$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft File: guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json) Hash identifier: 9OnrtagMoyE55ggpAyH7Mo3W82dqsymIuif+AMEX5hE= Subject key identifier: 47:45:C3:44:45:9D:B6:FB:E9:A0:87:7F:88:5F:7C:D0:E9:7C:C7:1C Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 Certificate issuer: /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft Manifest number: D3 Signing time: Sat 23 Aug 2025 05:47:53 +0000 Manifest this update: Sat 23 Aug 2025 05:47:52 +0000 Manifest next update: Sat 30 Aug 2025 05:47:52 +0000 Files and hashes: 1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: KGAHJ5lHFT+MpVwycjkgNYYJEFzfeAwncqgazehMH4o=) 2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Validity Not Before: Aug 23 05:47:52 2025 GMT Not After : Aug 30 05:47:52 2025 GMT Subject: CN=68a95609-c670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:ce:6d:b6:1a:a4:69:8e:db:77:4a:ac:d4: 8e:69:65:cf:37:58:cf:04:e0:16:f7:cc:b0:e6:50: b3:07:50:f3:89:8a:38:a4:2f:eb:88:5a:62:d0:48: ac:ef:1c:f7:8a:30:1b:18:75:ae:63:34:9e:7d:8b: b4:28:f3:70:56:3d:63:7c:9a:48:19:0f:1b:a5:04: ae:b5:e6:c6:a7:4a:27:c6:30:4c:9a:61:69:dd:34: 72:c4:63:f3:cb:fa:45:13:c9:91:c1:61:c1:fd:a7: 7c:5f:6e:fe:9d:1b:ac:72:7b:5e:93:d1:eb:ad:f4: 57:8b:60:44:f2:db:6e:9a:19:9a:f7:39:55:58:94: e8:dd:81:f3:5d:75:89:da:80:9c:c0:94:7c:83:0c: 3a:a0:42:4f:fd:b0:64:8f:b8:0d:ce:67:83:d7:23: 8f:99:46:2c:b5:7c:07:f4:e5:3d:7b:7b:a9:26:5f: 71:4a:be:25:ed:6c:f6:11:25:87:4e:7a:23:b9:48: ec:66:7b:4f:44:7a:8f:ed:1f:f2:0d:c4:76:9d:e6: 88:f3:a9:9e:5b:61:c1:d2:77:08:17:a7:93:93:46: e0:fc:f0:16:93:eb:62:eb:26:5e:d1:50:4c:b7:02: 39:97:b1:6c:69:7f:2d:31:c1:14:bb:41:2e:2a:ad: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:C3:44:45:9D:B6:FB:E9:A0:87:7F:88:5F:7C:D0:E9:7C:C7:1C X509v3 Authority Key Identifier: keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:32:26:e7:46:e7:14:23:40:0c:20:ef:6b:24:17:56:b6:26: 5a:23:4e:f4:cf:84:16:a5:13:81:c9:16:ac:7e:6a:b9:ac:45: 28:6a:0b:3e:61:cb:e5:c8:9e:90:78:34:d9:0a:26:45:cf:8b: d0:7f:c0:97:f5:85:59:43:93:ff:0a:7f:ee:dd:a9:7e:c2:53: 5a:4c:d5:9a:0c:6e:32:66:37:a7:ef:4f:5d:80:cd:e5:84:47: 38:fc:90:d7:1f:fd:16:47:f0:66:6a:01:65:89:38:1b:d3:c3: ad:0c:7e:48:94:04:0e:72:a0:b4:95:1f:8c:99:dd:7f:48:2b: 87:3d:46:89:5f:3c:77:78:fa:50:31:77:61:ce:45:fb:94:88: c1:91:4e:5a:4e:55:d6:b0:a8:0a:ee:6e:e9:d5:ef:0d:eb:bc: e0:aa:6e:38:46:55:4d:d1:d7:16:40:68:9a:05:6d:a1:0b:e6: 94:b3:0e:da:1f:93:33:d5:a0:2d:73:e2:02:3a:67:cf:dd:aa: 89:84:79:be:f7:25:41:60:4b:1f:c1:b3:d0:d0:b0:f4:1b:2d: 48:89:e7:a4:6c:67:d6:d0:3a:c2:56:d5:8f:8c:f8:7b:03:89: ca:ab:ed:72:45:23:f0:cc:9d:b8:65:17:0a:15:84:87:c1:cb: a8:92:f9:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2 RDJFN0U0RTYwHhcNMjUwODIzMDU0NzUyWhcNMjUwODMwMDU0NzUyWjAYMRYwFAYD VQQDEw02OGE5NTYwOS1jNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyLObbYapGmO23dKrNSOaWXPN1jPBOAW98yw5lCzB1DziYo4pC/riFpi0Eis 7xz3ijAbGHWuYzSefYu0KPNwVj1jfJpIGQ8bpQSutebGp0onxjBMmmFp3TRyxGPz y/pFE8mRwWHB/ad8X27+nRuscntek9HrrfRXi2BE8ttumhma9zlVWJTo3YHzXXWJ 2oCcwJR8gww6oEJP/bBkj7gNzmeD1yOPmUYstXwH9OU9e3upJl9xSr4l7Wz2ESWH TnojuUjsZntPRHqP7R/yDcR2neaI86meW2HB0ncIF6eTk0bg/PAWk+ti6yZe0VBM twI5l7FsaX8tMcEUu0EuKq0uZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdFw0RF nbb76aCHf4hffNDpfMccMB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J YUEzVEFOLV8taXR0TG41T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEMibnRucUI0AMIO9rJBdWtiZaI070z4QWpROByRasfmq5rEUoags+ YcvlyJ6QeDTZCiZFz4vQf8CX9YVZQ5P/Cn/u3al+wlNaTNWaDG4yZjen709dgM3l hEc4/JDXH/0WR/BmagFliTgb08OtDH5IlAQOcqC0lR+Mmd1/SCuHPUaJXzx3ePpQ MXdhzkX7lIjBkU5aTlXWsKgK7m7p1e8N67zgqm44RlVN0dcWQGiaBW2hC+aUsw7a H5Mz1aAtc+ICOmfP3aqJhHm+9yVBYEsfwbPQ0LD0Gy1IieekbGfW0DrCVtWPjPh7 A4nKq+1yRSPwzJ24ZRcKFYSHwcuokvme -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:53 2025 by rpki-client