$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft File: guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json) Hash identifier: uTP6KbKz6lyo/F08ScQdbGIzattRFMvpKyJl8MV5p5U= Subject key identifier: 60:F2:7B:9A:18:F8:F8:2C:38:34:9A:1C:AD:A4:6F:1F:0D:B7:90:4D Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 Certificate issuer: /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft Manifest number: F0 Signing time: Sun 19 Oct 2025 08:15:57 +0000 Manifest this update: Sun 19 Oct 2025 08:15:56 +0000 Manifest next update: Sun 26 Oct 2025 08:15:56 +0000 Files and hashes: 1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: x7ezeGXXHQFA1gSYid2WEsyxPw10TUpuT8ffuwJAph0=) 2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Validity Not Before: Oct 19 08:15:56 2025 GMT Not After : Oct 26 08:15:56 2025 GMT Subject: CN=68f49e3c-f832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:87:c4:db:58:e3:e9:8d:35:92:5d:58:f2: a8:0e:34:f1:de:c6:19:a9:d3:50:8c:2b:6b:6c:d9: bb:64:84:ab:a6:d4:6b:1a:9e:0d:a5:b8:c0:af:c6: 90:74:fb:cb:07:d9:88:47:f3:44:06:16:4f:f2:f9: fe:b3:dc:4e:32:d0:86:ac:47:56:df:4b:e5:b1:4c: e9:60:5e:65:35:12:b2:30:f8:a8:ed:42:cd:11:72: 52:6e:92:8d:af:f5:2c:5e:fa:f7:0c:8d:eb:43:ec: c8:4d:ea:4d:f6:50:34:37:82:97:e9:3f:c9:01:b5: c7:67:bd:9b:cb:98:69:bb:fd:94:1a:40:a2:ed:c3: 98:e7:ae:eb:cd:34:43:a0:2e:e5:73:ae:a8:37:71: 83:00:fe:d9:f7:43:5c:3a:3c:37:7d:7e:13:fc:58: 47:3b:1a:4c:cd:d8:aa:ab:7c:1e:21:aa:c8:78:b6: a0:f6:a4:cc:ed:2d:5e:dc:77:79:d7:ef:16:c8:f2: 82:ed:f3:5c:ec:d0:0a:83:57:90:80:7e:f5:e5:f6: 40:e9:7c:36:ee:00:f4:c1:88:77:6e:a1:c2:81:1a: b6:b5:18:fc:be:64:d0:3c:74:c5:01:e2:d4:26:b8: 74:54:48:e2:8d:f4:20:bd:a6:4b:6d:14:1a:47:cf: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F2:7B:9A:18:F8:F8:2C:38:34:9A:1C:AD:A4:6F:1F:0D:B7:90:4D X509v3 Authority Key Identifier: keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c7:60:55:a9:83:ae:e8:9b:69:46:fe:b0:49:fa:34:52:8b: e7:aa:0a:84:c6:9b:1a:df:17:22:00:5c:2b:c2:3e:09:2b:48: 49:b1:78:13:81:eb:83:71:5f:db:bf:ac:87:d1:d2:05:05:4b: 8d:d2:5c:7a:01:f8:78:b9:21:b0:11:b8:fa:8d:17:85:ea:6f: 88:f6:c1:0c:81:ff:ce:62:16:a8:25:4c:99:a8:7a:48:44:f2: e4:45:06:23:0f:d0:cc:97:3c:aa:12:1d:26:8e:79:ba:28:91: 59:f5:29:2b:c7:51:57:2a:cd:72:f9:b6:f0:1d:39:30:ad:39: 33:4a:55:4a:69:fd:b1:a1:ad:7d:7f:ed:2c:9a:e4:7f:b0:d6: d0:6e:da:a3:e0:f9:25:2f:91:76:4b:e1:90:75:4d:5f:95:1d: 78:0a:f8:95:d7:ea:1e:9b:58:b3:d5:4c:67:55:1a:88:df:70: fd:aa:fd:92:a2:a6:64:39:d7:2a:7a:69:5e:38:dd:60:c8:97: bb:d6:04:6d:eb:cc:60:15:75:c9:40:cf:9c:db:f5:96:b9:82: 84:4d:3a:24:9d:7b:b7:9e:ac:73:64:83:e8:2e:d3:15:92:01: c9:c6:6c:e0:c2:0f:e0:41:ca:9b:52:0f:e1:4a:e6:73:58:8b: e8:27:77:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2 RDJFN0U0RTYwHhcNMjUxMDE5MDgxNTU2WhcNMjUxMDI2MDgxNTU2WjAYMRYwFAYD VQQDEw02OGY0OWUzYy1mODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sqHxNtY4+mNNZJdWPKoDjTx3sYZqdNQjCtrbNm7ZISrptRrGp4NpbjAr8aQ dPvLB9mIR/NEBhZP8vn+s9xOMtCGrEdW30vlsUzpYF5lNRKyMPio7ULNEXJSbpKN r/UsXvr3DI3rQ+zITepN9lA0N4KX6T/JAbXHZ72by5hpu/2UGkCi7cOY567rzTRD oC7lc66oN3GDAP7Z90NcOjw3fX4T/FhHOxpMzdiqq3weIarIeLag9qTM7S1e3Hd5 1+8WyPKC7fNc7NAKg1eQgH715fZA6Xw27gD0wYh3bqHCgRq2tRj8vmTQPHTFAeLU Jrh0VEjijfQgvaZLbRQaR89xFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDye5oY +PgsODSaHK2kbx8Nt5BNMB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J YUEzVEFOLV8taXR0TG41T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCx2BVqYOu6JtpRv6wSfo0UovnqgqExpsa3xciAFwrwj4JK0hJsXgT geuDcV/bv6yH0dIFBUuN0lx6Afh4uSGwEbj6jReF6m+I9sEMgf/OYhaoJUyZqHpI RPLkRQYjD9DMlzyqEh0mjnm6KJFZ9Skrx1FXKs1y+bbwHTkwrTkzSlVKaf2xoa19 f+0smuR/sNbQbtqj4PklL5F2S+GQdU1flR14CviV1+oem1iz1UxnVRqI33D9qv2S oqZkOdcqemleON1gyJe71gRt68xgFXXJQM+c2/WWuYKETToknXu3nqxzZIPoLtMV kgHJxmzgwg/gQcqbUg/hSuZzWIvoJ3fO -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:17 2025 by rpki-client