$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: hPyah9MdE/dWvrfQca5sCFGXCWnBMTjfD1SgqpcNy/s= Subject key identifier: A9:6B:53:EB:9A:09:61:B3:75:20:7A:D3:AA:39:D5:44:2A:C9:B0:C0 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 06C0 Signing time: Sun 02 Nov 2025 22:10:53 +0000 Manifest this update: Sun 02 Nov 2025 22:10:52 +0000 Manifest next update: Sun 09 Nov 2025 22:10:52 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: BFsWChs77WdKbQ4Lqi0XeH6nLECwDveIG0BrudlqCJU=) 2: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: hEey+djFvYlE1JXaWprdcTf+AvgTaP0qwoFIGuxytf8=) 3: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: IfBzr9sVSOqGORxPOUkKKUq6yH0SHvi80/oQFSYNxqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Nov 2 22:10:52 2025 GMT Not After : Nov 9 22:10:52 2025 GMT Subject: CN=6907d6ec-a9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:5d:f3:29:78:5f:09:9b:c2:78:b0:6c:56: b9:37:75:27:d2:3c:70:c0:8b:cc:b9:f1:3e:c3:75: 02:ce:07:24:01:06:a4:e2:be:80:d7:d1:0b:cd:d2: 5d:c2:bc:b3:9d:10:45:2a:99:37:9e:bd:ed:82:02: f3:2c:03:8e:8b:14:0d:73:eb:4b:02:b3:fb:03:77: 69:17:fa:9c:34:2a:7d:26:0a:a8:ff:21:70:26:f7: b4:d0:08:16:93:09:78:c2:8b:fa:65:bb:02:59:d0: 66:8a:4f:ec:4c:c1:9f:4b:fa:72:a7:73:8d:0b:40: 4c:4b:c0:79:f9:04:85:68:f2:fc:3a:bb:97:84:ee: 6d:38:98:ed:ca:ad:8e:15:88:79:64:30:cb:9a:86: 4e:b0:21:bd:44:1a:ea:f0:1b:e2:02:f3:ad:e4:b5: d6:8e:d2:d8:c7:c8:6f:ab:46:95:4b:ff:a6:28:20: 6d:f9:41:cb:f7:f7:50:22:c7:17:74:73:35:c0:c5: 56:5d:57:46:08:73:1c:48:eb:2a:54:c3:42:97:4d: f6:e3:7b:07:78:cf:de:80:60:8d:70:c9:0d:a3:3f: 09:6c:2b:d2:08:06:0c:d7:4a:8d:4d:f0:d3:a1:54: ea:81:58:f9:d7:fd:40:17:a0:ed:6b:ec:67:96:6c: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6B:53:EB:9A:09:61:B3:75:20:7A:D3:AA:39:D5:44:2A:C9:B0:C0 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:de:8c:64:61:64:79:ce:2f:e7:cf:b0:3a:38:0a:c1:e3:d7: d6:f9:cf:4e:a8:43:92:98:7d:e2:51:85:b4:63:41:60:c6:46: 86:7a:7b:4b:4a:18:76:5f:ef:44:c6:c2:ad:22:82:7d:04:67: f8:d4:bf:43:53:6f:d9:8f:12:79:b4:bf:a8:ab:44:ec:f6:cd: 6a:cf:07:92:9a:df:1b:c5:94:9b:92:c4:b9:5a:ae:92:78:ac: 86:ec:4d:13:68:78:3f:a8:43:d9:4e:f8:0f:60:7d:8a:20:5b: 74:46:54:24:ff:ca:53:f4:db:37:e3:4e:d7:32:bb:f4:22:d3: b2:23:3c:7f:d7:64:13:8d:32:c6:c6:34:fa:ae:91:46:63:6f: 3f:d1:1c:0f:d1:cd:b5:e2:bd:6d:70:1d:35:34:b6:e5:34:96: 27:a9:63:99:56:43:a9:9c:31:dc:64:a3:e2:cd:31:77:19:e3: 11:17:ed:5b:70:27:f6:79:27:ea:9b:a4:0c:7a:65:68:fc:88: a0:08:5d:22:46:95:d0:07:e7:33:36:2f:4c:92:25:1d:c0:19: f6:ac:9a:c4:ff:38:0b:48:4f:59:64:a8:0b:97:25:bc:fe:5f: 1c:4c:0f:14:72:25:13:a9:05:cc:2a:64:4a:e0:2b:ce:9e:99: 09:0a:a3:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUxMTAyMjIxMDUyWhcNMjUxMTA5MjIxMDUyWjAYMRYwFAYD VQQDEw02OTA3ZDZlYy1hOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqhd8yl4XwmbwniwbFa5N3Un0jxwwIvMufE+w3UCzgckAQak4r6A19ELzdJd wryznRBFKpk3nr3tggLzLAOOixQNc+tLArP7A3dpF/qcNCp9Jgqo/yFwJve00AgW kwl4wov6ZbsCWdBmik/sTMGfS/pyp3ONC0BMS8B5+QSFaPL8OruXhO5tOJjtyq2O FYh5ZDDLmoZOsCG9RBrq8BviAvOt5LXWjtLYx8hvq0aVS/+mKCBt+UHL9/dQIscX dHM1wMVWXVdGCHMcSOsqVMNCl03243sHeM/egGCNcMkNoz8JbCvSCAYM10qNTfDT oVTqgVj51/1AF6Dta+xnlmxZZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlrU+ua CWGzdSB606o51UQqybDAMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ3oxkYWR5zi/nz7A6OArB49fW+c9OqEOSmH3iUYW0Y0FgxkaGentL Shh2X+9ExsKtIoJ9BGf41L9DU2/ZjxJ5tL+oq0Ts9s1qzweSmt8bxZSbksS5Wq6S eKyG7E0TaHg/qEPZTvgPYH2KIFt0RlQk/8pT9Ns3407XMrv0ItOyIzx/12QTjTLG xjT6rpFGY28/0RwP0c214r1tcB01NLblNJYnqWOZVkOpnDHcZKPizTF3GeMRF+1b cCf2eSfqm6QMemVo/IigCF0iRpXQB+czNi9MkiUdwBn2rJrE/zgLSE9ZZKgLlyW8 /l8cTA8UciUTqQXMKmRK4CvOnpkJCqM4 -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:15 2025 by rpki-client