$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft File: GUG9CIuIgrZhVo5krJLeasogoFY.mft (raw, json) Hash identifier: JwhHVdDJHoyYM+Gdmx5jamH494IgO7xtQuafvddtR3o= Subject key identifier: 11:6B:5C:1B:D8:57:28:42:23:65:FC:0D:52:9F:B3:57:50:DA:A3:4C Authority key identifier: 19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56 Certificate issuer: /CN=A914AD92/serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft Manifest number: 04E2 Signing time: Thu 03 Jul 2025 01:14:41 +0000 Manifest this update: Thu 03 Jul 2025 01:14:41 +0000 Manifest next update: Thu 10 Jul 2025 01:14:41 +0000 Files and hashes: 1: GUG9CIuIgrZhVo5krJLeasogoFY.crl (hash: BTY8PjKQMe+BTr54JVHyQoIqLHhfa98dd/5kgWKUMTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AD92, serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056 Validity Not Before: Jul 3 01:14:41 2025 GMT Not After : Jul 10 01:14:41 2025 GMT Subject: CN=6865d981-322c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:5a:f6:2c:4a:a7:95:16:d4:83:a9:81:bf: c6:23:48:0e:c5:b8:55:11:2e:51:b9:07:09:a3:f1: 2c:a5:09:be:4e:8f:6e:fa:9e:11:cf:31:f9:22:ab: 05:2e:fc:fe:66:f1:35:fa:5a:87:e1:ca:ab:82:aa: d5:b9:b6:79:19:af:16:a8:c5:3f:5a:25:87:4a:21: 89:2d:a4:3e:2d:93:74:b2:71:1d:ba:59:9f:f0:9a: 61:6f:36:df:55:d6:fa:d1:e7:e2:7f:f9:21:d0:bf: 57:7f:28:9e:61:d0:a7:db:b7:8d:12:57:99:93:d8: 36:2d:f8:a2:2a:f2:94:68:f4:70:d7:03:b8:fb:1c: 6f:88:5c:90:df:d7:34:3c:3d:18:a0:71:1f:1e:f7: bb:28:32:c0:0d:21:d8:06:2a:90:92:6e:b9:a3:fa: ac:ed:7d:d2:67:44:6b:53:d6:52:b1:4f:04:3b:39: 25:a0:2c:b6:e6:ba:0f:20:ae:0a:ee:c3:2a:6e:75: db:c3:a3:cb:0d:37:d6:17:02:47:be:e3:1f:4e:82: 9a:a2:ac:3d:22:5a:63:8c:56:d4:3a:05:06:61:62: 08:25:2d:b6:a8:f8:c4:ca:b5:67:7e:63:6f:a9:ec: 92:66:5b:e3:c5:29:74:18:7b:fb:ef:78:c5:92:1d: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:5C:1B:D8:57:28:42:23:65:FC:0D:52:9F:B3:57:50:DA:A3:4C X509v3 Authority Key Identifier: keyid:19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1f:52:94:e0:37:a6:f9:bd:1d:ca:24:34:16:ea:b8:c3:43: a9:76:8d:2d:ee:06:2f:3b:5e:8a:b8:78:ed:3f:1a:75:5b:7e: a6:65:ed:b6:b9:56:7d:15:fc:49:fa:0d:9f:e1:c7:2c:31:bc: e4:8c:1f:d8:82:6f:43:8d:0b:99:b8:a3:e4:03:65:4a:fa:4b: b1:74:2f:f1:81:f5:73:5e:aa:3c:98:f1:e3:74:00:bb:3d:ca: de:6f:43:c5:3e:4f:65:a8:44:9e:f1:0e:7f:5e:fa:67:c9:cc: 70:b9:c3:28:c2:7a:72:aa:21:f8:4b:54:84:ee:99:ac:2f:3e: 3f:19:03:26:35:a6:13:7d:d1:f5:a4:d6:94:c7:72:83:c1:8a: ba:2b:c6:83:ea:6b:a5:e5:d1:a9:39:0d:12:66:02:55:2b:76: c0:b6:6a:e6:86:92:89:07:0a:53:55:9a:d0:d0:b1:f3:9f:64: 49:fb:69:5b:a5:d5:1a:6f:ac:2a:6e:10:70:37:9c:47:fe:07: 8e:16:23:a9:54:ed:d4:24:b8:be:b5:a3:57:8e:25:ea:77:5f: 11:30:70:b6:f7:9c:51:5d:1e:99:da:4b:a0:35:61:68:48:91: cf:fc:b9:69:ba:79:8b:df:9f:25:62:65:ec:e6:71:99:d4:89: a1:a8:8c:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFEOTIxMTAvBgNVBAUTKDE5NDFCRDA4OEI4ODgyQjY2MTU2OEU2NEFDOTJERTZB Q0EyMEEwNTYwHhcNMjUwNzAzMDExNDQxWhcNMjUwNzEwMDExNDQxWjAYMRYwFAYD VQQDEw02ODY1ZDk4MS0zMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPRa9ixKp5UW1IOpgb/GI0gOxbhVES5RuQcJo/EspQm+To9u+p4RzzH5IqsF Lvz+ZvE1+lqH4cqrgqrVubZ5Ga8WqMU/WiWHSiGJLaQ+LZN0snEdulmf8Jphbzbf Vdb60efif/kh0L9XfyieYdCn27eNEleZk9g2LfiiKvKUaPRw1wO4+xxviFyQ39c0 PD0YoHEfHve7KDLADSHYBiqQkm65o/qs7X3SZ0RrU9ZSsU8EOzkloCy25roPIK4K 7sMqbnXbw6PLDTfWFwJHvuMfToKaoqw9IlpjjFbUOgUGYWIIJS22qPjEyrVnfmNv qeySZlvjxSl0GHv773jFkh0wTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFrXBvY VyhCI2X8DVKfs1dQ2qNMMB8GA1UdIwQYMBaAFBlBvQiLiIK2YVaOZKyS3mrKIKBW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUQ5Mi8zMzBEMDhFMEFF OUUxMUVDOUU0ODNENzNDNEY5QUUwMi9HVUc5Q0l1SWdyWmhWbzVrckpMZWFzb2dv RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVRzlDSXVJZ3JaaFZvNWtySkxlYXNvZ29GWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUQ5Mi8zMzBEMDhFMEFFOUUxMUVDOUU0ODNENzNDNEY5QUUwMi9HVUc5Q0l1SWdy WmhWbzVrckpMZWFzb2dvRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLH1KU4Dem+b0dyiQ0Fuq4w0Opdo0t7gYvO16KuHjtPxp1W36mZe22 uVZ9FfxJ+g2f4ccsMbzkjB/Ygm9DjQuZuKPkA2VK+kuxdC/xgfVzXqo8mPHjdAC7 Pcreb0PFPk9lqESe8Q5/XvpnycxwucMownpyqiH4S1SE7pmsLz4/GQMmNaYTfdH1 pNaUx3KDwYq6K8aD6mul5dGpOQ0SZgJVK3bAtmrmhpKJBwpTVZrQ0LHzn2RJ+2lb pdUab6wqbhBwN5xH/geOFiOpVO3UJLi+taNXjiXqd18RMHC295xRXR6Z2kugNWFo SJHP/LlpunmL358lYmXs5nGZ1ImhqIxW -----END CERTIFICATE-----Generated at Thu Jul 3 09:04:11 2025 by rpki-client