$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft File: GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json) Hash identifier: Y+9s0u5iR8XRx4dNopJyqbiq/nXp+Jh55XWy+yh2dp4= Subject key identifier: A2:DA:74:64:36:C2:70:D1:28:2F:4C:BF:7F:6B:04:3D:82:9B:B4:98 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0E52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft Manifest number: 0E3D Signing time: Sat 14 Jun 2025 17:41:49 +0000 Manifest this update: Sat 14 Jun 2025 17:41:49 +0000 Manifest next update: Sat 21 Jun 2025 17:41:49 +0000 Files and hashes: 1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: ly8e9DlfSn3+LDRocXOmMEb62IzM1SimG2Yx2WeErOM=) 2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: CT18OIINBeCDMFBp7n4N+HeNhsnS3K8XZSLl17zRvqs=) 3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: xWLJsIOACYVl3HGPv+BGgFGrPw1FmHr3Q1PpP41xefE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3666 (0xe52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Jun 14 17:41:49 2025 GMT Not After : Jun 21 17:41:49 2025 GMT Subject: CN=684db45d-ac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:82:b3:cc:e6:69:bf:8c:05:27:a5:ac:9c:11: 17:ad:dd:d2:4a:41:27:43:1a:5b:17:77:64:14:87: 26:09:68:be:e1:a7:0a:28:6e:58:af:7f:18:0a:56: 21:f7:dd:29:0e:07:1b:b6:18:44:04:32:4e:2f:38: 1d:f5:69:60:0f:cb:b4:82:23:40:dc:18:a2:09:58: a6:80:15:34:2d:e3:6a:a8:f7:87:e7:1d:c7:45:d8: 27:5f:8a:3a:47:89:3c:ff:e0:6c:3d:ec:18:5d:d7: bc:47:cc:00:b0:87:40:d8:8b:d2:36:ab:59:24:e1: 70:32:96:f5:bb:10:f4:1c:09:86:7d:9a:20:42:b7: 55:ac:44:67:65:59:c9:9d:b5:35:8c:5c:7e:23:ed: 40:ff:fc:b1:28:c1:31:3e:f7:2b:04:ea:60:6d:7d: 27:bc:bd:f7:9c:46:91:67:e2:6a:95:ce:f1:05:cb: e5:88:91:46:e6:20:97:7c:57:af:c7:9e:aa:7e:e2: ae:12:95:d2:75:4b:b0:e4:79:d2:98:40:73:9c:78: 16:07:ec:8d:95:52:6d:77:ea:3e:99:a5:3e:da:f0: 4c:25:7b:b1:e3:af:27:bd:55:87:38:10:ef:70:3d: a1:e3:69:ba:7a:fb:70:56:e6:d3:92:47:6e:0c:23: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:74:64:36:C2:70:D1:28:2F:4C:BF:7F:6B:04:3D:82:9B:B4:98 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:40:c1:66:b0:ec:7f:7e:18:3c:6e:68:ae:c7:c1:2e:19:37: 6e:c7:12:f6:37:11:37:d8:2c:7d:7f:82:da:84:90:54:21:86: 6c:a4:63:95:e8:75:c1:49:47:39:97:a4:d5:7c:34:ac:03:de: ca:19:0e:e7:df:a3:55:8c:df:d0:f4:23:f0:14:97:f9:0d:18: 2e:4e:5e:4a:78:87:35:93:82:df:4c:1a:2e:8e:34:f6:82:72: 6d:f0:45:f0:a9:c4:39:e3:ce:80:23:25:0c:cb:36:59:aa:31: 59:16:96:3e:94:63:06:cb:b8:fe:43:c7:c6:35:10:30:56:b6: 9a:41:06:e8:10:3f:ea:71:8d:49:6a:7c:ad:55:d6:60:05:d5: b3:59:c5:c7:70:56:6e:b9:ed:6c:4e:81:55:c7:ba:63:85:31: 80:bf:7f:36:f0:98:f1:cb:fa:2f:88:18:17:4e:60:96:ae:50: 7e:2f:b4:5d:07:ed:54:1a:8a:27:3c:9b:e5:33:2b:f4:c0:92: 3d:31:ac:a2:1d:50:52:de:d7:09:d9:68:74:ec:65:5a:89:8c: fc:cb:a9:83:81:9d:3f:fa:b3:e7:be:a3:d2:eb:ed:7f:6a:3c: 2a:5f:28:8c:0a:f6:29:31:d8:bf:06:40:25:c3:87:63:ec:46: b4:f5:37:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjUwNjE0MTc0MTQ5WhcNMjUwNjIxMTc0MTQ5WjAYMRYwFAYD VQQDEw02ODRkYjQ1ZC1hYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IKzzOZpv4wFJ6WsnBEXrd3SSkEnQxpbF3dkFIcmCWi+4acKKG5Yr38YClYh 990pDgcbthhEBDJOLzgd9WlgD8u0giNA3BiiCVimgBU0LeNqqPeH5x3HRdgnX4o6 R4k8/+BsPewYXde8R8wAsIdA2IvSNqtZJOFwMpb1uxD0HAmGfZogQrdVrERnZVnJ nbU1jFx+I+1A//yxKMExPvcrBOpgbX0nvL33nEaRZ+Jqlc7xBcvliJFG5iCXfFev x56qfuKuEpXSdUuw5HnSmEBznHgWB+yNlVJtd+o+maU+2vBMJXux468nvVWHOBDv cD2h42m6evtwVubTkkduDCO/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLadGQ2 wnDRKC9Mv39rBD2Cm7SYMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtQMFmsOx/fhg8bmiux8EuGTduxxL2NxE32Cx9f4LahJBUIYZspGOV 6HXBSUc5l6TVfDSsA97KGQ7n36NVjN/Q9CPwFJf5DRguTl5KeIc1k4LfTBoujjT2 gnJt8EXwqcQ5486AIyUMyzZZqjFZFpY+lGMGy7j+Q8fGNRAwVraaQQboED/qcY1J anytVdZgBdWzWcXHcFZuue1sToFVx7pjhTGAv3828Jjxy/oviBgXTmCWrlB+L7Rd B+1UGoonPJvlMyv0wJI9MayiHVBS3tcJ2Wh07GVaiYz8y6mDgZ0/+rPnvqPS6+1/ ajwqXyiMCvYpMdi/BkAlw4dj7Ea09TcO -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:37 2025 by rpki-client