$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: F5ton7mNDVUjj26HNitKE31cvroiHw/PiOukcDLGvSE= Subject key identifier: C8:A0:49:10:8D:94:2D:6A:10:23:25:2B:B4:05:11:02:F3:9E:61:1A Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0C6C Signing time: Wed 02 Jul 2025 18:31:13 +0000 Manifest this update: Wed 02 Jul 2025 18:31:13 +0000 Manifest next update: Wed 09 Jul 2025 18:31:13 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: W4zhhi9b3o84W+qIUAIwM59rNJoICZP3/zuQIGQ6TDU=) 2: 9A19DA76006E11EAA4A23169C4F9AE02.roa (hash: xXy4YLIIWobgpWskblv4qsKYOQzH1cx/NBVAIabfj3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Jul 2 18:31:13 2025 GMT Not After : Jul 9 18:31:13 2025 GMT Subject: CN=68657af1-c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:93:aa:9f:8c:b2:ce:0c:ec:a6:86:3c:ce: 87:03:9f:5b:46:df:89:9a:bc:4a:ca:ff:38:47:af: a6:48:25:01:8f:6b:72:9c:8c:57:7f:1c:10:45:19: ff:a3:e6:16:ae:74:17:3a:9b:9a:54:ea:bb:64:d0: 96:ff:b9:18:23:02:11:93:8f:34:19:65:1c:82:11: ee:7e:bf:96:3f:02:4c:48:b4:b8:ea:6a:ac:b5:9f: 0c:0d:b2:d2:b2:81:28:30:15:0e:6d:7d:c2:bd:14: 83:6f:a1:db:d8:fa:da:64:f6:fa:bd:0e:20:aa:de: fe:01:11:5b:5b:24:3d:51:21:5e:ec:05:29:81:8c: 1d:8f:99:03:6e:43:84:36:c8:8c:b6:35:0b:90:09: c4:4a:0d:37:29:4c:2d:68:e8:fc:e4:34:95:60:8e: 76:9a:6b:a1:e3:38:1c:8e:1f:e4:f9:c4:d3:0d:9c: 56:e0:2f:a6:5e:a8:c5:67:95:85:a1:b1:85:a4:cb: 5c:65:f2:fd:14:59:35:6e:02:d1:e8:1d:c0:bf:53: 99:2c:f0:59:d1:25:45:4e:7f:b4:95:ae:e6:46:60: ad:e9:9e:35:92:bd:bc:e4:e0:1d:fb:e7:80:28:be: d5:bd:78:b4:c9:cc:ab:aa:27:91:06:6c:e9:3c:2f: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:49:10:8D:94:2D:6A:10:23:25:2B:B4:05:11:02:F3:9E:61:1A X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6a:a7:00:86:15:fe:a2:2c:29:92:96:b2:64:f0:ea:75:51: a9:6d:84:73:14:de:c7:2c:f4:e8:d3:e9:fb:24:bd:67:02:c6: d0:65:f9:a7:48:59:83:85:24:c4:87:d4:82:29:21:f4:ad:34: 45:13:27:ad:26:16:9d:07:c7:10:66:0d:bd:85:04:80:51:7b: 6b:99:9c:f6:58:ad:dd:66:2f:f6:c8:7d:37:57:56:f7:4d:fc: d0:5c:4e:d3:17:60:73:89:65:06:a4:31:a8:8f:fd:b2:43:98: 4b:68:07:f1:cd:f8:4a:a5:3b:af:60:8e:65:26:b8:2d:e6:03: f5:89:17:3b:f5:03:08:85:cf:34:34:65:3e:b5:1f:c3:1c:5e: ec:f4:20:a0:fa:70:06:8f:e1:00:e9:1f:48:63:89:34:2b:14: 5d:aa:8b:48:ef:7a:1c:9c:1c:63:11:51:9f:d2:cb:45:aa:5e: c9:69:dc:4d:a8:df:4b:67:ef:d6:f6:a7:b9:3f:1a:d5:a2:6e: 31:42:0a:bb:27:0c:15:0a:c4:37:0a:dd:60:ec:7d:d3:ba:a8: 59:9a:eb:1e:e5:06:0b:92:2c:ac:8f:ce:14:92:69:e6:d5:2f: 76:08:76:72:43:2b:f0:86:f2:8d:d0:e5:55:d5:43:13:e4:bc: 8a:5d:48:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjUwNzAyMTgzMTEzWhcNMjUwNzA5MTgzMTEzWjAYMRYwFAYD VQQDEw02ODY1N2FmMS1jMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hKTqp+Mss4M7KaGPM6HA59bRt+JmrxKyv84R6+mSCUBj2tynIxXfxwQRRn/ o+YWrnQXOpuaVOq7ZNCW/7kYIwIRk480GWUcghHufr+WPwJMSLS46mqstZ8MDbLS soEoMBUObX3CvRSDb6Hb2PraZPb6vQ4gqt7+ARFbWyQ9USFe7AUpgYwdj5kDbkOE NsiMtjULkAnESg03KUwtaOj85DSVYI52mmuh4zgcjh/k+cTTDZxW4C+mXqjFZ5WF obGFpMtcZfL9FFk1bgLR6B3Av1OZLPBZ0SVFTn+0la7mRmCt6Z41kr285OAd++eA KL7VvXi0ycyrqieRBmzpPC94yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMigSRCN lC1qECMlK7QFEQLznmEaMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChaqcAhhX+oiwpkpayZPDqdVGpbYRzFN7HLPTo0+n7JL1nAsbQZfmn SFmDhSTEh9SCKSH0rTRFEyetJhadB8cQZg29hQSAUXtrmZz2WK3dZi/2yH03V1b3 TfzQXE7TF2BziWUGpDGoj/2yQ5hLaAfxzfhKpTuvYI5lJrgt5gP1iRc79QMIhc80 NGU+tR/DHF7s9CCg+nAGj+EA6R9IY4k0KxRdqotI73ocnBxjEVGf0stFql7JadxN qN9LZ+/W9qe5PxrVom4xQgq7JwwVCsQ3Ct1g7H3TuqhZmuse5QYLkiysj84Ukmnm 1S92CHZyQyvwhvKN0OVV1UMT5LyKXUjq -----END CERTIFICATE-----Generated at Thu Jul 3 09:40:02 2025 by rpki-client