$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: ggT3psf3oPBwpysUNYpPz0SFZnPW+B40FmzM2aHeNNA= Subject key identifier: BA:0F:D2:09:F0:8D:A2:F7:2C:E9:20:69:2E:FC:D0:F1:41:06:4B:DA Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 01D5 Signing time: Sat 05 Jul 2025 03:04:34 +0000 Manifest this update: Sat 05 Jul 2025 03:04:34 +0000 Manifest next update: Sat 12 Jul 2025 03:04:34 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: bFLpoZG7bDOaDozhG34pA4IuoAcSiFs6Q9L+50NDgKE=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: Jul 5 03:04:34 2025 GMT Not After : Jul 12 03:04:34 2025 GMT Subject: CN=68689642-6fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:03:90:98:1b:5b:2d:f8:c5:9d:81:08:71:00: 3a:4d:2d:81:d0:49:47:17:61:d5:4d:02:5d:e8:28: 58:5b:f5:2f:93:49:7f:a0:19:c6:7a:ec:a9:40:10: 56:bd:b6:c8:f4:3f:d7:34:74:4f:d7:fa:68:59:4d: 8b:9c:bf:a8:51:57:6e:ad:a9:73:bf:ed:72:e9:63: 6b:c9:42:bb:60:ca:74:17:d8:21:65:75:8b:18:d6: 71:46:b4:5d:88:b9:01:0b:b1:ec:1d:c9:bd:2f:ad: 7c:28:31:f7:ab:1d:e6:c4:68:2f:c3:f1:87:47:9f: c4:3d:b0:68:59:76:a8:09:48:99:40:36:6e:9a:c0: 37:23:f0:d3:3f:3e:ec:52:b4:2f:8d:23:6a:e6:62: ea:d6:2e:5d:ea:ef:a8:1a:10:72:16:b6:af:41:ae: 3a:01:2c:40:a6:6e:86:9a:06:89:d7:98:7e:b8:aa: 3a:18:ec:f2:55:b6:b3:c8:4a:37:08:b1:cf:2a:2f: fb:ef:81:b5:c0:50:bc:94:09:df:86:62:e5:9f:61: df:aa:93:d9:a9:4b:d4:af:3c:37:c3:0c:ce:4a:3f: aa:70:c7:09:22:f2:7c:8f:23:e1:da:90:30:2e:96: df:42:b5:0b:e5:df:b3:4b:00:28:60:6f:ad:fb:b6: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0F:D2:09:F0:8D:A2:F7:2C:E9:20:69:2E:FC:D0:F1:41:06:4B:DA X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:12:11:57:de:29:7d:ad:f1:9e:ef:e6:f1:fb:33:d1:1d:e5: bc:9b:8c:07:58:e7:a0:4a:1b:7f:6a:d6:1f:bb:0f:f1:c8:98: 2e:e4:42:f2:74:aa:b9:b6:9c:17:22:4f:69:f2:51:33:ed:df: 5e:71:dc:fe:a9:03:a5:69:b5:f7:0a:a8:66:2f:ed:f8:c4:1a: 9f:82:b0:9c:48:11:5c:f2:3d:f1:c1:7e:f0:c0:67:e2:5e:2c: ea:30:df:55:56:13:16:25:39:87:54:9e:7a:f5:35:3b:ca:d0: a4:74:1e:28:d0:7b:4a:ba:44:59:09:cb:22:40:2b:c0:f7:e0: 9a:f9:2a:16:c0:3f:66:31:0b:87:fd:17:c4:be:bd:54:e7:5d: a4:b0:db:5a:c1:eb:d5:d9:b5:c8:56:e8:88:1f:65:f6:47:cf: 60:58:58:8a:4e:71:da:12:e7:22:f7:2a:94:a9:db:57:1a:bb: 42:57:c7:a6:3f:61:f4:d5:41:c6:59:b5:12:79:78:83:b1:da: 25:bb:fe:b0:10:87:a5:73:7b:a2:91:4b:ca:f5:db:ef:f9:dc: 34:c0:a1:b3:aa:91:91:79:7f:80:38:8b:e6:1d:49:56:c9:55: db:53:7c:0a:66:21:84:16:36:c1:aa:68:ef:7a:b6:61:bd:87: 75:ca:a2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUwNzA1MDMwNDM0WhcNMjUwNzEyMDMwNDM0WjAYMRYwFAYD VQQDEw02ODY4OTY0Mi02ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QOQmBtbLfjFnYEIcQA6TS2B0ElHF2HVTQJd6ChYW/Uvk0l/oBnGeuypQBBW vbbI9D/XNHRP1/poWU2LnL+oUVduralzv+1y6WNryUK7YMp0F9ghZXWLGNZxRrRd iLkBC7HsHcm9L618KDH3qx3mxGgvw/GHR5/EPbBoWXaoCUiZQDZumsA3I/DTPz7s UrQvjSNq5mLq1i5d6u+oGhByFravQa46ASxApm6GmgaJ15h+uKo6GOzyVbazyEo3 CLHPKi/774G1wFC8lAnfhmLln2HfqpPZqUvUrzw3wwzOSj+qcMcJIvJ8jyPh2pAw LpbfQrUL5d+zSwAoYG+t+7Z0GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoP0gnw jaL3LOkgaS780PFBBkvaMB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPEhFX3il9rfGe7+bx+zPRHeW8m4wHWOegSht/atYfuw/xyJgu5ELy dKq5tpwXIk9p8lEz7d9ecdz+qQOlabX3CqhmL+34xBqfgrCcSBFc8j3xwX7wwGfi XizqMN9VVhMWJTmHVJ569TU7ytCkdB4o0HtKukRZCcsiQCvA9+Ca+SoWwD9mMQuH /RfEvr1U512ksNtawevV2bXIVuiIH2X2R89gWFiKTnHaEuci9yqUqdtXGrtCV8em P2H01UHGWbUSeXiDsdolu/6wEIelc3uikUvK9dvv+dw0wKGzqpGReX+AOIvmHUlW yVXbU3wKZiGEFjbBqmjverZhvYd1yqIL -----END CERTIFICATE-----Generated at Sun Jul 6 00:49:52 2025 by rpki-client