$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft File: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json) Hash identifier: eIMHNQ60mDUbsk7bx4jUuBv0lUYmbXdVigB2w/co9lk= Subject key identifier: C1:45:1F:22:C7:EB:83:8C:14:6B:67:B3:5B:0F:4D:6F:B0:2F:54:C1 Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 Certificate issuer: /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft Manifest number: 04F7 Signing time: Fri 22 Aug 2025 23:53:01 +0000 Manifest this update: Fri 22 Aug 2025 23:53:01 +0000 Manifest next update: Fri 29 Aug 2025 23:53:00 +0000 Files and hashes: 1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: XDZbSKGTCFGElewmNpI6tzNazE05mY0YV2Nm4KKZ360=) 2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: Rcq5Nuqy/+xp1XYE1j9Q0LkOQi0P9qH6hEu8LNDUE2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Validity Not Before: Aug 22 23:53:01 2025 GMT Not After : Aug 29 23:53:00 2025 GMT Subject: CN=68a902dd-7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:da:1d:39:4f:f6:6d:b8:49:17:f9:01:31: 45:ae:e4:8a:af:da:45:96:94:b7:06:66:e8:b2:55: 65:8b:a3:8b:e1:dd:fa:87:78:fe:a6:aa:d1:4e:aa: c0:e7:d0:9a:c1:49:01:c2:be:88:93:27:2b:df:32: ea:a5:79:cf:22:9a:5a:59:1d:ef:ab:d9:a7:7a:27: c8:ef:c1:a3:57:67:18:8a:9b:b5:a0:c9:0f:39:9b: d4:ee:82:f6:11:d2:3a:3a:0d:eb:fa:a3:db:9b:d1: 5e:2b:93:09:65:e8:3f:c0:af:e9:ca:27:4a:23:f5: 9f:b2:4c:29:c9:73:a5:a7:5f:5a:9d:b2:fc:f5:fe: 94:c3:58:9d:e8:49:ae:7b:7d:1d:04:46:25:4d:8d: 87:b8:d9:4d:4a:ff:02:7a:49:8d:e5:d3:e9:b4:f3: cc:fd:76:91:51:0e:9f:90:22:c1:5b:ca:a1:9c:bc: 69:23:bc:7e:31:11:ab:6f:1f:c3:37:2d:7b:cc:ed: c7:55:0a:8c:73:41:3c:b6:6a:15:60:fd:aa:9a:67: b9:3a:62:7a:2c:d8:f8:98:8e:1b:83:34:ca:b4:f8: b5:de:6c:47:cc:d7:52:74:69:e4:69:08:99:6c:79: e6:f4:d3:f0:57:9d:f2:17:da:c7:5a:c6:df:e7:e4: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:45:1F:22:C7:EB:83:8C:14:6B:67:B3:5B:0F:4D:6F:B0:2F:54:C1 X509v3 Authority Key Identifier: keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:31:16:44:de:3d:a7:a5:ca:b4:49:27:2b:ed:d6:2c:dd: c0:71:1c:58:ff:c6:d3:6f:8d:39:2c:7b:f6:67:57:29:4c:f8: b1:1f:bf:73:97:7c:6b:09:76:f6:14:1b:23:f8:69:f8:1e:84: ea:0d:40:2e:1f:bc:5e:01:58:59:d5:50:d8:a1:7c:80:63:94: 71:7f:72:1b:7d:dc:22:b9:49:93:fd:24:b0:d3:e4:1a:21:f0: cb:f1:0d:4c:f4:32:06:b2:60:b3:7a:b5:4d:4a:24:b0:de:b0: bc:b8:46:ed:ad:d0:6c:23:c3:19:12:b9:3f:6a:bd:fc:c5:d9: 46:24:1b:e0:fe:61:a4:9c:92:b5:1c:9d:dd:e4:68:50:be:76: df:57:fb:ae:98:c9:a8:f0:e8:b5:09:e3:c4:8f:b4:c6:87:a7: e1:de:1e:6b:ab:fa:98:b5:e2:cd:81:47:ec:a0:91:c1:bd:95: b6:ee:9e:5f:75:78:9d:5f:87:dd:9e:26:d9:3c:da:ba:4e:f8: 22:0d:98:fe:c4:b0:ea:8a:cc:d1:ce:e3:5b:0f:d3:ef:8e:b0: 30:71:65:a1:aa:1a:c3:8e:42:5d:92:a1:6e:d4:4d:d4:d5:a1: 37:5f:0f:de:64:a0:97:f2:1f:68:1d:b7:05:85:54:53:94:68: 91:fc:58:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF OTk3NjEzQTMwHhcNMjUwODIyMjM1MzAxWhcNMjUwODI5MjM1MzAwWjAYMRYwFAYD VQQDEw02OGE5MDJkZC03Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx/aHTlP9m24SRf5ATFFruSKr9pFlpS3BmboslVli6OL4d36h3j+pqrRTqrA 59CawUkBwr6Ikycr3zLqpXnPIppaWR3vq9mneifI78GjV2cYipu1oMkPOZvU7oL2 EdI6Og3r+qPbm9FeK5MJZeg/wK/pyidKI/WfskwpyXOlp19anbL89f6Uw1id6Emu e30dBEYlTY2HuNlNSv8CekmN5dPptPPM/XaRUQ6fkCLBW8qhnLxpI7x+MRGrbx/D Ny17zO3HVQqMc0E8tmoVYP2qmme5OmJ6LNj4mI4bgzTKtPi13mxHzNdSdGnkaQiZ bHnm9NPwV53yF9rHWsbf5+SmawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFFHyLH 64OMFGtns1sPTW+wL1TBMB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADCDEWRN49p6XKtEknK+3WLN3AcRxY/8bTb405LHv2Z1cpTPixH79z l3xrCXb2FBsj+Gn4HoTqDUAuH7xeAVhZ1VDYoXyAY5Rxf3IbfdwiuUmT/SSw0+Qa IfDL8Q1M9DIGsmCzerVNSiSw3rC8uEbtrdBsI8MZErk/ar38xdlGJBvg/mGknJK1 HJ3d5GhQvnbfV/uumMmo8Oi1CePEj7TGh6fh3h5rq/qYteLNgUfsoJHBvZW27p5f dXidX4fdnibZPNq6TvgiDZj+xLDqiszRzuNbD9PvjrAwcWWhqhrDjkJdkqFu1E3U 1aE3Xw/eZKCX8h9oHbcFhVRTlGiR/FgK -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:31 2025 by rpki-client