$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: ry6vAI6hbH/3e3g3wgiqieHrZmns7JqtwK0t9U/Au9Y= Subject key identifier: 7C:9B:DC:73:A9:23:A8:DA:C3:7A:37:9B:B8:4F:20:95:1C:B9:3B:C7 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 0692 Signing time: Tue 12 Aug 2025 22:41:00 +0000 Manifest this update: Tue 12 Aug 2025 22:40:59 +0000 Manifest next update: Tue 19 Aug 2025 22:40:59 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: +xYLurpaozjkmysGdgdFZDjdYsNW8XP4DPJ0GQVNU88=) 2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Aug 12 22:40:59 2025 GMT Not After : Aug 19 22:40:59 2025 GMT Subject: CN=689bc2fb-a2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:c9:1b:bb:b8:01:7a:57:85:77:90:e5:13: 3a:26:f6:7f:dc:95:0b:23:f3:e3:0e:a7:6f:f1:8f: 34:f5:98:29:0e:da:75:97:63:df:2a:d9:22:96:9f: 8b:68:dd:44:73:c8:18:34:cf:05:60:d8:94:78:62: c7:53:0e:fb:85:7d:85:c8:91:bf:9e:f4:ad:57:55: d4:f1:d0:f1:39:07:a3:1a:e1:ce:cd:3d:ed:2a:c9: 9d:23:6f:fb:d8:89:20:3d:79:95:f8:f3:92:01:8a: 9e:11:57:2e:c3:b3:97:86:1b:96:a1:2b:74:c9:56: 3c:f6:99:de:e2:70:d2:e2:4f:88:bc:b5:51:a0:35: f6:d2:47:38:18:b1:51:3f:5d:a0:aa:6d:97:b0:17: fd:3e:f6:64:d9:fe:82:e9:6c:a1:81:d4:00:cd:0b: 55:4e:cc:d9:c5:9b:bf:f4:05:f5:a6:20:fc:24:54: 64:df:d0:a5:d8:2b:bd:be:d3:a1:ff:cc:80:1a:9a: 6c:e1:20:69:81:1f:42:37:b8:3e:4b:b8:f7:45:06: 2f:6d:7c:46:33:01:1e:95:c3:f7:97:3a:34:37:a0: 4a:6a:99:9a:24:35:b9:24:ce:d5:2e:b1:eb:d0:54: 6e:5f:e0:50:ca:f5:f6:73:ca:de:1d:72:53:0b:4c: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9B:DC:73:A9:23:A8:DA:C3:7A:37:9B:B8:4F:20:95:1C:B9:3B:C7 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:60:54:6b:87:9d:12:aa:7a:bc:92:59:17:99:e6:09:a6:25: fb:99:0f:e8:33:fc:65:e1:2c:5f:eb:62:fc:2e:32:58:d4:e6: 4c:b8:3a:59:75:16:75:ec:f6:3c:26:5b:e4:41:e4:f0:d4:8a: c1:df:d0:cf:38:a3:3e:0a:c5:f0:20:1a:42:13:99:a0:24:35: 93:42:7e:2d:16:21:1f:3b:a6:64:b9:b5:e9:80:4c:2a:a8:e2: 7c:23:10:26:5c:df:4e:2c:8b:fd:22:bd:98:bd:4a:bc:70:b4: df:aa:cd:e1:7e:59:37:1b:8a:1d:04:fb:ea:6e:8b:81:19:82: 89:57:0a:53:e2:08:34:f6:95:5c:a9:00:ce:39:0f:77:e3:85: ef:60:3f:1e:23:32:29:62:c2:e4:88:02:3b:97:e5:2a:84:34: f0:a4:d0:ea:bd:51:3b:81:8e:95:7a:92:3e:7e:80:07:6f:02: f8:df:bf:88:75:da:10:a8:36:4c:e5:12:95:65:73:c1:f7:42: f0:15:88:a6:64:06:db:e4:ee:9a:fe:d7:6a:31:bd:6e:4d:60: a7:79:15:11:74:ed:c1:97:28:b1:bf:72:00:00:88:f3:b9:84: 76:ce:34:a3:72:0f:a5:be:12:64:13:1c:1f:11:6f:6a:9a:39: 22:62:3e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUwODEyMjI0MDU5WhcNMjUwODE5MjI0MDU5WjAYMRYwFAYD VQQDEw02ODliYzJmYi1hMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytTJG7u4AXpXhXeQ5RM6JvZ/3JULI/PjDqdv8Y809ZgpDtp1l2PfKtkilp+L aN1Ec8gYNM8FYNiUeGLHUw77hX2FyJG/nvStV1XU8dDxOQejGuHOzT3tKsmdI2/7 2IkgPXmV+POSAYqeEVcuw7OXhhuWoSt0yVY89pne4nDS4k+IvLVRoDX20kc4GLFR P12gqm2XsBf9PvZk2f6C6WyhgdQAzQtVTszZxZu/9AX1piD8JFRk39Cl2Cu9vtOh /8yAGpps4SBpgR9CN7g+S7j3RQYvbXxGMwEelcP3lzo0N6BKapmaJDW5JM7VLrHr 0FRuX+BQyvX2c8reHXJTC0z9kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyb3HOp I6jaw3o3m7hPIJUcuTvHMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzYFRrh50Sqnq8klkXmeYJpiX7mQ/oM/xl4Sxf62L8LjJY1OZMuDpZ dRZ17PY8JlvkQeTw1IrB39DPOKM+CsXwIBpCE5mgJDWTQn4tFiEfO6ZkubXpgEwq qOJ8IxAmXN9OLIv9Ir2YvUq8cLTfqs3hflk3G4odBPvqbouBGYKJVwpT4gg09pVc qQDOOQ9344XvYD8eIzIpYsLkiAI7l+UqhDTwpNDqvVE7gY6VepI+foAHbwL437+I ddoQqDZM5RKVZXPB90LwFYimZAbb5O6a/tdqMb1uTWCneRURdO3Blyixv3IAAIjz uYR2zjSjcg+lvhJkExwfEW9qmjkiYj5X -----END CERTIFICATE-----Generated at Wed Aug 13 05:52:49 2025 by rpki-client