNTMxMDI0MjMwWhcNMjUwNjA3MDI0MjMwWjAYMRYwFAYD VQQDEw02ODNhNmM5Ni0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVifmPjv7U5fyC1y0yOg4o+nqfsTNRbsLdGjLxeIebm5UwrVcliabV/t7oU9 QsjUsbgW81C+XslCa7MJxaUXnlFy+avTyRz1GdOEiJ2bJSvGDWLUyfsbhN8Ecy+x NTmTx4eWlYaeO7pN49AMKxrUatAbW8nuL25QX54cnpu7xS2hnYLNowDPK40hpby7 QRdC7EP4FdTyVPTQY7c9BPJuKnCSZ8FYuYcGLgP1xqEu8VZOEMYoTQWNHQgxODvQ Yx+3HGY3iAJV3/xz8jW9OkIpdTUoNG1t9YBDgyxQ2oiCRKoeshfhoouieQIPbPSY bTtcYKlCSlPw4bO2jofzl1XGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvFmw84 YQRPTe2ehRFvV9poHFJ2MB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAne+0MU4/CtOGOWAset0h5p1LbBAjwxeuYIPyIEXv/AwSqvPASlxxP BSlvdUou18TUjWebiVFEnbZRKEYOo2ksTx+8aillMEr4AX78QyDRx0A0SQJOCu7n 88dGW4EaglRxobjOGW8AlSkgVnE7yjG7iX0dAUPuY/fq4IuY2L23towcF7w6rzNk shLnIkS4UdqYlq814UvC1pQXSXEOFwMq8zIF7Q3eFAmbdGnObGqeH8taFwgfS5YL D+hhaVSeYNdJPslPKlvCSYXQCRQkKV6zjCA+0Unh5XHviks10FfANmYDO/Y0okQv 2U0TakVe/ySrayQ0RPPJVPRZFDlJIQzI -----END CERTIFICATE-----Generated at Sat May 31 17:23:42 2025 by rpki-client