$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: 0tUy7/P/k+Hg3PXyOWUld1HHX6JXvAuxg1zM/oDVQ2g= Subject key identifier: C5:C6:A7:2E:8C:A1:BC:08:5E:F5:44:4B:58:7E:61:FE:4E:43:9D:81 Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 14DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 14D2 Signing time: Mon 12 May 2025 16:46:20 +0000 Manifest this update: Mon 12 May 2025 16:46:19 +0000 Manifest next update: Mon 19 May 2025 16:46:19 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: BY+Ipo/EDAsKl2b+MXixkn/DvQkwcuvtbM/6PaHwJcc=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: ts6CuXT017m+Eo1tnvA5GQ371D5wqgoVWLN1l6w+WmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5340 (0x14dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: May 12 16:46:19 2025 GMT Not After : May 19 16:46:19 2025 GMT Subject: CN=682225dc-4b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:2a:2c:41:d6:2e:11:31:81:22:60:b1:7f: ff:4b:c8:1e:2d:9e:89:a0:fa:8c:0a:a2:57:97:c2: 2a:04:bc:21:54:70:45:c0:8b:00:28:fa:6f:bb:04: b5:a0:f0:aa:04:ac:ea:1b:71:6d:ae:82:08:3f:86: 95:42:2e:de:02:35:03:97:8f:79:5c:47:94:82:40: 52:19:80:2b:85:1a:72:81:2c:af:b9:5f:91:dc:de: 9d:c2:38:99:15:7e:4d:e4:86:3e:00:34:07:5e:3f: ae:a5:0e:b5:92:f7:da:16:57:af:2b:7a:72:c2:f1: 1e:30:37:2a:ad:88:cd:ef:1f:19:4a:c4:36:b3:99: 6c:84:40:55:db:b4:d5:15:3b:52:0b:64:4f:9f:f7: 99:a3:56:4f:63:91:7e:b1:8f:6d:6f:c4:7f:79:3d: ca:48:de:f9:f2:cb:13:4a:67:ba:8b:07:b7:4c:7a: 6e:af:3c:df:38:ca:c0:48:a8:d6:21:9b:80:84:da: 27:bd:81:76:ee:7d:ba:42:3f:17:a9:d7:76:c3:52: 27:32:35:60:46:4f:52:3f:ea:25:fd:35:25:fb:d7: ab:a6:05:a8:84:eb:f6:a9:f9:23:a6:9b:6a:e9:a7: 38:e9:9d:f5:c9:38:00:87:ed:0a:75:e9:b1:3f:03: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C6:A7:2E:8C:A1:BC:08:5E:F5:44:4B:58:7E:61:FE:4E:43:9D:81 X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e7:9e:72:b3:b4:6f:08:6e:d2:e4:55:dd:5f:4b:db:85:07: f7:a8:6a:a7:37:dd:83:8f:9e:17:ef:0a:bb:f2:e2:2e:8f:e3: e6:05:82:ee:62:02:ef:10:04:dc:4d:a6:43:0c:74:ef:0e:67: 02:df:1c:54:5b:4e:00:22:e9:c4:72:2a:0d:b2:f6:58:5a:00: 21:2e:7d:6d:e7:ad:3b:04:67:e2:57:db:fd:df:9e:33:8c:2e: 24:5a:d4:22:fe:97:80:4c:0f:b3:a5:9f:7a:aa:57:d0:cb:47: 71:64:0d:41:b7:7c:55:70:db:2e:cd:d3:db:2d:15:91:da:8c: d6:c7:2a:35:3f:e2:00:75:80:28:1a:f7:dd:c0:50:16:01:5a: 31:d7:9c:e7:ce:e8:8e:ae:c3:80:07:9c:c2:9e:a9:19:44:ea: 51:f4:e2:ab:40:78:ac:39:ac:af:16:36:3b:03:10:22:25:03: 14:1d:d2:6c:06:1c:6b:37:10:70:9a:90:7c:d6:3f:7d:d8:e5: 01:9c:74:84:01:db:e1:19:a3:9d:38:0b:93:06:31:41:23:16: fe:33:0b:c4:32:0b:ae:17:d1:53:23:22:5b:63:dc:10:22:57: 72:03:22:23:f8:90:11:5f:28:ef:18:b6:68:f8:d2:df:15:4e: 10:f9:42:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjUwNTEyMTY0NjE5WhcNMjUwNTE5MTY0NjE5WjAYMRYwFAYD VQQDEw02ODIyMjVkYy00YjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxysqLEHWLhExgSJgsX//S8geLZ6JoPqMCqJXl8IqBLwhVHBFwIsAKPpvuwS1 oPCqBKzqG3FtroIIP4aVQi7eAjUDl495XEeUgkBSGYArhRpygSyvuV+R3N6dwjiZ FX5N5IY+ADQHXj+upQ61kvfaFlevK3pywvEeMDcqrYjN7x8ZSsQ2s5lshEBV27TV FTtSC2RPn/eZo1ZPY5F+sY9tb8R/eT3KSN758ssTSme6iwe3THpurzzfOMrASKjW IZuAhNonvYF27n26Qj8Xqdd2w1InMjVgRk9SP+ol/TUl+9erpgWohOv2qfkjpptq 6ac46Z31yTgAh+0KdemxPwPAuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXGpy6M obwIXvVES1h+Yf5OQ52BMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH555ys7RvCG7S5FXdX0vbhQf3qGqnN92Dj54X7wq78uIuj+PmBYLu YgLvEATcTaZDDHTvDmcC3xxUW04AIunEcioNsvZYWgAhLn1t5607BGfiV9v9354z jC4kWtQi/peATA+zpZ96qlfQy0dxZA1Bt3xVcNsuzdPbLRWR2ozWxyo1P+IAdYAo GvfdwFAWAVox15znzuiOrsOAB5zCnqkZROpR9OKrQHisOayvFjY7AxAiJQMUHdJs BhxrNxBwmpB81j992OUBnHSEAdvhGaOdOAuTBjFBIxb+MwvEMguuF9FTIyJbY9wQ IldyAyIj+JARXyjvGLZo+NLfFU4Q+ULi -----END CERTIFICATE-----Generated at Tue May 13 04:51:59 2025 by rpki-client