$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: P7A+TPFZuVO0ofI/ceYZ3DSOCvdkPmhmBuy6i+Ycuec= Subject key identifier: B1:29:90:A6:CE:3D:73:E8:90:5C:D7:14:B1:FC:0A:C1:AF:18:17:3B Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 01E4 Signing time: Tue 01 Jul 2025 03:01:27 +0000 Manifest this update: Tue 01 Jul 2025 03:01:26 +0000 Manifest next update: Tue 08 Jul 2025 03:01:26 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: Ihi1J24DkcJ7Tb6bS1sFweVmV5QseXaxk9lhf5ATMVA=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Jul 1 03:01:26 2025 GMT Not After : Jul 8 03:01:26 2025 GMT Subject: CN=68634f86-7dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:29:c3:3e:ee:2e:2c:76:7a:aa:e3:d8:fe: 21:2e:76:1e:10:34:89:16:ef:06:4e:fe:bf:ec:53: bf:a6:b5:19:89:9d:89:1b:01:17:a3:f2:07:8c:32: 56:41:72:0a:e6:a9:76:16:eb:39:42:9f:e0:86:79: 53:de:ad:b9:3d:d0:e8:ff:62:53:68:f3:6b:fa:14: fa:82:17:41:90:4c:23:19:b3:12:a2:05:5c:a6:9f: 05:52:12:ca:41:cb:03:eb:58:fd:04:4e:e5:5b:26: 17:03:99:6f:39:5d:1b:11:ec:f3:9e:2b:a7:33:4c: e6:90:53:b5:16:b2:78:10:82:d1:b0:06:1b:78:67: 89:cd:f4:db:d6:f7:3c:7b:c0:cc:bf:b4:b4:6f:6f: 29:46:01:c2:db:8d:56:9a:77:20:cb:86:f8:05:3d: cc:71:55:b0:ca:66:e2:9b:7a:f3:04:b1:eb:91:a0: ef:91:58:71:9d:8d:db:4b:3b:63:1d:41:a8:32:ce: 0d:1d:c6:ed:97:af:b0:8e:b2:0d:25:b6:e7:70:bd: be:94:c8:49:0a:b9:f9:d8:bf:aa:de:64:de:c3:88: 06:a6:8b:24:8b:b3:46:5d:6b:36:f0:94:f2:fb:4b: f7:13:a8:23:a6:b7:cb:16:68:31:f7:2a:b8:3b:a8: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:29:90:A6:CE:3D:73:E8:90:5C:D7:14:B1:FC:0A:C1:AF:18:17:3B X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d9:ec:53:4c:61:e5:18:1f:e7:e6:28:be:11:84:fd:69:7c: 1a:a5:fc:7d:09:fb:65:73:d6:ec:5e:be:ce:4c:1d:66:2b:86: 86:69:61:43:34:0c:4b:ad:69:b2:3a:51:44:2b:e8:3c:8d:73: 81:29:8a:1c:9c:f6:b0:c6:a1:66:cb:94:96:c1:75:c6:ab:09: 08:8d:86:b0:a7:9c:20:5b:18:49:08:6a:b4:80:44:0b:5f:1b: d6:d9:a8:72:3e:64:f7:48:33:8d:73:1d:a7:76:ed:73:02:a4: 10:52:71:9d:d4:d9:55:43:40:29:72:7c:38:82:c9:9c:a7:fe: 17:66:b8:37:fa:e1:d2:49:46:9f:18:20:7b:9f:e3:00:2d:d7: de:28:74:5b:19:87:72:54:55:31:7d:9a:61:d2:da:ad:ac:7e: fe:0a:c6:23:29:6f:cc:d3:3a:f9:10:ad:06:f7:82:cf:88:e5: 33:8c:0a:18:2c:35:34:5e:06:d3:a0:69:8e:52:71:cc:a0:da: 67:a0:2d:6a:eb:fc:e2:b3:94:72:26:a4:f3:e8:72:29:24:7d: 41:96:ae:5e:df:9f:5b:c2:da:a8:5a:2d:51:d4:05:1b:fa:2c: 7c:7e:a2:c3:bb:c0:96:ba:74:7f:6e:46:dd:3f:bc:d3:1f:ad: cf:76:1c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUwNzAxMDMwMTI2WhcNMjUwNzA4MDMwMTI2WjAYMRYwFAYD VQQDEw02ODYzNGY4Ni03ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1Upwz7uLix2eqrj2P4hLnYeEDSJFu8GTv6/7FO/prUZiZ2JGwEXo/IHjDJW QXIK5ql2Fus5Qp/ghnlT3q25PdDo/2JTaPNr+hT6ghdBkEwjGbMSogVcpp8FUhLK QcsD61j9BE7lWyYXA5lvOV0bEezzniunM0zmkFO1FrJ4EILRsAYbeGeJzfTb1vc8 e8DMv7S0b28pRgHC241Wmncgy4b4BT3McVWwymbim3rzBLHrkaDvkVhxnY3bSztj HUGoMs4NHcbtl6+wjrINJbbncL2+lMhJCrn52L+q3mTew4gGposki7NGXWs28JTy +0v3E6gjprfLFmgx9yq4O6hdewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEpkKbO PXPokFzXFLH8CsGvGBc7MB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC32exTTGHlGB/n5ii+EYT9aXwapfx9Cftlc9bsXr7OTB1mK4aGaWFD NAxLrWmyOlFEK+g8jXOBKYocnPawxqFmy5SWwXXGqwkIjYawp5wgWxhJCGq0gEQL XxvW2ahyPmT3SDONcx2ndu1zAqQQUnGd1NlVQ0Apcnw4gsmcp/4XZrg3+uHSSUaf GCB7n+MALdfeKHRbGYdyVFUxfZph0tqtrH7+CsYjKW/M0zr5EK0G94LPiOUzjAoY LDU0XgbToGmOUnHMoNpnoC1q6/zis5RyJqTz6HIpJH1Blq5e359bwtqoWi1R1AUb +ix8fqLDu8CWunR/bkbdP7zTH63Pdhxv -----END CERTIFICATE-----Generated at Thu Jul 3 02:06:53 2025 by rpki-client