$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft File: GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json) Hash identifier: Shv3ayeKlwpPMZxpH9coeREr8Xy1l+XmnjEfI0OwpeA= Subject key identifier: 6A:35:3F:9C:A2:F7:63:42:34:9A:99:72:04:03:56:AC:D4:C4:2D:B4 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft Manifest number: 0C49 Signing time: Thu 24 Apr 2025 18:17:49 +0000 Manifest this update: Thu 24 Apr 2025 18:17:48 +0000 Manifest next update: Thu 01 May 2025 18:17:48 +0000 Files and hashes: 1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: W87LOkmZSyTC/dT/8ZvFTHKKE8YGszzNBXhOKkP85AE=) 2: 9A19DA76006E11EAA4A23169C4F9AE02.roa (hash: xXy4YLIIWobgpWskblv4qsKYOQzH1cx/NBVAIabfj3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Apr 24 18:17:48 2025 GMT Not After : May 1 18:17:48 2025 GMT Subject: CN=680a804c-9cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:e1:16:e8:d6:a4:7e:e7:40:7b:01:77:86: ab:0f:02:bb:44:55:36:82:df:f1:8f:8d:c1:58:7b: 2e:32:0f:7f:3c:b6:c8:f6:8a:5e:44:10:d0:a0:9d: de:04:fb:0d:44:ee:b8:53:e4:1a:fd:b5:ab:36:0b: 5b:61:ec:1d:d1:43:fb:4b:fe:9d:d0:e0:04:4f:0e: d3:7d:43:98:0f:a1:cb:50:93:57:ed:bd:d2:2e:a4: 50:6d:ef:ee:24:2b:a4:99:41:0d:21:49:20:87:67: fb:92:cf:62:9c:81:cc:99:24:6f:79:5a:fa:ce:00: 69:36:76:02:ed:49:31:1b:d1:d5:55:75:92:0a:ea: 00:2a:77:2c:92:da:95:a1:52:a7:d6:91:89:01:0c: 61:d0:7b:46:80:8f:44:bc:0b:2f:02:87:54:47:f0: 09:31:19:80:7f:04:fd:0e:ea:ec:97:33:ee:28:d4: 25:c5:fb:f5:e6:8c:40:df:5b:51:e2:c4:02:cd:d3: 5c:20:a1:15:07:78:34:6f:48:d5:52:1e:e7:b5:a3: 9a:95:72:c3:22:cf:06:87:23:f4:03:98:a0:79:ec: a6:e7:8c:3c:9e:4a:49:be:37:26:fc:8e:a3:a5:86: 95:0e:aa:9b:8c:53:89:3b:9f:37:78:e4:05:62:59: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:3F:9C:A2:F7:63:42:34:9A:99:72:04:03:56:AC:D4:C4:2D:B4 X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5a:73:8a:c7:8d:8e:d9:dc:32:b1:9d:33:4a:d0:2b:68:0b: ac:8e:b3:b8:6c:ac:35:c4:d0:da:8b:d6:60:7e:0a:c8:09:b5: b1:2f:60:52:f6:17:61:f2:17:44:ee:04:6b:d7:91:d1:b9:9d: 1b:cc:45:57:1e:f4:35:2e:7a:5d:12:1d:66:b1:90:cf:c3:f2: 91:16:dd:56:7b:04:fb:de:92:f0:01:ba:ac:c3:3d:d7:33:07: 82:c8:65:dd:6e:3f:8a:41:54:6e:ff:51:d1:c6:f3:22:17:d4: a8:4e:17:c1:79:9f:11:b7:d1:41:0b:d8:42:d7:98:a8:41:c3: 77:b8:ef:bf:2d:ce:00:b5:a3:b6:3b:42:8a:e9:5d:c2:1b:58: a1:75:d8:d1:67:52:c1:85:ac:84:c3:b4:1d:fb:29:b4:88:19: 83:3f:78:38:c4:0c:68:8d:a6:3d:55:c1:c5:25:b2:93:05:a1: f4:25:c7:c5:15:f1:66:1d:46:2e:02:40:5c:cd:cb:87:c7:7f: 9a:60:26:ee:a7:a2:7d:92:2f:58:0c:a7:f3:86:ff:f1:27:21: 7d:bf:86:67:99:04:13:7f:a2:b8:01:3d:ad:18:49:83:26:e3: 6d:57:27:34:6f:30:51:f0:25:d2:2f:33:cf:05:79:ef:00:1d: 21:ec:2f:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjUwNDI0MTgxNzQ4WhcNMjUwNTAxMTgxNzQ4WjAYMRYwFAYD VQQDEw02ODBhODA0Yy05Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lnhFujWpH7nQHsBd4arDwK7RFU2gt/xj43BWHsuMg9/PLbI9opeRBDQoJ3e BPsNRO64U+Qa/bWrNgtbYewd0UP7S/6d0OAETw7TfUOYD6HLUJNX7b3SLqRQbe/u JCukmUENIUkgh2f7ks9inIHMmSRveVr6zgBpNnYC7UkxG9HVVXWSCuoAKncsktqV oVKn1pGJAQxh0HtGgI9EvAsvAodUR/AJMRmAfwT9DurslzPuKNQlxfv15oxA31tR 4sQCzdNcIKEVB3g0b0jVUh7ntaOalXLDIs8GhyP0A5igeeym54w8nkpJvjcm/I6j pYaVDqqbjFOJO583eOQFYlnRuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo1P5yi 92NCNJqZcgQDVqzUxC20MB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYxNS80MjAwQzlFNjAwNkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJE eXFVc2pzU3dqRVRLZzZZcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkWnOKx42O2dwysZ0zStAraAusjrO4bKw1xNDai9ZgfgrICbWxL2BS 9hdh8hdE7gRr15HRuZ0bzEVXHvQ1LnpdEh1msZDPw/KRFt1WewT73pLwAbqswz3X MweCyGXdbj+KQVRu/1HRxvMiF9SoThfBeZ8Rt9FBC9hC15ioQcN3uO+/Lc4AtaO2 O0KK6V3CG1ihddjRZ1LBhayEw7Qd+ym0iBmDP3g4xAxojaY9VcHFJbKTBaH0JcfF FfFmHUYuAkBczcuHx3+aYCbup6J9ki9YDKfzhv/xJyF9v4ZnmQQTf6K4AT2tGEmD JuNtVyc0bzBR8CXSLzPPBXnvAB0h7C+H -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:01 2025 by rpki-client