$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft File: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json) Hash identifier: aErQn9L1cK87LCP2rNXUMoGcMQIe7VLFAxxYhH5+rko= Subject key identifier: 9C:7C:FD:79:F8:71:CC:99:A4:39:85:67:71:63:B5:B1:67:E5:F2:EE Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 Certificate issuer: /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft Manifest number: 04D9 Signing time: Sat 28 Jun 2025 23:20:46 +0000 Manifest this update: Sat 28 Jun 2025 23:20:45 +0000 Manifest next update: Sat 05 Jul 2025 23:20:45 +0000 Files and hashes: 1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: mokTO/E3GaxgWhBfzOBE4TO+089MA9w9J8KVfKFkRXI=) 2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: D4U1lUqveYfyWOIkh6414WCzafazdL5eQysTdY6uwXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Validity Not Before: Jun 28 23:20:45 2025 GMT Not After : Jul 5 23:20:45 2025 GMT Subject: CN=686078ce-f16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:3a:fe:86:68:7d:67:03:7d:d5:fb:2c:98: 3b:54:34:32:11:93:af:17:bb:df:b7:0d:d0:41:e4: ef:36:2d:be:b9:de:88:f5:b5:25:24:8c:27:cd:44: 3a:05:3c:9e:17:6b:a1:21:63:e6:34:20:b9:14:43: 26:ce:b2:1a:3e:93:e9:5e:49:07:30:37:d7:2e:a6: 37:d7:bf:84:42:3b:2b:b4:eb:47:ee:97:8d:82:76: d3:d5:4b:96:0d:cb:d4:44:ba:75:d0:0e:1e:10:cc: 4c:75:17:0a:81:6b:e2:58:7c:ac:03:42:0b:04:de: 14:88:5c:00:f0:aa:be:69:0f:b0:07:a9:8a:48:3a: 92:0a:2e:73:43:b8:87:56:b5:63:d0:b7:4a:19:01: 1b:ab:ce:e6:0c:75:5b:2a:be:ca:18:4f:85:20:77: d4:dc:1c:4a:87:2d:ef:60:57:9a:e3:c6:6d:1e:bf: 7a:b0:49:b6:ac:f3:0a:7d:80:1c:b0:c8:cb:3a:da: 14:29:6f:ef:42:9a:56:2b:f5:9f:30:38:1b:ed:06: 7b:96:b2:6a:0e:99:96:44:d4:18:a4:1d:4e:c5:44: d5:ee:7d:f9:b0:e0:4d:5c:3a:ce:6b:69:e5:f0:05: 82:1c:af:a5:d9:41:56:63:c7:a7:a0:16:8b:94:ae: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7C:FD:79:F8:71:CC:99:A4:39:85:67:71:63:B5:B1:67:E5:F2:EE X509v3 Authority Key Identifier: keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:73:bf:9f:0a:09:3f:ee:96:bb:d3:77:c9:d0:23:21:69:cf: 41:0d:03:0f:c5:6f:80:e6:b5:fe:bf:aa:f2:f1:5f:47:4c:5b: 9e:62:41:11:ee:07:57:14:71:7c:a1:12:98:7e:07:80:a7:0c: 29:6c:db:4e:ab:67:26:f4:b6:4f:8b:3b:f6:76:d4:75:f8:e5: 90:1a:ac:16:f2:63:fe:43:66:35:b2:6f:3a:f8:5b:1e:da:1b: 01:1c:7e:9d:d5:c5:b3:55:98:26:15:89:2b:0d:ba:9e:50:14: 9c:2b:ca:35:a3:aa:a6:79:84:23:7c:eb:bc:ce:b0:af:59:36: a8:76:6c:10:8a:aa:8a:2f:6b:9b:43:5f:d8:db:94:7e:23:f8: 7b:d6:48:66:2d:2d:3e:25:04:ea:45:44:6c:ee:ab:f8:dc:77: 69:8e:ad:1e:92:3c:dd:c5:34:f7:6a:4e:8f:6b:74:1b:b8:7e: 4a:78:81:89:fa:54:79:74:bb:a4:46:e4:e6:6d:8d:5d:72:71: a2:03:44:4b:59:c7:c4:7c:09:28:63:6f:26:b1:93:f4:a4:01: 5c:47:8a:53:dd:0f:0c:92:ab:62:c9:a2:8b:4f:be:1b:48:0c: 98:06:62:59:57:23:91:27:88:40:cd:e8:27:db:49:6f:7f:2f: b7:fe:1c:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF OTk3NjEzQTMwHhcNMjUwNjI4MjMyMDQ1WhcNMjUwNzA1MjMyMDQ1WjAYMRYwFAYD VQQDEw02ODYwNzhjZS1mMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgY6/oZofWcDfdX7LJg7VDQyEZOvF7vftw3QQeTvNi2+ud6I9bUlJIwnzUQ6 BTyeF2uhIWPmNCC5FEMmzrIaPpPpXkkHMDfXLqY317+EQjsrtOtH7peNgnbT1UuW DcvURLp10A4eEMxMdRcKgWviWHysA0ILBN4UiFwA8Kq+aQ+wB6mKSDqSCi5zQ7iH VrVj0LdKGQEbq87mDHVbKr7KGE+FIHfU3BxKhy3vYFea48ZtHr96sEm2rPMKfYAc sMjLOtoUKW/vQppWK/WfMDgb7QZ7lrJqDpmWRNQYpB1OxUTV7n35sOBNXDrOa2nl 8AWCHK+l2UFWY8enoBaLlK5sxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJx8/Xn4 ccyZpDmFZ3FjtbFn5fLuMB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwc7+fCgk/7pa703fJ0CMhac9BDQMPxW+A5rX+v6ry8V9HTFueYkER 7gdXFHF8oRKYfgeApwwpbNtOq2cm9LZPizv2dtR1+OWQGqwW8mP+Q2Y1sm86+Fse 2hsBHH6d1cWzVZgmFYkrDbqeUBScK8o1o6qmeYQjfOu8zrCvWTaodmwQiqqKL2ub Q1/Y25R+I/h71khmLS0+JQTqRURs7qv43Hdpjq0ekjzdxTT3ak6Pa3QbuH5KeIGJ +lR5dLukRuTmbY1dcnGiA0RLWcfEfAkoY28msZP0pAFcR4pT3Q8MkqtiyaKLT74b SAyYBmJZVyORJ4hAzegn20lvfy+3/hx0 -----END CERTIFICATE-----Generated at Tue Jul 1 00:54:05 2025 by rpki-client