$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: wT6+9K8Z/O4aEqR9rb/nMPpxqFueQOedYlvhTQxAKEI= Subject key identifier: 57:52:A4:1E:5D:CC:FD:B3:1B:A5:AB:DF:35:CF:71:C2:54:32:AE:FD Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 1513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 1508 Signing time: Fri 22 Aug 2025 16:55:57 +0000 Manifest this update: Fri 22 Aug 2025 16:55:57 +0000 Manifest next update: Fri 29 Aug 2025 16:55:57 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: ud97dtNT5U97l5m+S2s6yOoeRQqXix8wI5aXS7IJynE=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: 73TnPaYse5Jq88UH3d/+sChGvcrApkf6vCKZhwuKess=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5395 (0x1513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: Aug 22 16:55:57 2025 GMT Not After : Aug 29 16:55:57 2025 GMT Subject: CN=68a8a11d-433b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:64:5f:93:50:7e:ca:0f:46:8b:6a:3e:a0: 16:17:5f:15:b4:da:7d:88:17:14:fe:6d:ed:24:56: 80:2e:9a:8b:09:33:61:45:53:90:c7:00:2a:50:83: c3:b6:b5:1c:6e:02:77:26:5a:bd:87:17:50:b6:0d: 02:10:47:02:3c:75:97:73:f7:93:98:5f:77:e0:07: d0:69:94:d7:0d:d3:4a:b3:c3:af:e5:dc:13:6e:c3: 41:1a:06:e8:14:98:04:63:9a:1c:db:a0:3a:31:8b: 24:fa:e2:3a:ab:11:9a:3e:55:af:c1:97:ee:48:a7: 33:d9:e4:41:a1:9d:a6:c1:41:95:5e:4c:c9:ff:72: 94:1d:cd:b4:8a:fc:67:19:cd:67:a9:58:5a:b0:6f: ee:2a:4f:df:04:48:fe:4d:86:0a:20:c7:d0:f3:3b: ab:e2:1b:ce:9a:0f:01:3b:f8:05:a0:b7:7a:e5:b9: f6:71:6f:47:4b:aa:43:fd:a7:64:58:2c:73:dd:d8: 1a:02:d0:e7:02:89:d1:4e:93:83:bb:b3:10:d4:69: e8:15:86:a6:ed:70:29:5d:92:72:58:ee:ef:c0:92: 25:f4:ef:e3:61:36:8d:5b:b4:5d:82:0b:9e:a7:c5: 23:3d:33:01:2b:92:4f:bf:e4:5f:06:71:d8:d9:38: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:A4:1E:5D:CC:FD:B3:1B:A5:AB:DF:35:CF:71:C2:54:32:AE:FD X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3f:61:d6:06:46:9d:f3:5a:ed:ab:4d:dc:be:f6:91:ee:67: be:bb:8c:16:e5:54:6e:b2:48:f8:1d:b0:b5:94:90:c1:f2:a4: 62:44:7b:59:7c:8a:bb:33:70:94:76:ca:4b:58:0e:a5:1b:bc: 89:e0:a3:30:ce:e5:31:51:86:22:5a:76:65:c6:5b:e6:72:74: 6d:16:95:74:c5:45:c4:65:03:4a:09:d8:ab:bd:06:a1:4d:67: b9:ff:1c:33:6e:12:44:97:f0:e7:aa:68:cb:59:3b:2d:40:b7: 04:87:3b:bc:7f:26:75:e4:93:98:ea:9b:f5:7f:2a:c2:e7:28: 9f:7d:b6:4b:4a:88:d4:89:6d:88:bc:e5:c8:a2:4d:94:31:04: be:a9:c4:4b:ac:c2:9c:33:80:dd:79:6f:01:e0:39:c7:26:9a: cf:16:fb:dc:4b:3a:b7:f9:73:8a:6e:5e:9b:41:c8:2b:32:9a: 3d:c1:05:1a:c0:b1:fe:fd:1c:63:87:b3:99:28:7b:79:7c:f7: 77:8d:db:c7:8e:ef:23:15:df:a0:89:e7:cb:ce:cc:bd:ee:59: 18:e4:f3:87:03:54:99:71:e6:31:1f:3b:51:22:36:02:e7:b9: f3:b4:20:cc:73:69:2a:76:21:2c:f8:69:bb:f6:48:b7:47:b4: 5a:51:67:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjUwODIyMTY1NTU3WhcNMjUwODI5MTY1NTU3WjAYMRYwFAYD VQQDEw02OGE4YTExZC00MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqZkX5NQfsoPRotqPqAWF18VtNp9iBcU/m3tJFaALpqLCTNhRVOQxwAqUIPD trUcbgJ3Jlq9hxdQtg0CEEcCPHWXc/eTmF934AfQaZTXDdNKs8Ov5dwTbsNBGgbo FJgEY5oc26A6MYsk+uI6qxGaPlWvwZfuSKcz2eRBoZ2mwUGVXkzJ/3KUHc20ivxn Gc1nqVhasG/uKk/fBEj+TYYKIMfQ8zur4hvOmg8BO/gFoLd65bn2cW9HS6pD/adk WCxz3dgaAtDnAonRTpODu7MQ1GnoFYam7XApXZJyWO7vwJIl9O/jYTaNW7Rdggue p8UjPTMBK5JPv+RfBnHY2TjYKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdSpB5d zP2zG6Wr3zXPccJUMq79MB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCP2HWBkad81rtq03cvvaR7me+u4wW5VRuskj4HbC1lJDB8qRiRHtZ fIq7M3CUdspLWA6lG7yJ4KMwzuUxUYYiWnZlxlvmcnRtFpV0xUXEZQNKCdirvQah TWe5/xwzbhJEl/DnqmjLWTstQLcEhzu8fyZ15JOY6pv1fyrC5yiffbZLSojUiW2I vOXIok2UMQS+qcRLrMKcM4DdeW8B4DnHJprPFvvcSzq3+XOKbl6bQcgrMpo9wQUa wLH+/Rxjh7OZKHt5fPd3jdvHju8jFd+giefLzsy97lkY5POHA1SZceYxHztRIjYC 57nztCDMc2kqdiEs+Gm79ki3R7RaUWcD -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:06 2025 by rpki-client