$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: zzjonDYepXR6HRE9ibOnZ1aQb0atFdIq0ohQfx4rO4E= Subject key identifier: DB:2B:13:1C:E0:9A:40:2F:C6:7C:31:E3:8B:8F:AF:2F:96:46:36:9F Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 348C Signing time: Sat 31 May 2025 14:40:21 +0000 Manifest this update: Sat 31 May 2025 14:40:21 +0000 Manifest next update: Sat 07 Jun 2025 14:40:21 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: jTFa7wlEsByT3GQVwW8HJHC66e9D7i8Z9QWFd3xgZHE=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: 2R/JIm+dy3J9QEhBrc+vl6TnBvASBKCKIARBdM+hz20=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: GofCRUflvDRo1yALF5A3qEW6x0Z/FLZHjkmP8REXKAE=) 4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: /ZfamkrcyVX98fX+BafwQ7UNJGR9Hte2HxcSkHXGZs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: May 31 14:40:21 2025 GMT Not After : Jun 7 14:40:21 2025 GMT Subject: CN=683b14d5-ae45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:e6:c9:75:dc:10:eb:a8:03:37:46:3e:20: a3:34:56:db:31:22:c0:8e:33:45:f3:f3:0b:3b:2f: fa:01:a6:56:3a:b7:2f:a2:52:24:82:33:9b:dd:b4: fa:fb:29:ce:28:86:c6:76:d9:c0:5d:71:3c:56:4c: 95:bc:82:9e:ba:4a:95:68:36:85:8f:5b:ad:86:29: 2e:b1:2f:b9:82:7a:f0:0c:f5:a4:5d:5f:2c:02:34: 3d:12:25:7d:0c:84:51:22:69:7e:04:60:fd:74:bf: 7a:41:6a:8f:43:23:e4:26:92:4f:ef:a5:30:5f:da: 35:25:0d:99:7e:46:19:24:e9:fb:d2:fb:1d:48:4c: fe:14:13:e6:5b:61:df:d0:2b:5b:4e:a1:20:93:12: f3:cd:db:72:81:28:34:5b:f6:57:59:36:6d:c8:7f: d0:2f:41:5e:c4:3b:2e:87:dc:a4:be:88:c7:fa:de: c3:03:a9:fe:2e:da:40:1d:c8:5b:d4:b8:4f:3d:fc: 8f:b3:76:3a:1e:52:ac:d6:45:ba:21:6c:55:bd:5b: c5:fc:8b:99:ae:2a:11:d3:f4:bb:72:53:65:eb:4c: 00:0d:20:a6:9a:0e:b0:57:f6:4d:72:3c:94:d8:c8: 51:c8:a8:49:8d:cf:39:ec:ac:80:46:85:27:e6:88: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2B:13:1C:E0:9A:40:2F:C6:7C:31:E3:8B:8F:AF:2F:96:46:36:9F X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2e:66:67:3a:bc:da:62:56:ed:56:71:8f:46:4c:80:55:b4: f1:4c:6d:be:da:28:a5:79:21:1e:2b:01:f8:ae:11:d3:d5:5d: b3:88:bd:aa:9b:d3:0c:0b:75:ac:4d:af:5c:98:fc:d3:33:bb: 23:dc:51:e4:d8:06:17:eb:74:9d:59:0a:36:8d:89:d5:8e:9b: f2:75:53:e2:05:28:92:4a:d7:bc:47:83:35:d6:1d:3f:d2:40: 2e:3d:dc:41:ed:14:f1:b3:03:50:6f:9f:74:31:ed:9e:43:f3: 33:68:09:93:82:61:ed:7c:4a:97:40:e3:bf:c4:31:62:d9:1d: 31:0b:4a:a3:90:13:58:55:9d:fe:49:80:45:33:8b:3b:43:ab: d6:d2:4f:24:31:67:5f:4b:07:ed:32:9d:89:26:db:c4:72:48: 3e:14:16:85:1c:11:5c:61:5e:d3:5e:3e:ce:16:c8:1e:81:3f: d4:c0:38:c5:e9:ec:1a:f5:c6:5c:ec:5d:db:1c:a7:41:80:96: bf:78:e3:d6:6f:c7:5b:51:90:38:f8:e0:41:81:26:78:10:f4: 67:be:87:44:e9:72:39:a4:62:c3:b9:30:6e:60:06:56:30:ca: 8b:b5:02:79:db:12:f1:b6:9e:c4:16:56:2e:b4:ac:89:ac:d6: bf:8e:f5:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUwNTMxMTQ0MDIxWhcNMjUwNjA3MTQ0MDIxWjAYMRYwFAYD VQQDEw02ODNiMTRkNS1hZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt3myXXcEOuoAzdGPiCjNFbbMSLAjjNF8/MLOy/6AaZWOrcvolIkgjOb3bT6 +ynOKIbGdtnAXXE8VkyVvIKeukqVaDaFj1uthikusS+5gnrwDPWkXV8sAjQ9EiV9 DIRRIml+BGD9dL96QWqPQyPkJpJP76UwX9o1JQ2ZfkYZJOn70vsdSEz+FBPmW2Hf 0CtbTqEgkxLzzdtygSg0W/ZXWTZtyH/QL0FexDsuh9ykvojH+t7DA6n+LtpAHchb 1LhPPfyPs3Y6HlKs1kW6IWxVvVvF/IuZrioR0/S7clNl60wADSCmmg6wV/ZNcjyU 2MhRyKhJjc857KyARoUn5ohh/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsrExzg mkAvxnwx44uPry+WRjafMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDLmZnOrzaYlbtVnGPRkyAVbTxTG2+2iileSEeKwH4rhHT1V2ziL2q m9MMC3WsTa9cmPzTM7sj3FHk2AYX63SdWQo2jYnVjpvydVPiBSiSSte8R4M11h0/ 0kAuPdxB7RTxswNQb590Me2eQ/MzaAmTgmHtfEqXQOO/xDFi2R0xC0qjkBNYVZ3+ SYBFM4s7Q6vW0k8kMWdfSwftMp2JJtvEckg+FBaFHBFcYV7TXj7OFsgegT/UwDjF 6ewa9cZc7F3bHKdBgJa/eOPWb8dbUZA4+OBBgSZ4EPRnvodE6XI5pGLDuTBuYAZW MMqLtQJ52xLxtp7EFlYutKyJrNa/jvVb -----END CERTIFICATE-----Generated at Sat May 31 17:30:24 2025 by rpki-client