$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: TPa7NmhhZAf5mEoBQ7A3nKk/yxI4c/G7bXYtfdQIbT0= Subject key identifier: 3D:BD:21:B4:E7:21:BF:71:24:12:10:4F:77:8E:5B:E5:45:68:F9:5D Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 065B Signing time: Thu 24 Apr 2025 22:16:31 +0000 Manifest this update: Thu 24 Apr 2025 22:16:31 +0000 Manifest next update: Thu 01 May 2025 22:16:31 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: cX9A2yl1O/DypUSzk8C6SRLep5mczv+T6b1dHKpN2q0=) 2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Apr 24 22:16:31 2025 GMT Not After : May 1 22:16:31 2025 GMT Subject: CN=680ab83f-a147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:cd:4a:91:14:b2:81:b5:f8:8e:22:65:42: a8:b5:64:95:21:e6:35:47:04:e5:44:bc:ea:ed:00: ab:61:d3:61:6a:24:c2:de:df:66:45:3a:1c:31:9d: 1d:8f:bd:7a:cf:f5:17:56:c5:7d:6f:91:39:a4:52: bc:1c:69:4e:40:48:2e:3f:9a:3b:92:16:50:92:bb: 40:bf:7a:52:84:83:89:14:12:24:b9:ee:a5:72:dc: e2:f6:4b:ba:71:98:cd:e5:40:e5:45:a2:59:11:e8: c7:52:1e:8b:6c:9c:f4:ff:38:2c:d2:26:e5:d4:90: 62:6a:34:92:3a:e7:49:ed:89:e6:aa:52:60:77:8f: b0:99:20:7d:f8:81:73:ac:2f:3f:df:e9:d8:4a:85: 16:aa:1a:fe:4c:48:9a:83:86:d2:a4:14:2a:52:a0: af:20:35:3d:29:2d:d9:be:ac:11:88:e8:f3:1d:f9: ee:d5:74:c9:89:08:04:3d:24:d2:fa:da:52:9c:30: 66:03:56:d1:c0:89:39:20:a6:df:1b:2a:5f:83:b9: d9:1b:8c:94:56:d5:56:95:f2:0f:9c:58:af:2b:2c: 1c:92:95:87:cc:70:54:a2:d5:76:26:ff:5e:c0:24: af:cd:66:8c:1a:58:d3:d0:4a:5d:cf:f4:1a:0c:35: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BD:21:B4:E7:21:BF:71:24:12:10:4F:77:8E:5B:E5:45:68:F9:5D X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a4:ac:a6:e9:b3:ac:28:f0:c9:fc:42:90:94:2c:fa:00:a6: 65:83:25:7a:11:4c:72:a6:4d:4a:85:2b:76:83:d1:0f:e9:ed: 36:bd:49:63:b4:85:dd:ea:0c:4b:c0:d6:6d:b0:52:ee:23:66: 8f:81:cd:68:14:85:84:16:57:09:7f:7a:f9:1b:7d:72:9d:62: d4:2e:6e:14:cf:45:93:57:fb:6b:b7:0d:65:a1:68:1f:e3:dc: 75:35:76:13:24:c9:bf:1c:1c:f0:50:9e:06:9d:38:87:c9:7b: 9a:00:42:ba:ff:63:90:80:55:c2:b4:6e:83:c3:ee:81:80:47: 67:61:8d:e5:6b:3b:5d:67:80:76:0b:fc:55:63:69:32:2c:e2: 1f:88:bf:50:89:cf:83:3d:66:84:bd:a2:c3:b0:e3:58:5b:61: 50:05:75:c7:6b:30:ff:fd:98:64:59:2f:45:eb:fb:c4:8e:ce: 8c:88:c6:ae:20:d5:66:eb:75:eb:48:97:7d:d0:47:25:f8:ce: b1:e5:61:8d:e6:dc:26:55:ce:99:07:8e:ee:f2:36:f4:fa:98: c4:70:58:24:f5:91:8f:86:34:1b:ad:8c:5c:9e:7b:a4:13:8d: 0d:bf:b5:c3:e0:d4:20:6c:9d:76:f9:ea:03:f6:b3:54:02:4f: 7d:31:04:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUwNDI0MjIxNjMxWhcNMjUwNTAxMjIxNjMxWjAYMRYwFAYD VQQDEw02ODBhYjgzZi1hMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L7NSpEUsoG1+I4iZUKotWSVIeY1RwTlRLzq7QCrYdNhaiTC3t9mRTocMZ0d j716z/UXVsV9b5E5pFK8HGlOQEguP5o7khZQkrtAv3pShIOJFBIkue6lctzi9ku6 cZjN5UDlRaJZEejHUh6LbJz0/zgs0ibl1JBiajSSOudJ7YnmqlJgd4+wmSB9+IFz rC8/3+nYSoUWqhr+TEiag4bSpBQqUqCvIDU9KS3ZvqwRiOjzHfnu1XTJiQgEPSTS +tpSnDBmA1bRwIk5IKbfGypfg7nZG4yUVtVWlfIPnFivKywckpWHzHBUotV2Jv9e wCSvzWaMGljT0Epdz/QaDDWSrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD29IbTn Ib9xJBIQT3eOW+VFaPldMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgpKym6bOsKPDJ/EKQlCz6AKZlgyV6EUxypk1KhSt2g9EP6e02vUlj tIXd6gxLwNZtsFLuI2aPgc1oFIWEFlcJf3r5G31ynWLULm4Uz0WTV/trtw1loWgf 49x1NXYTJMm/HBzwUJ4GnTiHyXuaAEK6/2OQgFXCtG6Dw+6BgEdnYY3laztdZ4B2 C/xVY2kyLOIfiL9Qic+DPWaEvaLDsONYW2FQBXXHazD//ZhkWS9F6/vEjs6MiMau INVm63XrSJd90Ecl+M6x5WGN5twmVc6ZB47u8jb0+pjEcFgk9ZGPhjQbrYxcnnuk E40Nv7XD4NQgbJ12+eoD9rNUAk99MQT1 -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:38 2025 by rpki-client