$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: HnM45Q7RZOfhtDu7gtVe6VXUgZoxH4KBBbc+H0p78PQ= Subject key identifier: D6:B0:1F:C3:FC:D9:B3:07:5A:D9:EF:47:0F:17:45:15:AB:1B:54:B5 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0C8C Signing time: Fri 08 Aug 2025 18:30:31 +0000 Manifest this update: Fri 08 Aug 2025 18:30:31 +0000 Manifest next update: Fri 15 Aug 2025 18:30:31 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: CWq56RzS4ETcZ0XzQ030jCYgSV2cga7ZhU6mLwqlXmk=) 2: A0632940737D11F091340126C4F9AE02.roa (hash: MgunnEkdhYyxCKv1PICJfgMQMsgL6bJvzf4zx6j7RFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Aug 8 18:30:31 2025 GMT Not After : Aug 15 18:30:31 2025 GMT Subject: CN=68964247-6d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ae:33:7c:58:89:9e:26:c7:80:dd:f5:c0:90: 1f:b2:be:4d:92:c9:f1:72:f3:f0:11:31:a9:ff:80: 40:44:1d:2b:5b:5a:c1:78:81:95:89:27:f9:58:0f: 90:50:85:b1:50:fd:9b:6b:c1:d6:98:c5:bc:d8:d4: 09:b9:69:ba:9c:0c:7e:5e:30:84:fe:dc:75:d8:e1: 19:56:60:ec:fa:67:f0:3e:dd:e3:a4:83:e5:53:d5: d0:9e:2e:38:ff:94:d4:eb:2e:e2:ec:ef:f8:1d:36: ea:4f:9e:67:67:93:4b:e9:f3:93:8f:c3:aa:8d:a7: e7:95:f0:46:32:95:3d:7e:d3:cd:61:10:23:6c:92: 52:2f:f3:19:ca:77:d7:d8:6b:91:65:78:10:06:28: 24:c1:b4:ea:39:37:c6:88:42:eb:cd:37:6a:11:56: 12:d8:1f:92:7c:b9:62:ef:e1:f7:17:1d:c0:67:24: 18:0f:69:fa:c6:d8:f5:c4:77:d0:8c:98:6b:12:e4: 29:88:fa:14:00:31:40:bc:d6:cf:55:87:36:ed:45: e1:10:55:34:60:1f:46:e5:ea:3e:1a:21:77:95:b2: 9b:7d:28:bc:8d:17:44:e5:37:52:9c:74:0a:91:b0: 01:ae:e5:5b:de:2c:bd:ba:f3:86:24:4f:99:8c:a3: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B0:1F:C3:FC:D9:B3:07:5A:D9:EF:47:0F:17:45:15:AB:1B:54:B5 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:df:54:c5:bb:ef:1c:c3:65:cc:8e:16:8a:d8:30:7f:c5: c6:26:d0:16:8f:a3:8a:2d:05:57:57:c3:df:36:25:e8:e4:37: cf:e6:73:85:ce:75:6a:6e:d5:24:fa:25:45:4b:34:bc:2f:1a: 42:5c:ab:bb:56:af:e9:d6:4b:73:ef:6e:47:e7:6f:e8:71:5c: 52:54:0a:8d:c4:ee:b7:9a:f2:96:4a:96:00:58:2b:09:37:9f: 79:ca:16:f7:7e:f6:e6:ef:40:4a:42:82:e0:34:31:bf:43:ea: 92:6e:cd:7d:5f:00:b7:d7:24:9d:18:0b:a2:a5:da:1f:9d:da: a0:0f:17:50:34:f2:66:a5:25:3b:54:b5:e7:69:30:01:58:01: a7:5d:28:12:3d:aa:f8:3c:8f:d3:20:28:bc:56:c1:ad:59:c7: c9:17:5c:86:73:5a:7d:83:d4:f6:43:65:40:42:f9:40:5d:b2: 9f:50:95:9b:93:a3:f4:05:4c:44:30:1b:9e:23:c4:b0:fc:d0: ec:57:9b:ec:c2:38:c9:ba:13:5c:53:de:56:05:53:ab:d1:25: 1a:22:c8:73:6b:32:5a:be:73:f4:4f:6d:de:d8:68:8b:ac:5b: d9:a1:45:9c:5c:df:56:c1:43:da:55:cd:73:a1:ec:e0:e9:d1: f3:c0:7e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjUwODA4MTgzMDMxWhcNMjUwODE1MTgzMDMxWjAYMRYwFAYD VQQDEw02ODk2NDI0Ny02ZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA264zfFiJnibHgN31wJAfsr5NksnxcvPwETGp/4BARB0rW1rBeIGViSf5WA+Q UIWxUP2ba8HWmMW82NQJuWm6nAx+XjCE/tx12OEZVmDs+mfwPt3jpIPlU9XQni44 /5TU6y7i7O/4HTbqT55nZ5NL6fOTj8OqjafnlfBGMpU9ftPNYRAjbJJSL/MZynfX 2GuRZXgQBigkwbTqOTfGiELrzTdqEVYS2B+SfLli7+H3Fx3AZyQYD2n6xtj1xHfQ jJhrEuQpiPoUADFAvNbPVYc27UXhEFU0YB9G5eo+GiF3lbKbfSi8jRdE5TdSnHQK kbABruVb3iy9uvOGJE+ZjKOmKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNawH8P8 2bMHWtnvRw8XRRWrG1S1MB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnv99UxbvvHMNlzI4Witgwf8XGJtAWj6OKLQVXV8PfNiXo5DfP5nOF znVqbtUk+iVFSzS8LxpCXKu7Vq/p1ktz725H52/ocVxSVAqNxO63mvKWSpYAWCsJ N595yhb3fvbm70BKQoLgNDG/Q+qSbs19XwC31ySdGAuipdofndqgDxdQNPJmpSU7 VLXnaTABWAGnXSgSPar4PI/TICi8VsGtWcfJF1yGc1p9g9T2Q2VAQvlAXbKfUJWb k6P0BUxEMBueI8Sw/NDsV5vswjjJuhNcU95WBVOr0SUaIshzazJavnP0T23e2GiL rFvZoUWcXN9WwUPaVc1zoezg6dHzwH5k -----END CERTIFICATE-----Generated at Sun Aug 10 18:58:55 2025 by rpki-client