$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: 2Sxs5RK0ANXdkN1TE7QOyYYCQwgWSRDVMB4fM5gItvo= Subject key identifier: 0F:5C:9A:CD:97:37:62:7F:1D:90:63:87:FC:30:3F:B1:35:71:F2:13 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 196B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 1F17 Signing time: Tue 12 Aug 2025 16:29:31 +0000 Manifest this update: Tue 12 Aug 2025 16:29:30 +0000 Manifest next update: Tue 19 Aug 2025 16:29:30 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: goLiCuhkDfgjYZoge8MjEYPI2XS9azvXVY0a2EECFeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6507 (0x196b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: Aug 12 16:29:30 2025 GMT Not After : Aug 19 16:29:30 2025 GMT Subject: CN=689b6bea-b6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:6e:0a:91:45:cd:ec:d4:dc:4e:ac:0f:e2: 9f:a0:b4:2b:7b:95:53:cf:0f:2d:d1:0c:28:06:18: ba:ee:5a:76:84:1b:94:f2:98:6d:29:38:60:e7:ad: 96:e7:7c:5f:2d:ee:f2:ba:db:62:5c:28:f3:a0:d5: 01:73:d0:8c:ac:0e:a1:e4:d0:55:77:8d:9e:4e:a3: db:78:c4:11:e6:14:af:ac:09:11:18:05:67:41:71: 5f:8b:ec:63:0e:99:5e:4a:53:9c:f7:db:e3:dc:e4: d2:55:f9:b3:18:ac:46:a2:77:6b:c8:c8:17:5e:f7: 68:7d:31:06:ae:39:e7:0d:b5:f5:54:b8:71:0e:7b: 12:7e:2a:25:ab:8f:db:55:43:ec:8e:4a:57:ba:58: aa:fa:81:37:03:59:54:f8:10:3e:e8:fb:1f:8e:ae: 82:ff:e2:e8:3e:e9:f9:cd:a4:b2:87:8e:f8:e8:9f: 6c:24:1e:45:f3:c7:cd:84:98:39:f7:2f:0c:b0:56: 40:4a:32:09:34:00:80:65:76:c8:81:af:87:a7:24: 84:72:ae:4a:ef:7c:3c:ca:20:b0:44:f7:93:71:ce: 47:b5:7b:ab:4d:0c:dc:ad:3a:22:9e:ef:08:aa:60: e6:fe:13:36:88:ac:47:22:fb:7d:28:06:a4:0a:4d: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5C:9A:CD:97:37:62:7F:1D:90:63:87:FC:30:3F:B1:35:71:F2:13 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:72:0d:3a:27:4c:83:21:00:1c:5a:15:78:66:0e:d1:01:de: 4c:c8:f5:56:71:01:87:72:c2:f9:de:d5:b3:d7:cf:84:cb:7a: 01:56:8f:60:4d:83:68:b1:c8:b6:3d:ed:28:2a:6d:dd:7b:56: 3d:02:d9:25:df:6a:90:98:db:aa:06:a6:94:64:15:fa:49:7f: 57:49:b7:3b:23:1a:23:1e:8b:a7:61:ad:8a:30:9c:15:d3:87: 13:e2:a1:60:39:38:d9:83:16:01:ac:44:1f:52:0f:36:7a:88: ba:a8:f4:14:bc:9f:bd:ee:80:1f:fb:bf:11:17:a5:f2:16:22: 86:63:6b:3b:5d:15:01:83:90:7f:2f:0c:c8:44:3f:de:e1:7d: 91:04:73:ae:3f:24:4e:bf:27:9f:a1:9b:2b:5c:15:eb:f6:d1: 43:5c:62:7d:f8:b3:eb:46:96:2e:f4:9b:25:e8:b0:ec:94:56: b6:0e:4d:be:20:7e:70:66:1e:ca:26:14:60:f7:8a:53:e8:51: 8c:ac:10:9f:01:32:89:93:02:19:0e:8b:aa:71:a4:6a:f9:04: 9d:a6:b6:32:66:09:a5:4e:19:f5:07:9a:61:10:df:d0:3f:10: 77:1a:36:c1:0f:84:08:71:26:2d:15:73:6a:a0:3b:1d:80:dc: 32:45:9d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjUwODEyMTYyOTMwWhcNMjUwODE5MTYyOTMwWjAYMRYwFAYD VQQDEw02ODliNmJlYS1iNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlARuCpFFzezU3E6sD+KfoLQre5VTzw8t0QwoBhi67lp2hBuU8phtKThg562W 53xfLe7yuttiXCjzoNUBc9CMrA6h5NBVd42eTqPbeMQR5hSvrAkRGAVnQXFfi+xj DpleSlOc99vj3OTSVfmzGKxGondryMgXXvdofTEGrjnnDbX1VLhxDnsSfiolq4/b VUPsjkpXuliq+oE3A1lU+BA+6Psfjq6C/+LoPun5zaSyh4746J9sJB5F88fNhJg5 9y8MsFZASjIJNACAZXbIga+HpySEcq5K73w8yiCwRPeTcc5HtXurTQzcrToinu8I qmDm/hM2iKxHIvt9KAakCk3FmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9cms2X N2J/HZBjh/wwP7E1cfITMB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChcg06J0yDIQAcWhV4Zg7RAd5MyPVWcQGHcsL53tWz18+Ey3oBVo9g TYNosci2Pe0oKm3de1Y9Atkl32qQmNuqBqaUZBX6SX9XSbc7IxojHounYa2KMJwV 04cT4qFgOTjZgxYBrEQfUg82eoi6qPQUvJ+97oAf+78RF6XyFiKGY2s7XRUBg5B/ LwzIRD/e4X2RBHOuPyROvyefoZsrXBXr9tFDXGJ9+LPrRpYu9Jsl6LDslFa2Dk2+ IH5wZh7KJhRg94pT6FGMrBCfATKJkwIZDouqcaRq+QSdprYyZgmlThn1B5phEN/Q PxB3GjbBD4QIcSYtFXNqoDsdgNwyRZ3O -----END CERTIFICATE-----Generated at Wed Aug 13 02:44:25 2025 by rpki-client