$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft File: guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json) Hash identifier: MTjRLuFQNuG7NVAtHMeHLh0aHtiMUgaIJ6StyPQhtGk= Subject key identifier: F0:A0:9B:66:C0:92:FF:98:53:8B:22:7A:F5:66:8E:84:44:EF:46:CE Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 Certificate issuer: /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft Manifest number: A0 Signing time: Tue 13 May 2025 05:26:37 +0000 Manifest this update: Tue 13 May 2025 05:26:37 +0000 Manifest next update: Tue 20 May 2025 05:26:37 +0000 Files and hashes: 1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: RrXQsAPIUA9tJKbqxnEzuLuaXYK1GGo7ahgnzr4vm54=) 2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Validity Not Before: May 13 05:26:37 2025 GMT Not After : May 20 05:26:37 2025 GMT Subject: CN=6822d80d-40ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:d4:76:9e:97:a4:e4:e6:4c:18:7f:07:27: 10:cd:46:c9:79:0e:1f:24:a1:c5:d4:19:de:30:b4: f4:56:ff:09:0a:a9:91:05:96:a5:27:c1:af:8c:ad: 1d:8e:b8:36:af:5c:bf:b1:02:9d:70:68:fd:24:6d: 46:51:ff:50:8c:ee:8a:10:15:54:9b:e4:65:16:6b: 92:3b:77:ce:c6:bc:c9:7b:31:a5:45:5c:d5:01:96: 92:66:6f:b8:28:18:99:ed:29:e5:65:43:f2:7e:b0: 0c:c4:19:b9:5e:45:fd:c8:20:9e:28:41:60:1b:f0: 26:75:cb:b4:de:27:17:15:95:e8:04:80:ee:a3:09: 3f:5f:29:73:33:c6:6b:6a:da:d6:fa:a4:1f:df:12: e6:3a:9b:e3:c7:de:b9:40:a4:3b:97:1b:ce:f9:db: b8:78:e9:47:bc:16:df:11:cf:43:e4:83:04:87:9c: 36:4c:e8:ae:79:63:b4:7e:b6:66:6a:6d:a3:d6:46: d0:98:90:00:7d:0c:ec:ba:10:2f:f0:12:b6:a2:97: 4a:fc:b3:a5:6a:50:c4:c6:10:e6:cd:88:c7:90:b3: 94:dd:56:22:e8:97:de:88:af:df:86:7d:02:77:10: b8:27:a6:fa:27:3b:1e:9a:42:19:d3:0b:09:df:4f: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A0:9B:66:C0:92:FF:98:53:8B:22:7A:F5:66:8E:84:44:EF:46:CE X509v3 Authority Key Identifier: keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d2:58:fb:af:5d:99:7f:c5:7f:87:a9:e9:b7:0e:24:90:dc: 1c:17:f3:5a:95:e6:8e:92:4d:d6:bc:13:f1:ec:b9:80:de:7c: ad:e0:5c:35:e2:7c:58:d8:f4:00:b8:da:4b:ea:50:6a:d7:90: c3:09:b1:30:5c:00:c4:29:e1:fc:4c:b9:86:41:87:74:ad:67: 24:f6:12:dd:f2:a9:f4:a9:35:85:14:b5:5f:1b:5e:57:74:f3: 67:fc:b6:7a:88:00:75:81:05:fa:e0:8d:d9:6f:a3:5d:a7:af: 91:50:de:55:4c:5b:27:f8:79:28:fa:2c:e0:fd:c9:65:d7:74: a8:89:1c:e3:4a:54:cf:9f:76:f5:7c:d8:2b:31:7c:50:8b:29: fd:da:27:f9:50:a6:a6:82:fc:7a:0f:22:c3:71:4c:dd:3b:2a: 16:f7:ee:3c:f0:f9:8c:74:ee:68:6d:db:81:26:f0:cf:47:46: 2a:77:50:9a:de:34:b4:81:17:01:4c:09:04:e8:6c:42:d2:de: 33:cd:ed:03:72:eb:16:e7:b9:9b:da:c5:5f:ad:87:d4:96:64: 2d:d3:d7:11:04:26:ce:59:98:50:ce:ed:01:55:f7:c3:33:85: c6:ff:e9:ac:f5:96:09:85:86:f2:6e:a4:1b:eb:e9:eb:8c:8d: 49:09:55:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2 RDJFN0U0RTYwHhcNMjUwNTEzMDUyNjM3WhcNMjUwNTIwMDUyNjM3WjAYMRYwFAYD VQQDEw02ODIyZDgwZC00MGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc3Udp6XpOTmTBh/BycQzUbJeQ4fJKHF1BneMLT0Vv8JCqmRBZalJ8GvjK0d jrg2r1y/sQKdcGj9JG1GUf9QjO6KEBVUm+RlFmuSO3fOxrzJezGlRVzVAZaSZm+4 KBiZ7SnlZUPyfrAMxBm5XkX9yCCeKEFgG/Amdcu03icXFZXoBIDuowk/XylzM8Zr atrW+qQf3xLmOpvjx965QKQ7lxvO+du4eOlHvBbfEc9D5IMEh5w2TOiueWO0frZm am2j1kbQmJAAfQzsuhAv8BK2opdK/LOlalDExhDmzYjHkLOU3VYi6JfeiK/fhn0C dxC4J6b6JzsemkIZ0wsJ30/+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCgm2bA kv+YU4sievVmjoRE70bOMB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J YUEzVEFOLV8taXR0TG41T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu0lj7r12Zf8V/h6nptw4kkNwcF/NaleaOkk3WvBPx7LmA3nyt4Fw1 4nxY2PQAuNpL6lBq15DDCbEwXADEKeH8TLmGQYd0rWck9hLd8qn0qTWFFLVfG15X dPNn/LZ6iAB1gQX64I3Zb6Ndp6+RUN5VTFsn+Hko+izg/cll13SoiRzjSlTPn3b1 fNgrMXxQiyn92if5UKamgvx6DyLDcUzdOyoW9+488PmMdO5obduBJvDPR0Yqd1Ca 3jS0gRcBTAkE6GxC0t4zze0DcusW57mb2sVfrYfUlmQt09cRBCbOWZhQzu0BVffD M4XG/+ms9ZYJhYbybqQb6+nrjI1JCVXe -----END CERTIFICATE-----Generated at Tue May 13 18:07:56 2025 by rpki-client