$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft File: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json) Hash identifier: h6cMR/V59fuY+jeGrJdXI0MmOtEOkNZIZYVK1sHlnM4= Subject key identifier: D1:08:E9:A5:83:63:00:FE:87:55:1E:16:D9:66:3D:1A:D4:AF:0B:4E Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 Certificate issuer: /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft Manifest number: 04BE Signing time: Sun 04 May 2025 23:28:44 +0000 Manifest this update: Sun 04 May 2025 23:28:43 +0000 Manifest next update: Sun 11 May 2025 23:28:43 +0000 Files and hashes: 1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: E7v+91RLNi8vHZydmTlElfSbiPxhzc8Cb+WfVsIzy7E=) 2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: D4U1lUqveYfyWOIkh6414WCzafazdL5eQysTdY6uwXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Validity Not Before: May 4 23:28:43 2025 GMT Not After : May 11 23:28:43 2025 GMT Subject: CN=6817f82b-abe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:65:71:0f:93:6b:15:33:01:61:f1:54:a6: 2a:83:58:5a:d0:aa:79:a4:2f:b5:b2:b3:f9:61:f8: 69:34:8d:02:e6:0f:da:6d:13:d2:5d:19:42:9d:ed: 1a:18:d6:bf:de:53:74:a0:04:46:22:f1:f4:ce:71: eb:a6:05:e8:8b:20:35:52:c6:90:53:c5:29:00:7a: f2:2f:25:ab:66:31:1d:98:55:7b:68:48:e6:f5:63: 31:7f:4d:06:8b:96:11:25:ca:9d:42:0b:ab:54:8c: b6:71:43:d1:4d:05:c0:7a:7a:09:12:ce:43:78:00: b7:68:8f:3d:e0:1e:42:bf:ae:55:6f:0f:a6:fe:55: 06:ba:7a:66:bd:39:85:e3:fb:c0:b5:e2:29:27:35: 49:f3:24:f7:f9:b7:a9:29:a2:72:5b:7b:2b:13:a1: ec:93:c5:c2:c2:71:c3:9e:10:50:51:d8:5d:28:95: ac:12:92:d6:0e:dd:63:c4:97:9c:e7:c5:e6:a3:51: 4d:10:10:af:94:b7:c2:85:ca:7f:06:fb:0d:ea:19: 49:8c:7c:f5:c1:39:10:9f:60:fd:c8:00:bf:e1:de: 0f:95:54:1f:f8:cd:b0:11:07:64:f3:4c:1b:bb:2a: 21:0e:ca:c9:25:08:bc:18:7c:18:9e:a1:cd:1a:49: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:E9:A5:83:63:00:FE:87:55:1E:16:D9:66:3D:1A:D4:AF:0B:4E X509v3 Authority Key Identifier: keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a4:dc:49:6c:c9:70:08:89:89:41:53:3c:4d:33:b1:71:0b: b9:ed:06:3d:d3:98:26:7c:e4:68:ea:64:98:78:24:05:0d:a0: 42:49:d7:56:08:c0:c5:00:69:92:4f:37:44:db:d0:70:85:75: 15:1c:9a:d6:aa:c1:b7:f4:78:74:b5:96:5b:f0:6b:0d:a6:28: bd:c3:c9:58:96:a9:07:81:a6:d1:b7:91:d6:fc:7b:93:3d:8e: 3c:29:fd:c4:74:29:47:8b:23:40:58:5c:87:2d:bb:e9:32:ab: 1d:8f:74:50:26:fe:0b:b4:ae:70:62:55:17:99:04:3d:63:41: 51:be:e1:10:69:2b:55:f7:53:a4:3f:91:e7:b4:3e:18:b0:c4: c3:5b:5e:69:14:f4:0e:33:28:eb:80:1b:19:0f:b0:57:b2:93: 2a:5d:de:db:b4:1d:5c:a3:eb:65:5b:68:63:eb:4c:9d:10:a1: 6b:c1:56:cb:02:e8:4b:36:2f:08:97:dc:b9:eb:f4:c7:7f:5b: ce:e6:66:1f:6d:09:03:01:7f:4a:7d:e6:69:5a:82:2b:a9:39: 33:7b:72:5e:a1:19:32:c4:af:67:15:ca:1e:27:59:88:50:7b: 95:19:74:d0:ce:c5:57:c7:b5:27:d1:1c:56:77:03:ce:ac:06: fa:a9:85:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF OTk3NjEzQTMwHhcNMjUwNTA0MjMyODQzWhcNMjUwNTExMjMyODQzWjAYMRYwFAYD VQQDEw02ODE3ZjgyYi1hYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKZlcQ+TaxUzAWHxVKYqg1ha0Kp5pC+1srP5YfhpNI0C5g/abRPSXRlCne0a GNa/3lN0oARGIvH0znHrpgXoiyA1UsaQU8UpAHryLyWrZjEdmFV7aEjm9WMxf00G i5YRJcqdQgurVIy2cUPRTQXAenoJEs5DeAC3aI894B5Cv65Vbw+m/lUGunpmvTmF 4/vAteIpJzVJ8yT3+bepKaJyW3srE6Hsk8XCwnHDnhBQUdhdKJWsEpLWDt1jxJec 58Xmo1FNEBCvlLfChcp/BvsN6hlJjHz1wTkQn2D9yAC/4d4PlVQf+M2wEQdk80wb uyohDsrJJQi8GHwYnqHNGkkhbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEI6aWD YwD+h1UeFtlmPRrUrwtOMB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAspNxJbMlwCImJQVM8TTOxcQu57QY905gmfORo6mSYeCQFDaBCSddW CMDFAGmSTzdE29BwhXUVHJrWqsG39Hh0tZZb8GsNpii9w8lYlqkHgabRt5HW/HuT PY48Kf3EdClHiyNAWFyHLbvpMqsdj3RQJv4LtK5wYlUXmQQ9Y0FRvuEQaStV91Ok P5HntD4YsMTDW15pFPQOMyjrgBsZD7BXspMqXd7btB1co+tlW2hj60ydEKFrwVbL AuhLNi8Il9y56/THf1vO5mYfbQkDAX9KfeZpWoIrqTkze3JeoRkyxK9nFcoeJ1mI UHuVGXTQzsVXx7Un0RxWdwPOrAb6qYUn -----END CERTIFICATE-----Generated at Mon May 5 03:01:19 2025 by rpki-client