$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: DcTXCy44LkyU1IZGC+u9oE29/nfsyGfjCA4NC5rSrLU= Subject key identifier: 10:3D:72:81:93:EC:3D:04:82:71:01:29:C5:86:57:E2:26:53:74:DC Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0CC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0CB1 Signing time: Mon 20 Oct 2025 18:49:17 +0000 Manifest this update: Mon 20 Oct 2025 18:49:17 +0000 Manifest next update: Mon 27 Oct 2025 18:49:17 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: llf54MFxeOD4ycUzwo5ZtwkqCvN4U0+PdfsNhrUmbqM=) 2: A0632940737D11F091340126C4F9AE02.roa (hash: MgunnEkdhYyxCKv1PICJfgMQMsgL6bJvzf4zx6j7RFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Oct 20 18:49:17 2025 GMT Not After : Oct 27 18:49:17 2025 GMT Subject: CN=68f6842d-e08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:73:1b:3c:88:31:04:ee:4c:b8:fd:1a:1c: 99:b2:a7:61:59:c3:9e:11:31:14:15:8f:97:3c:68: f7:79:2f:1b:da:84:13:48:13:75:9f:52:2a:b6:82: 8f:d0:94:26:52:bd:fa:b5:a9:4e:50:a2:51:c4:12: da:a3:5b:93:97:1a:f5:45:22:a9:53:f6:f9:d0:f0: 02:cc:aa:02:59:e6:a1:22:29:cc:d3:65:7c:59:d8: a6:c5:bc:23:d6:0b:c8:39:73:1c:65:9c:28:3b:d9: 8d:77:9e:53:25:18:a0:d6:b5:bd:15:60:e9:0c:f2: a0:bb:56:d0:0d:79:4a:98:98:e7:a9:af:d2:09:2b: bd:02:70:58:6b:5a:13:d5:0c:47:05:e4:40:c9:44: 1f:be:12:1f:b2:a0:97:4c:40:9c:2e:81:85:67:4a: 31:ea:b2:ad:ec:cf:d4:65:f4:43:4f:1a:db:41:30: b1:27:75:7e:31:c9:73:8b:1b:74:d4:dd:5f:f6:04: 21:64:19:26:8b:cd:f6:42:71:77:c7:84:3c:6b:de: 45:dc:66:64:b8:3b:1f:95:50:b5:a2:01:38:3e:49: a0:9e:2e:9a:68:9f:e9:78:1d:8a:d6:d1:d2:d5:48: af:84:88:d0:2d:d5:e8:d6:da:29:4b:81:b0:38:6d: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:72:81:93:EC:3D:04:82:71:01:29:C5:86:57:E2:26:53:74:DC X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:30:3e:21:f4:ea:08:82:be:fa:92:b6:ca:e9:da:c4:59:88: 87:59:c8:e8:a6:8b:c6:37:6e:73:e8:6b:da:e5:63:3a:d0:fe: 0f:ca:48:89:9b:3f:2c:0a:ea:24:46:5a:bb:76:fe:22:c7:99: ce:7e:ab:e1:8f:e4:0a:cf:e7:3d:c9:3c:d6:5e:50:b9:b7:1e: 85:06:84:1a:37:96:86:33:12:93:8c:94:30:82:ee:b5:1d:ae: 8c:8e:06:94:82:bf:c1:ad:80:be:4b:fe:1f:ea:24:10:91:c6: 70:a6:29:d7:44:fa:24:38:e0:8f:5f:94:0d:91:66:8f:a3:e9: ae:45:4f:c4:39:e5:0c:cd:03:6c:5a:1e:ae:27:e7:61:56:94: df:49:a6:60:52:df:05:47:28:9e:9b:6b:d8:49:fc:69:9b:20: 47:88:5b:12:3f:85:6c:74:c0:65:de:62:69:02:c3:06:03:17: 5a:37:bb:df:99:84:e8:75:8a:19:b2:1e:c5:9e:d1:1c:af:3f: d8:2e:e5:fb:ce:27:87:4e:dd:a3:fd:d9:f3:b9:f3:fe:b2:0d: 7e:cb:af:bb:44:33:f8:77:3a:34:94:fa:c9:d8:67:d1:78:53: df:21:b6:3f:93:8a:4b:70:61:46:5f:fe:85:9d:75:c9:06:de: 10:da:c4:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjUxMDIwMTg0OTE3WhcNMjUxMDI3MTg0OTE3WjAYMRYwFAYD VQQDEw02OGY2ODQyZC1lMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPVzGzyIMQTuTLj9GhyZsqdhWcOeETEUFY+XPGj3eS8b2oQTSBN1n1IqtoKP 0JQmUr36talOUKJRxBLao1uTlxr1RSKpU/b50PACzKoCWeahIinM02V8Wdimxbwj 1gvIOXMcZZwoO9mNd55TJRig1rW9FWDpDPKgu1bQDXlKmJjnqa/SCSu9AnBYa1oT 1QxHBeRAyUQfvhIfsqCXTECcLoGFZ0ox6rKt7M/UZfRDTxrbQTCxJ3V+Mclzixt0 1N1f9gQhZBkmi832QnF3x4Q8a95F3GZkuDsflVC1ogE4Pkmgni6aaJ/peB2K1tHS 1UivhIjQLdXo1topS4GwOG1newIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA9coGT 7D0EgnEBKcWGV+ImU3TcMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGMD4h9OoIgr76krbK6drEWYiHWcjopovGN25z6Gva5WM60P4PykiJ mz8sCuokRlq7dv4ix5nOfqvhj+QKz+c9yTzWXlC5tx6FBoQaN5aGMxKTjJQwgu61 Ha6MjgaUgr/BrYC+S/4f6iQQkcZwpinXRPokOOCPX5QNkWaPo+muRU/EOeUMzQNs Wh6uJ+dhVpTfSaZgUt8FRyiem2vYSfxpmyBHiFsSP4VsdMBl3mJpAsMGAxdaN7vf mYTodYoZsh7FntEcrz/YLuX7zieHTt2j/dnzufP+sg1+y6+7RDP4dzo0lPrJ2GfR eFPfIbY/k4pLcGFGX/6FnXXJBt4Q2sRs -----END CERTIFICATE-----Generated at Tue Oct 21 05:01:29 2025 by rpki-client