$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: z8Mg08oqI8DSqd0seJA9PkAsFpks+AJtm60uXgJICcg= Subject key identifier: 72:20:93:08:9B:F7:15:2A:05:44:D4:89:28:18:85:31:45:04:1A:2C Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 01FB Signing time: Wed 17 Sep 2025 02:53:49 +0000 Manifest this update: Wed 17 Sep 2025 02:53:48 +0000 Manifest next update: Wed 24 Sep 2025 02:53:48 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: 59H5onTyhrFDzT4F4dhWqJlgsFWSK85DGXWEkSnJB4A=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: Sep 17 02:53:48 2025 GMT Not After : Sep 24 02:53:48 2025 GMT Subject: CN=68ca22bd-f6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:2b:ca:1b:8f:92:3a:8e:e5:52:33:16:79: f9:06:00:09:c5:4b:fb:b0:1a:be:a3:1c:89:e0:7b: eb:96:a7:ec:fc:b9:83:fa:a6:d6:97:57:21:7c:d9: cb:b4:f7:7e:07:74:0d:23:e9:17:ed:d1:d3:29:97: cf:a2:fe:b1:9e:c3:63:80:6d:b4:0e:ac:7d:a0:f8: 3c:a7:45:9b:cd:8a:ba:c7:f3:56:b5:42:29:53:71: 18:40:34:53:5e:33:b9:fe:70:44:40:4e:aa:77:b3: a6:11:66:e0:f3:04:55:28:c7:a6:0c:2d:92:c3:0a: 24:a2:eb:b3:b5:52:9f:9f:82:b7:50:77:a7:b0:f1: 45:ef:eb:10:f8:f1:c2:45:4f:5f:f0:41:3d:a8:84: d1:8f:ac:e2:e2:9c:c0:7c:75:62:6a:9e:63:f5:91: 05:b7:1a:f6:2a:d9:7a:df:19:50:b9:10:ce:b9:87: ea:48:a8:02:85:54:b5:70:fb:4d:4a:51:56:e9:de: 5c:55:2d:78:91:94:47:88:e7:d6:18:4c:3e:d5:e4: ff:46:07:1b:e5:87:a7:bb:d8:99:64:9f:e3:1e:75: bd:5f:fe:75:41:28:2c:d4:6d:6a:93:6b:aa:80:33: 96:3a:8c:31:aa:07:2d:e3:6c:c4:68:0c:ac:ad:ea: c4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:20:93:08:9B:F7:15:2A:05:44:D4:89:28:18:85:31:45:04:1A:2C X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7b:d0:59:4a:14:58:27:ff:08:a8:d8:86:1c:d7:37:1c:49: 5e:b5:5b:fe:d1:6a:b7:e8:3e:00:f4:4a:55:cb:64:7a:97:45: 82:7e:db:92:7c:e6:81:7e:ef:2d:ea:ac:1b:f7:21:34:90:e9: f8:fe:eb:b5:b4:7b:0d:1c:34:1d:68:41:b9:43:37:e1:24:1c: 1a:22:b8:2a:6e:3f:47:00:8a:aa:ac:3c:e8:a9:46:f9:7d:89: 68:3e:36:b0:0a:5d:c2:70:16:5b:bb:70:f1:32:b7:72:a8:3e: 1a:03:b2:ee:1d:7b:e7:a2:fe:58:e1:74:24:bc:5f:7f:25:0a: 56:6e:00:36:28:a4:32:7f:54:58:f3:7b:dc:38:90:f2:6c:8b: b1:7b:60:e9:ac:e4:ed:9c:94:5d:a1:15:b8:83:1b:73:a6:91: 46:fc:f8:aa:1f:bb:db:62:6b:bd:bd:8d:3d:a3:fe:bb:dd:3b: 74:27:4a:12:a6:ab:02:25:c6:30:ec:ee:7f:16:8f:b9:75:3d: be:d5:6e:ab:d8:15:8d:48:55:c0:dd:87:96:e9:c0:b3:fa:11: 22:f0:b8:31:eb:bb:bb:73:24:20:3f:a1:9b:c5:5f:e6:19:4e: e1:4e:92:31:e5:4c:88:d5:47:d8:64:0d:65:91:42:7e:45:cd: b0:ed:f6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUwOTE3MDI1MzQ4WhcNMjUwOTI0MDI1MzQ4WjAYMRYwFAYD VQQDEw02OGNhMjJiZC1mNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgYryhuPkjqO5VIzFnn5BgAJxUv7sBq+oxyJ4Hvrlqfs/LmD+qbWl1chfNnL tPd+B3QNI+kX7dHTKZfPov6xnsNjgG20Dqx9oPg8p0WbzYq6x/NWtUIpU3EYQDRT XjO5/nBEQE6qd7OmEWbg8wRVKMemDC2SwwokouuztVKfn4K3UHensPFF7+sQ+PHC RU9f8EE9qITRj6zi4pzAfHViap5j9ZEFtxr2Ktl63xlQuRDOuYfqSKgChVS1cPtN SlFW6d5cVS14kZRHiOfWGEw+1eT/Rgcb5Yenu9iZZJ/jHnW9X/51QSgs1G1qk2uq gDOWOowxqgct42zEaAysrerEzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIgkwib 9xUqBUTUiSgYhTFFBBosMB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADe9BZShRYJ/8IqNiGHNc3HEletVv+0Wq36D4A9EpVy2R6l0WCftuS fOaBfu8t6qwb9yE0kOn4/uu1tHsNHDQdaEG5QzfhJBwaIrgqbj9HAIqqrDzoqUb5 fYloPjawCl3CcBZbu3DxMrdyqD4aA7LuHXvnov5Y4XQkvF9/JQpWbgA2KKQyf1RY 83vcOJDybIuxe2DprOTtnJRdoRW4gxtzppFG/PiqH7vbYmu9vY09o/673Tt0J0oS pqsCJcYw7O5/Fo+5dT2+1W6r2BWNSFXA3YeW6cCz+hEi8Lgx67u7cyQgP6GbxV/m GU7hTpIx5UyI1UfYZA1lkUJ+Rc2w7fZa -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:02 2025 by rpki-client