$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft File: guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json) Hash identifier: oCdVHQZOVC5Lp9IN71N5Iqy3CgB/PQ0IxYUwgN4Om7Y= Subject key identifier: 87:C7:15:D5:F1:99:3E:06:EB:A0:2F:CD:DF:D9:68:E5:EB:91:12:0A Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 Certificate issuer: /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft Manifest number: CD Signing time: Mon 11 Aug 2025 05:54:13 +0000 Manifest this update: Mon 11 Aug 2025 05:54:13 +0000 Manifest next update: Mon 18 Aug 2025 05:54:13 +0000 Files and hashes: 1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: 2UiM8z67THjCHthJWoP+T3pygCxyGZa/Rl/KCS84Alc=) 2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6 Validity Not Before: Aug 11 05:54:13 2025 GMT Not After : Aug 18 05:54:13 2025 GMT Subject: CN=68998585-0f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:67:0d:40:e4:3d:af:5d:56:75:42:66:10: 14:3d:bc:43:03:02:45:a4:5a:bd:58:30:0b:95:51: 72:29:91:ea:2e:ab:be:7b:9c:82:6c:87:7e:13:ae: 15:4b:67:38:03:1e:9f:09:2a:3c:29:9d:d8:ee:74: 1b:a2:c7:c6:79:62:c6:1b:75:95:fc:12:dd:e6:85: c4:7a:9a:7a:fc:0c:80:02:24:fa:69:52:1e:6a:a5: 1f:df:b4:56:b1:16:c7:92:40:b8:cf:ed:2e:5d:b5: 1f:3a:a9:25:57:9c:8b:0d:86:76:55:2f:b5:60:85: d5:0f:44:7b:76:e1:9f:41:bb:84:a6:78:08:d7:5b: df:50:bd:ac:da:19:3e:9b:de:af:a5:82:1b:f7:08: ec:44:05:09:e1:bb:1b:06:83:e7:48:f1:0d:a5:fb: d9:2b:76:24:39:0d:cb:07:5f:1a:de:c3:d7:fa:a4: 23:7a:76:f9:8c:4d:e1:14:95:24:14:b0:1d:16:3c: 4d:b3:8d:1d:06:eb:a5:7e:6d:cc:5d:b6:74:0c:94: f3:c3:d3:06:bb:28:71:d2:e3:6e:b3:52:1d:2f:9f: f6:e2:2b:c9:0b:ba:fe:9a:eb:39:37:26:53:b0:6f: 26:c6:bb:bf:b2:f2:36:d9:67:b9:1c:5a:76:aa:bf: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:15:D5:F1:99:3E:06:EB:A0:2F:CD:DF:D9:68:E5:EB:91:12:0A X509v3 Authority Key Identifier: keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1c:3b:01:10:45:04:6b:87:fc:e9:8c:8e:d3:d9:06:ee:f0: 6c:51:9a:d1:d9:fd:74:6d:46:d9:50:30:14:5d:a2:3f:f4:bf: f6:8a:ad:ba:9a:a3:83:48:4f:09:9a:ef:b5:1d:75:d7:2a:ce: 3b:88:72:a1:ea:e9:7e:18:b5:75:e2:eb:53:82:7b:b0:eb:04: 43:8d:e2:b4:3d:5c:67:d4:5c:6a:96:c8:15:72:09:2b:38:61: a3:ab:54:8f:79:fe:af:e8:18:ac:84:3d:02:a5:c5:dd:1e:40: af:60:57:b3:b3:7d:37:78:a4:bc:51:72:cc:d3:1a:5a:6d:f7: f8:68:4c:57:3a:ed:5e:b8:2c:28:d9:b5:59:56:75:ba:b3:71: 84:4a:f2:4b:1a:7f:71:f7:3b:fa:0a:4d:d7:4e:85:ac:a1:e8: be:f7:46:e6:95:30:65:fc:33:52:69:6f:c5:a8:c4:f7:77:aa: 4b:b2:59:20:c6:5a:e8:f0:04:dd:f8:a1:0c:e2:f2:02:05:48: 7a:a2:2d:35:1f:2b:de:c3:e6:9c:e5:0f:34:98:25:bb:ae:4a: d1:65:7c:f9:0a:9b:c1:1e:98:31:f9:6a:04:b0:d1:79:53:b0: d8:22:bb:cf:fe:9d:21:18:da:43:cc:25:27:50:ed:ff:9c:22: 38:79:fe:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2 RDJFN0U0RTYwHhcNMjUwODExMDU1NDEzWhcNMjUwODE4MDU1NDEzWjAYMRYwFAYD VQQDEw02ODk5ODU4NS0wZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5dnDUDkPa9dVnVCZhAUPbxDAwJFpFq9WDALlVFyKZHqLqu+e5yCbId+E64V S2c4Ax6fCSo8KZ3Y7nQbosfGeWLGG3WV/BLd5oXEepp6/AyAAiT6aVIeaqUf37RW sRbHkkC4z+0uXbUfOqklV5yLDYZ2VS+1YIXVD0R7duGfQbuEpngI11vfUL2s2hk+ m96vpYIb9wjsRAUJ4bsbBoPnSPENpfvZK3YkOQ3LB18a3sPX+qQjenb5jE3hFJUk FLAdFjxNs40dBuulfm3MXbZ0DJTzw9MGuyhx0uNus1IdL5/24ivJC7r+mus5NyZT sG8mxru/svI22We5HFp2qr+iawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfHFdXx mT4G66Avzd/ZaOXrkRIKMB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J YUEzVEFOLV8taXR0TG41T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvHDsBEEUEa4f86YyO09kG7vBsUZrR2f10bUbZUDAUXaI/9L/2iq26 mqODSE8Jmu+1HXXXKs47iHKh6ul+GLV14utTgnuw6wRDjeK0PVxn1FxqlsgVcgkr OGGjq1SPef6v6BishD0CpcXdHkCvYFezs303eKS8UXLM0xpabff4aExXOu1euCwo 2bVZVnW6s3GESvJLGn9x9zv6Ck3XToWsoei+90bmlTBl/DNSaW/FqMT3d6pLslkg xlro8ATd+KEM4vICBUh6oi01Hyvew+ac5Q80mCW7rkrRZXz5CpvBHpgx+WoEsNF5 U7DYIrvP/p0hGNpDzCUnUO3/nCI4ef5i -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:12 2025 by rpki-client