$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: 1fw//znJVxR/1vX2AOPOZQQknRmGgrOwxfamX7FwfyI= Subject key identifier: A8:9E:30:0F:FF:F8:E0:22:D7:6C:BD:95:AA:14:79:EC:35:39:12:FE Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 34C4 Signing time: Thu 18 Sep 2025 14:43:39 +0000 Manifest this update: Thu 18 Sep 2025 14:43:38 +0000 Manifest next update: Thu 25 Sep 2025 14:43:38 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: HtA2jWtAKtka3xiNvmFpSrHpEGZWat0dSW1ojy+COvc=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: 2R/JIm+dy3J9QEhBrc+vl6TnBvASBKCKIARBdM+hz20=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: GofCRUflvDRo1yALF5A3qEW6x0Z/FLZHjkmP8REXKAE=) 4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: /ZfamkrcyVX98fX+BafwQ7UNJGR9Hte2HxcSkHXGZs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Sep 18 14:43:38 2025 GMT Not After : Sep 25 14:43:38 2025 GMT Subject: CN=68cc1a9b-bbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0d:9f:c1:12:66:c2:d8:47:f3:df:88:4b:24: 38:23:75:fb:16:b4:50:96:b8:ec:bd:53:b1:ec:ad: 31:7e:10:9a:98:f2:eb:6c:b3:d0:bf:09:7b:fa:1e: 70:d6:77:43:ce:7c:a8:a1:a8:78:45:c7:4b:21:99: bc:5c:34:65:7d:98:b5:20:8c:0b:ed:26:b7:5e:b5: 3a:47:0e:f2:2d:39:8d:e8:77:de:e0:9f:29:07:40: 18:43:33:5f:6e:8f:53:eb:2e:c5:41:32:e5:30:b0: 75:d9:eb:2d:16:97:03:d8:1c:66:f2:d8:04:cb:c3: d7:e7:fc:8e:96:59:39:6c:c5:60:5b:33:cc:48:55: fc:0d:65:64:22:61:37:d3:c6:37:77:be:86:a2:ab: b1:36:4c:47:6d:b4:85:54:fd:3b:4e:9d:df:b4:d5: d9:72:90:d8:19:91:57:5b:57:90:53:2c:46:55:f4: 9a:10:07:1b:16:45:4e:29:28:c7:67:6d:8f:87:33: 16:5d:68:76:8a:89:2d:18:dd:1b:2a:9a:dc:dc:84: 90:1a:9f:ae:a0:0d:cb:c9:7d:6f:72:58:88:fb:ab: e8:1c:ae:27:6d:9c:2f:44:88:bd:7e:e8:ca:3c:fc: 10:37:b7:d6:35:ca:12:32:35:6e:9a:b1:ac:07:d2: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:30:0F:FF:F8:E0:22:D7:6C:BD:95:AA:14:79:EC:35:39:12:FE X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e8:8b:8e:23:a9:eb:b4:92:98:31:d9:e9:5b:3d:48:7c:db: 3e:3d:9c:cb:be:17:55:a3:1b:09:b5:97:a7:bf:6a:33:da:2d: 40:4f:d4:8a:90:03:24:f6:02:18:4c:25:fb:77:94:3c:df:43: 75:50:5e:4d:d8:36:c6:7f:f5:b3:30:83:04:57:39:ce:0e:cb: 8b:cf:bb:4a:e7:79:3c:d7:fd:ad:10:da:29:f1:47:63:b9:24: b9:6c:da:7a:2e:4a:81:e1:61:df:81:43:17:b3:5a:e2:d0:57: d3:78:10:44:e0:3c:2d:0f:09:b4:f0:f3:01:88:04:ba:ca:b8: 9b:07:93:d7:03:6e:c4:a1:35:43:30:4b:0f:98:da:33:ae:50: 9e:a4:ed:45:24:3a:c3:e9:27:50:80:33:f2:f7:f3:ee:d6:bc: 68:5e:5e:ab:8c:ce:e7:9f:4a:8a:d3:fb:95:b0:00:d6:f0:a3: d0:60:07:76:55:90:0e:93:33:5a:a2:a9:e9:55:02:ec:6e:d5: 85:19:bd:04:d6:9f:c0:90:dd:5f:8c:5a:db:ce:df:08:5c:5d: ed:86:89:f3:dc:5e:59:31:80:1d:59:da:46:0f:16:e5:d4:96: 14:e7:1d:51:bb:66:09:72:76:c4:f9:54:02:0f:00:0c:a0:91: 99:c3:07:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUwOTE4MTQ0MzM4WhcNMjUwOTI1MTQ0MzM4WjAYMRYwFAYD VQQDEw02OGNjMWE5Yi1iYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A2fwRJmwthH89+ISyQ4I3X7FrRQlrjsvVOx7K0xfhCamPLrbLPQvwl7+h5w 1ndDznyooah4RcdLIZm8XDRlfZi1IIwL7Sa3XrU6Rw7yLTmN6Hfe4J8pB0AYQzNf bo9T6y7FQTLlMLB12estFpcD2Bxm8tgEy8PX5/yOllk5bMVgWzPMSFX8DWVkImE3 08Y3d76GoquxNkxHbbSFVP07Tp3ftNXZcpDYGZFXW1eQUyxGVfSaEAcbFkVOKSjH Z22PhzMWXWh2ioktGN0bKprc3ISQGp+uoA3LyX1vcliI+6voHK4nbZwvRIi9fujK PPwQN7fWNcoSMjVumrGsB9KzbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKieMA// +OAi12y9laoUeew1ORL+MB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz6IuOI6nrtJKYMdnpWz1IfNs+PZzLvhdVoxsJtZenv2oz2i1AT9SK kAMk9gIYTCX7d5Q830N1UF5N2DbGf/WzMIMEVznODsuLz7tK53k81/2tENop8Udj uSS5bNp6LkqB4WHfgUMXs1ri0FfTeBBE4DwtDwm08PMBiAS6yribB5PXA27EoTVD MEsPmNozrlCepO1FJDrD6SdQgDPy9/Pu1rxoXl6rjM7nn0qK0/uVsADW8KPQYAd2 VZAOkzNaoqnpVQLsbtWFGb0E1p/AkN1fjFrbzt8IXF3thonz3F5ZMYAdWdpGDxbl 1JYU5x1Ru2YJcnbE+VQCDwAMoJGZwwet -----END CERTIFICATE-----Generated at Fri Sep 19 09:08:26 2025 by rpki-client