$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json) Hash identifier: +bCCmeUtuoy4/EoyQyRhtLp7aCin8a7D8rc3Uuwib8M= Subject key identifier: FB:AE:78:6D:73:85:05:47:A1:8B:D6:D3:83:EB:6F:34:10:C2:04:0E Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft Manifest number: 0747 Signing time: Fri 22 Aug 2025 21:51:15 +0000 Manifest this update: Fri 22 Aug 2025 21:51:14 +0000 Manifest next update: Fri 29 Aug 2025 21:51:14 +0000 Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: 4otOorJxth1YO+rOtqnUcBg4u9zcHXcDrQ+RJLG2c34=) 2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Validity Not Before: Aug 22 21:51:14 2025 GMT Not After : Aug 29 21:51:14 2025 GMT Subject: CN=68a8e652-db17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:15:e9:ef:a8:7f:90:20:80:d9:13:82:44: 07:fb:22:41:65:b2:54:98:09:ca:35:7b:66:3c:e3: ff:34:9d:76:33:d7:bc:75:04:29:37:b8:af:e5:97: 07:5d:6c:4d:c7:7e:43:de:4c:99:80:3a:fa:f7:f9: e4:f6:53:e1:f3:43:89:93:65:01:73:d4:cf:21:e9: cc:94:b2:18:0e:db:03:43:ea:34:06:e0:6e:83:50: 51:d7:18:8e:66:a4:90:9a:65:c7:f1:a3:8f:00:80: 60:20:22:28:7a:a1:f6:4f:03:79:76:c5:8f:cc:a5: 4e:76:11:f4:70:e5:4a:d4:05:47:96:d6:52:85:39: 59:63:02:9c:0c:74:87:06:6b:ff:ea:ea:89:be:a4: b6:b0:2b:15:fa:6a:7e:25:2f:d1:15:75:e4:71:b8: f5:1f:fd:6b:87:23:bd:64:f7:93:c6:d3:54:2a:6d: 89:af:29:92:88:b9:77:8e:4d:c2:52:12:f5:0c:b4: 02:c5:b6:f7:6d:c4:eb:d4:f1:c2:6f:26:62:6e:67: b4:79:a2:44:13:ea:d5:cd:76:84:a3:9f:71:e7:1f: 31:42:1f:9a:3f:cb:ad:29:27:80:ed:0b:21:3d:cd: 77:35:76:54:d1:51:ea:31:5f:4b:e8:12:9f:20:77: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:78:6D:73:85:05:47:A1:8B:D6:D3:83:EB:6F:34:10:C2:04:0E X509v3 Authority Key Identifier: keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:22:a0:25:5c:f1:73:3e:c9:7c:9d:ab:7e:80:ed:7a:1c:20: 69:15:60:8a:15:ec:83:77:f3:e8:de:d7:26:c9:1d:91:e4:8b: 53:9f:49:0f:0d:37:89:f6:7b:12:ab:ca:73:f0:9f:60:46:eb: 54:37:cb:fe:7b:18:14:8f:23:58:0d:d2:df:19:ac:df:bd:43: dd:17:59:9b:97:1c:c4:e5:af:73:23:09:03:f7:b9:68:9d:a8: bf:12:5f:88:34:7a:ec:2f:83:82:e8:c0:10:89:3b:f6:ee:1a: 05:70:95:3e:a2:b5:79:69:1c:5e:99:5a:89:68:e1:b4:eb:2b: 57:19:3c:7d:d3:5d:1d:f2:9b:45:9a:65:bb:e8:3b:f8:e5:e4: 04:f6:2f:9a:f4:be:25:0c:df:0b:9c:78:61:12:55:68:c8:1e: 3f:66:13:bc:73:1b:92:9c:36:71:60:2e:d4:27:d5:09:84:b3: 49:cf:29:41:40:16:77:f7:37:27:78:2e:4b:53:8a:de:cd:34: f3:e2:1a:0c:1f:f6:de:50:7a:20:95:8a:f8:f0:db:0b:c7:19: 7f:79:32:d7:40:25:c6:40:1b:ae:55:d5:64:09:27:f4:79:9e: e3:6a:1f:4d:5f:78:52:d8:70:70:64:31:8e:c6:07:f9:e0:c6: 0e:d2:6a:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF Q0FDODM1MTUwHhcNMjUwODIyMjE1MTE0WhcNMjUwODI5MjE1MTE0WjAYMRYwFAYD VQQDEw02OGE4ZTY1Mi1kYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt98V6e+of5AggNkTgkQH+yJBZbJUmAnKNXtmPOP/NJ12M9e8dQQpN7iv5ZcH XWxNx35D3kyZgDr69/nk9lPh80OJk2UBc9TPIenMlLIYDtsDQ+o0BuBug1BR1xiO ZqSQmmXH8aOPAIBgICIoeqH2TwN5dsWPzKVOdhH0cOVK1AVHltZShTlZYwKcDHSH Bmv/6uqJvqS2sCsV+mp+JS/RFXXkcbj1H/1rhyO9ZPeTxtNUKm2JrymSiLl3jk3C UhL1DLQCxbb3bcTr1PHCbyZibme0eaJEE+rVzXaEo59x5x8xQh+aP8utKSeA7Qsh Pc13NXZU0VHqMV9L6BKfIHfjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuueG1z hQVHoYvW04PrbzQQwgQOMB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4 NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFGNS8xNTEwRkI1QzM4NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhR QXlWU3hDYkVOVFBzcklOUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByIqAlXPFzPsl8nat+gO16HCBpFWCKFeyDd/Po3tcmyR2R5ItTn0kP DTeJ9nsSq8pz8J9gRutUN8v+exgUjyNYDdLfGazfvUPdF1mblxzE5a9zIwkD97lo nai/El+INHrsL4OC6MAQiTv27hoFcJU+orV5aRxemVqJaOG06ytXGTx9010d8ptF mmW76Dv45eQE9i+a9L4lDN8LnHhhElVoyB4/ZhO8cxuSnDZxYC7UJ9UJhLNJzylB QBZ39zcneC5LU4rezTTz4hoMH/beUHoglYr48NsLxxl/eTLXQCXGQBuuVdVkCSf0 eZ7jah9NX3hS2HBwZDGOxgf54MYO0mpC -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:54 2025 by rpki-client