$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft File: GwdUmyUM_APdrXtURD2oOIkYEco.mft (raw, json) Hash identifier: A4e4KRPh1u+lFhYvdZilUCiab/WwJyYgBXJkCdHEjIE= Subject key identifier: 96:AE:14:DE:5F:3D:96:97:5D:86:DE:30:D3:9C:C3:37:0E:F0:3D:C0 Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA Certificate issuer: /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft Manifest number: 9C Signing time: Sat 23 Aug 2025 06:28:06 +0000 Manifest this update: Sat 23 Aug 2025 06:28:06 +0000 Manifest next update: Sat 30 Aug 2025 06:28:05 +0000 Files and hashes: 1: GwdUmyUM_APdrXtURD2oOIkYEco.crl (hash: rfl22M8EvjAg8qfEtKwJakFXX0/kaxZ2IyS/xDWO7MQ=) 2: 34BA37F6976E11EFAEB6A258C4F9AE02.roa (hash: dMptlIu2hEGUJL7wHDTpb5B0NGrE6jX2dVguRw6q6C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA Validity Not Before: Aug 23 06:28:06 2025 GMT Not After : Aug 30 06:28:05 2025 GMT Subject: CN=68a95f76-4834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:be:c6:6e:92:0a:a9:5b:b4:6b:ab:5e:a2: c4:23:60:10:fe:92:2f:08:10:c6:49:c1:c9:1f:10: b0:e5:4c:ea:42:a7:6d:9d:09:ba:20:f7:ff:76:d8: 92:4b:e5:0e:25:ba:46:85:c0:9b:71:ef:5a:24:ba: 14:8f:0f:44:d2:c6:a5:f4:9d:73:90:ce:eb:e5:d9: 26:6b:67:92:8c:ee:58:0e:8c:50:c9:06:25:fa:c8: 9b:52:23:0c:5d:6c:df:0a:cf:6c:3a:d3:fd:25:b0: e6:d7:58:41:60:86:f2:8b:28:3d:92:78:57:bd:3d: 01:54:bb:42:ca:41:c7:3c:39:69:37:2d:85:98:83: 58:4b:82:8b:df:3f:8c:e8:f2:19:28:14:48:6a:55: cd:01:a0:f7:95:21:5e:41:ed:d0:ac:63:fe:bc:b1: 6b:bf:c6:b6:30:8e:0a:9f:cd:aa:c1:c5:42:57:23: e4:ee:41:a4:12:1f:61:15:64:55:5a:f0:b2:19:e3: 55:dd:f2:c4:72:47:7d:3b:f4:97:b3:d8:d5:59:79: 50:80:e6:24:20:86:ca:56:14:38:00:36:b6:7f:a5: 4a:18:b5:ad:88:f8:d9:2d:d1:c5:b2:2d:17:e3:d9: 7a:3c:0a:48:08:3f:16:3f:9f:92:94:94:56:70:50: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:14:DE:5F:3D:96:97:5D:86:DE:30:D3:9C:C3:37:0E:F0:3D:C0 X509v3 Authority Key Identifier: keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:39:8f:82:77:f9:33:49:cd:30:bb:9b:ea:a2:28:05:91:f8: 13:24:fd:5c:04:9e:78:00:a8:0d:76:49:6d:fd:4f:2a:6b:95: fc:41:5c:7c:7a:5d:bc:fd:58:28:14:37:e2:d1:35:41:ee:e8: f0:08:a7:b8:8e:56:22:df:ae:16:77:c8:81:ca:18:f8:c4:7e: b8:25:7e:76:00:b5:cc:9f:d1:38:27:2a:68:1c:f2:58:85:16: fc:15:8e:bb:87:37:da:c6:29:9d:7b:c1:01:89:78:8c:15:4d: 2e:51:2e:7a:82:4d:07:7b:dd:db:fc:2e:40:3b:8b:c2:fa:b9: 99:d5:6c:e9:9a:8e:53:f1:1c:9c:7a:6e:7f:8f:e3:4e:46:bf: 4c:2a:82:56:ea:af:f2:f2:04:39:79:9b:a3:07:d7:e9:c5:74: 6d:f4:5c:d4:53:ef:4c:48:20:a4:2f:60:86:65:af:48:a3:17: 38:7d:4d:cb:3c:e4:0f:2b:19:d0:35:9f:dd:65:38:bb:d6:da: 72:67:93:8f:de:47:66:92:c4:30:4e:b0:e6:8d:cd:25:83:58: 82:97:ef:98:83:cb:b6:84:75:bf:ff:ba:64:1b:d2:9c:4f:52: ac:d2:5e:af:25:d8:be:83:97:cf:15:82:45:5e:65:10:f6:0a: 1c:03:ae:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE4QUMxMTAvBgNVBAUTKDFCMDc1NDlCMjUwQ0ZDMDNEREFEN0I1NDQ0M0RBODM4 ODkxODExQ0EwHhcNMjUwODIzMDYyODA2WhcNMjUwODMwMDYyODA1WjAYMRYwFAYD VQQDEw02OGE5NWY3Ni00ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAq+xm6SCqlbtGurXqLEI2AQ/pIvCBDGScHJHxCw5UzqQqdtnQm6IPf/dtiS S+UOJbpGhcCbce9aJLoUjw9E0sal9J1zkM7r5dkma2eSjO5YDoxQyQYl+sibUiMM XWzfCs9sOtP9JbDm11hBYIbyiyg9knhXvT0BVLtCykHHPDlpNy2FmINYS4KL3z+M 6PIZKBRIalXNAaD3lSFeQe3QrGP+vLFrv8a2MI4Kn82qwcVCVyPk7kGkEh9hFWRV WvCyGeNV3fLEckd9O/SXs9jVWXlQgOYkIIbKVhQ4ADa2f6VKGLWtiPjZLdHFsi0X 49l6PApICD8WP5+SlJRWcFBOqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJauFN5f PZaXXYbeMNOcwzcO8D3AMB8GA1UdIwQYMBaAFBsHVJslDPwD3a17VEQ9qDiJGBHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThBQy9ENEJBM0Q5ODk2 Q0MxMUVGOEVGQ0I4NDlDNEY5QUUwMi9Hd2RVbXlVTV9BUGRyWHRVUkQyb09Ja1lF Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3ZFVteVVNX0FQZHJYdFVSRDJvT0lrWUVjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MThBQy9ENEJBM0Q5ODk2Q0MxMUVGOEVGQ0I4NDlDNEY5QUUwMi9Hd2RVbXlVTV9B UGRyWHRVUkQyb09Ja1lFY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/OY+Cd/kzSc0wu5vqoigFkfgTJP1cBJ54AKgNdklt/U8qa5X8QVx8 el28/VgoFDfi0TVB7ujwCKe4jlYi364Wd8iByhj4xH64JX52ALXMn9E4JypoHPJY hRb8FY67hzfaximde8EBiXiMFU0uUS56gk0He93b/C5AO4vC+rmZ1Wzpmo5T8Ryc em5/j+NORr9MKoJW6q/y8gQ5eZujB9fpxXRt9FzUU+9MSCCkL2CGZa9Ioxc4fU3L POQPKxnQNZ/dZTi71tpyZ5OP3kdmksQwTrDmjc0lg1iCl++Yg8u2hHW//7pkG9Kc T1Ks0l6vJdi+g5fPFYJFXmUQ9gocA64n -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:21 2025 by rpki-client