$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: 4dbRsytYjUHspUEk34104WqJ3nntnvITvxwC60dWKbI= Subject key identifier: 6E:26:DF:C7:BA:4E:0C:75:39:61:27:FE:C1:8E:2B:B7:1A:2A:97:3A Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 14F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 14EC Signing time: Wed 02 Jul 2025 16:59:30 +0000 Manifest this update: Wed 02 Jul 2025 16:59:29 +0000 Manifest next update: Wed 09 Jul 2025 16:59:29 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: PUU83WS03CgS0mWpVBeil7QpST8fFSkMcHYu5rgPMf0=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: ts6CuXT017m+Eo1tnvA5GQ371D5wqgoVWLN1l6w+WmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5366 (0x14f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: Jul 2 16:59:29 2025 GMT Not After : Jul 9 16:59:29 2025 GMT Subject: CN=68656571-55ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:53:68:29:15:7e:6e:57:fd:57:58:23:76: b8:ff:00:8b:37:96:fc:02:95:3a:82:d1:c9:3f:43: 5c:33:95:0c:47:c8:38:95:98:12:42:24:d5:94:38: ff:73:66:06:63:9c:ea:78:09:1a:aa:7b:00:ec:8c: 77:60:82:ae:c4:ce:87:cf:a2:53:e6:60:8f:c5:b0: 6b:b3:21:11:c1:eb:61:2a:b1:ea:61:f8:6c:28:39: fc:95:9b:5d:c5:45:3f:4c:86:c5:2a:ba:22:ab:32: 7e:3f:b5:e4:81:58:aa:87:2f:97:ab:ed:d6:d6:db: ad:fb:89:5e:4d:72:14:e2:1b:b7:12:a1:57:77:cf: 3e:59:19:79:51:65:20:46:a6:67:a6:e6:8b:a8:1d: 05:13:5e:90:49:ff:93:5c:44:e2:c9:3f:05:30:b3: fd:10:ea:b8:92:3c:ed:5e:d7:dc:34:64:6f:d9:23: 82:d1:47:d2:1a:7b:74:46:a9:95:15:b6:a6:92:cc: 85:eb:e2:af:e1:11:d8:ad:10:46:12:67:22:9e:65: 87:02:cc:84:44:10:6d:12:96:3e:00:4a:12:0a:67: 63:5c:65:10:b3:b5:85:45:c9:b1:4c:98:7e:a2:a3: c6:cf:f2:c9:53:c6:1c:00:a8:94:ac:d2:e4:24:e1: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:DF:C7:BA:4E:0C:75:39:61:27:FE:C1:8E:2B:B7:1A:2A:97:3A X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c9:1d:42:75:e1:99:04:81:45:b5:61:30:c8:29:f3:16:8a: 42:c4:83:72:fb:8c:37:be:a5:11:c3:b6:39:50:7e:80:11:78: bf:c6:f2:b4:f9:a1:f5:44:6e:6d:6c:91:b8:41:e6:d3:40:31: 64:c0:92:ab:9e:33:0c:bb:ae:ed:36:6f:a0:35:8d:29:38:68: f1:79:b5:2c:94:6e:c4:62:71:a1:24:d3:91:c1:9b:66:80:97: 19:dd:1e:fa:f6:fa:03:2c:34:4c:f1:14:83:ce:2f:14:27:78: e7:62:05:da:f3:63:26:df:51:12:98:14:51:4d:e4:d7:ae:f7: c3:fa:4f:6a:4f:e9:ea:a4:12:5f:88:5e:d3:11:fe:c0:81:06: fb:92:c7:4a:f5:a5:c0:20:60:ce:be:82:b7:20:69:8d:c4:ae: 45:6e:40:0e:8a:ce:9a:1f:79:30:45:a9:e0:28:ce:83:cb:3b: 7c:6b:d9:fd:72:95:cc:af:85:9a:e0:ed:40:2b:33:ca:d4:2a: 69:65:10:39:c4:b0:1c:e5:3d:87:70:7f:32:02:f9:2a:13:7b: 94:a3:ee:e1:c4:55:93:d2:39:04:08:94:76:13:77:aa:69:d8: 0d:c7:38:33:00:e5:dc:d8:96:bb:80:77:e1:37:16:c7:77:86: 19:e4:e4:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjUwNzAyMTY1OTI5WhcNMjUwNzA5MTY1OTI5WjAYMRYwFAYD VQQDEw02ODY1NjU3MS01NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21hTaCkVfm5X/VdYI3a4/wCLN5b8ApU6gtHJP0NcM5UMR8g4lZgSQiTVlDj/ c2YGY5zqeAkaqnsA7Ix3YIKuxM6Hz6JT5mCPxbBrsyERwethKrHqYfhsKDn8lZtd xUU/TIbFKroiqzJ+P7XkgViqhy+Xq+3W1tut+4leTXIU4hu3EqFXd88+WRl5UWUg RqZnpuaLqB0FE16QSf+TXETiyT8FMLP9EOq4kjztXtfcNGRv2SOC0UfSGnt0RqmV FbamksyF6+Kv4RHYrRBGEmcinmWHAsyERBBtEpY+AEoSCmdjXGUQs7WFRcmxTJh+ oqPGz/LJU8YcAKiUrNLkJOElVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4m38e6 Tgx1OWEn/sGOK7caKpc6MB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVyR1CdeGZBIFFtWEwyCnzFopCxINy+4w3vqURw7Y5UH6AEXi/xvK0 +aH1RG5tbJG4QebTQDFkwJKrnjMMu67tNm+gNY0pOGjxebUslG7EYnGhJNORwZtm gJcZ3R769voDLDRM8RSDzi8UJ3jnYgXa82Mm31ESmBRRTeTXrvfD+k9qT+nqpBJf iF7TEf7AgQb7ksdK9aXAIGDOvoK3IGmNxK5FbkAOis6aH3kwRangKM6Dyzt8a9n9 cpXMr4Wa4O1AKzPK1CppZRA5xLAc5T2HcH8yAvkqE3uUo+7hxFWT0jkECJR2E3eq adgNxzgzAOXc2Ja7gHfhNxbHd4YZ5ORj -----END CERTIFICATE-----Generated at Thu Jul 3 07:09:37 2025 by rpki-client