$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: vIuwn08ymUPC83mtxSh/zkrKLS+znZTdHkxhRBxcpsw= Subject key identifier: 2C:47:6F:07:EB:40:B6:16:89:CE:F7:6F:BC:B7:07:91:B5:E2:A1:80 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 0676 Signing time: Wed 18 Jun 2025 22:13:45 +0000 Manifest this update: Wed 18 Jun 2025 22:13:45 +0000 Manifest next update: Wed 25 Jun 2025 22:13:45 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: 456zxXx12bnmxo5CMNvSe+4TvjDyWtPja/idR1Nx7vk=) 2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Jun 18 22:13:45 2025 GMT Not After : Jun 25 22:13:45 2025 GMT Subject: CN=68533a19-cf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:51:11:72:94:12:c0:39:91:f7:0b:74:d3: 44:4b:f1:bf:0e:1d:00:be:1e:c1:6f:2d:d9:da:7e: 6d:29:7d:17:a1:83:b4:0f:42:6d:ab:10:58:22:a8: b0:12:0c:4e:8d:b0:05:62:b8:82:ce:cb:43:bc:bd: 8c:bc:cc:de:00:94:b1:1d:b6:4c:47:46:cf:a4:38: 1e:51:45:7d:ed:bf:7f:58:0a:40:45:80:bc:fd:39: 7f:60:e8:de:2b:d4:d2:f1:32:3c:a3:f8:45:9a:37: 1c:3e:be:91:e1:52:f9:81:28:56:d7:58:7e:9f:0a: 48:a1:8c:a5:da:80:71:89:e3:d7:69:0e:f1:3d:7d: 6a:81:a8:ec:e7:2d:cd:99:ba:b0:fd:a0:46:ed:c3: 18:e3:14:8c:a6:e1:6f:58:10:21:07:a7:b5:30:e2: 81:cc:78:ff:2a:40:c3:75:13:7f:d4:60:53:df:80: 79:da:2e:f0:d0:8c:1d:51:8f:2c:22:e9:c5:2e:8e: a4:ad:c7:49:74:8b:3f:77:0d:9e:85:7d:c5:9b:d6: 29:bb:bd:16:8d:8e:de:49:67:c3:1e:83:d4:95:48: fc:07:4d:ad:40:06:5e:4e:f7:d0:5b:f0:12:76:84: 74:44:73:39:77:c3:4e:84:8b:8d:14:42:34:dd:a3: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:6F:07:EB:40:B6:16:89:CE:F7:6F:BC:B7:07:91:B5:E2:A1:80 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6e:14:a9:79:cf:6e:98:38:9f:71:81:56:03:fc:d7:10:9e: 49:6e:9f:a2:ad:b6:42:bc:dc:23:16:30:67:37:29:fc:77:2a: 76:a0:4c:e0:8f:e3:03:34:6d:61:f0:cd:37:00:1e:c3:46:45: 56:fd:05:d3:81:e7:4e:b7:3c:b6:86:96:1f:2a:50:07:42:47: 8e:e5:03:47:b5:5e:dd:86:2b:e6:93:8f:59:00:36:55:7d:78: 93:8e:c4:10:69:f8:92:b6:09:f7:91:b5:37:62:28:e3:76:b3: 59:5d:f6:96:66:aa:9c:f4:3e:39:a4:07:eb:8b:1b:62:63:5d: b3:2d:0d:6b:d4:c2:71:98:c7:68:ff:45:4f:6a:0e:2b:97:7a: 80:fc:aa:c5:75:e8:c3:24:3a:0d:41:15:19:3d:00:95:78:69: c3:e6:6c:c5:7a:eb:7e:c9:9f:a0:39:7c:9c:9a:db:0a:18:be: 07:18:30:6e:19:33:1a:61:69:9e:1e:48:b2:19:88:21:0e:5e: 49:af:5d:e7:31:21:4b:5f:cc:9a:62:58:f1:61:56:4e:1e:73: 46:2a:1f:43:3b:8c:b3:b1:7b:a2:3d:1c:4a:d5:9f:c3:1f:81: 75:e0:6e:ad:ce:ca:5f:4f:e4:18:79:12:fd:82:2b:6d:ac:2c: da:94:96:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUwNjE4MjIxMzQ1WhcNMjUwNjI1MjIxMzQ1WjAYMRYwFAYD VQQDEw02ODUzM2ExOS1jZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5tREXKUEsA5kfcLdNNES/G/Dh0Avh7Bby3Z2n5tKX0XoYO0D0JtqxBYIqiw EgxOjbAFYriCzstDvL2MvMzeAJSxHbZMR0bPpDgeUUV97b9/WApARYC8/Tl/YOje K9TS8TI8o/hFmjccPr6R4VL5gShW11h+nwpIoYyl2oBxiePXaQ7xPX1qgajs5y3N mbqw/aBG7cMY4xSMpuFvWBAhB6e1MOKBzHj/KkDDdRN/1GBT34B52i7w0IwdUY8s IunFLo6krcdJdIs/dw2ehX3Fm9Ypu70WjY7eSWfDHoPUlUj8B02tQAZeTvfQW/AS doR0RHM5d8NOhIuNFEI03aOM7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxHbwfr QLYWic73b7y3B5G14qGAMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2bhSpec9umDifcYFWA/zXEJ5Jbp+irbZCvNwjFjBnNyn8dyp2oEzg j+MDNG1h8M03AB7DRkVW/QXTgedOtzy2hpYfKlAHQkeO5QNHtV7dhivmk49ZADZV fXiTjsQQafiStgn3kbU3YijjdrNZXfaWZqqc9D45pAfrixtiY12zLQ1r1MJxmMdo /0VPag4rl3qA/KrFdejDJDoNQRUZPQCVeGnD5mzFeut+yZ+gOXycmtsKGL4HGDBu GTMaYWmeHkiyGYghDl5Jr13nMSFLX8yaYljxYVZOHnNGKh9DO4yzsXuiPRxK1Z/D H4F14G6tzspfT+QYeRL9gittrCzalJaY -----END CERTIFICATE-----Generated at Fri Jun 20 21:45:52 2025 by rpki-client