$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: iiRbI6LyZF/EuWvNBRlW46WtNf1bfQ/vCII0ru77xro= Subject key identifier: 33:E5:9B:A8:11:FF:80:06:75:2B:38:EA:B9:95:68:52:87:F3:D5:BC Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: E9 Signing time: Tue 01 Jul 2025 05:56:39 +0000 Manifest this update: Tue 01 Jul 2025 05:56:39 +0000 Manifest next update: Tue 08 Jul 2025 05:56:39 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: MBLCht/eVJOVXGhgClkRGgIjpQSyQ3dsfKaqfWq6pw4=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Jul 1 05:56:39 2025 GMT Not After : Jul 8 05:56:39 2025 GMT Subject: CN=68637897-b4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:83:3b:50:0b:26:ba:cb:2d:fa:60:e0:91: 7b:5a:3b:4a:3f:69:44:cc:69:49:a6:b4:12:b4:0e: c5:0a:53:f3:bc:b1:d5:3c:8f:c7:3c:f1:3d:05:27: 39:6a:0b:be:e9:6b:af:46:b9:89:4f:fd:fe:41:aa: 26:fc:c9:4b:96:8c:38:7a:da:72:cf:33:a8:7a:16: d9:fd:6e:66:6d:f2:84:96:42:97:eb:9f:48:84:ab: 4e:e6:72:42:ef:d4:37:3b:0d:44:f6:d6:4a:6e:23: 55:d2:5e:70:69:c6:e8:b7:9d:f9:38:3f:6d:39:8e: 09:ff:be:4e:86:a3:d4:49:c4:7a:a4:6f:1d:53:78: 86:40:4b:14:dc:f1:47:72:75:60:43:13:aa:60:66: e7:8d:50:59:2d:db:29:f8:a9:9c:dd:2c:93:0d:aa: 03:8c:36:f4:e4:9d:9b:b9:d7:a1:1a:c3:b0:37:33: b6:a0:9f:ed:d5:dd:05:08:39:db:d8:1f:3c:43:44: 74:69:68:6a:30:5a:80:b5:f7:19:cd:82:25:0b:23: bb:4f:13:98:9d:68:85:7f:8e:c4:23:2e:7a:7d:c2: 46:00:5b:33:83:7f:ed:d7:f5:d7:b3:f0:c5:94:f5: f2:8a:a9:b3:56:9f:50:84:2c:aa:3a:32:7c:5a:47: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:9B:A8:11:FF:80:06:75:2B:38:EA:B9:95:68:52:87:F3:D5:BC X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e4:40:1e:8c:b5:24:ab:eb:f7:28:a0:3c:c8:9d:f7:2f:e4: d8:c3:75:3c:7a:7c:7c:99:95:2f:6f:ca:52:a0:5a:42:31:64: 85:82:4f:00:ee:ec:f3:ce:3c:e6:37:77:cf:24:08:a8:83:26: 92:32:44:55:f7:d4:97:5f:8f:a1:78:f1:5d:f1:88:c8:c8:d5: 72:7e:e4:a0:36:70:a5:56:ae:40:cc:7e:ba:5a:69:20:a6:62: cb:12:e1:e9:1b:86:ad:ba:ae:b4:94:34:d2:5f:c1:2e:f4:ef: 8f:09:5e:65:d7:a0:9d:d3:8e:58:7a:fa:56:06:11:a5:94:3e: 7a:c5:b6:60:96:31:40:c6:d2:f7:c7:96:6e:85:bc:49:9d:1f: 24:36:7e:c0:96:6c:e4:e4:b4:98:95:e6:87:f1:02:f3:63:41: 7e:23:e7:9a:c1:1a:d1:0f:d1:ca:41:d9:f0:f1:18:fb:69:a3: 90:82:21:a2:80:92:e1:f6:45:fd:b3:6e:af:b8:9a:cf:1c:2f: ac:bd:90:08:72:cb:4f:4f:70:ee:7f:97:32:15:4b:36:a6:ea: e5:81:a9:9d:17:36:3a:ca:06:cb:4d:07:7e:9d:75:73:91:cd: fd:5c:60:ec:45:8f:99:aa:1d:13:86:81:79:a0:1e:6a:0d:a0: ea:12:98:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjUwNzAxMDU1NjM5WhcNMjUwNzA4MDU1NjM5WjAYMRYwFAYD VQQDEw02ODYzNzg5Ny1iNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyheDO1ALJrrLLfpg4JF7WjtKP2lEzGlJprQStA7FClPzvLHVPI/HPPE9BSc5 agu+6WuvRrmJT/3+Qaom/MlLlow4etpyzzOoehbZ/W5mbfKElkKX659IhKtO5nJC 79Q3Ow1E9tZKbiNV0l5wacbot535OD9tOY4J/75OhqPUScR6pG8dU3iGQEsU3PFH cnVgQxOqYGbnjVBZLdsp+Kmc3SyTDaoDjDb05J2budehGsOwNzO2oJ/t1d0FCDnb 2B88Q0R0aWhqMFqAtfcZzYIlCyO7TxOYnWiFf47EIy56fcJGAFszg3/t1/XXs/DF lPXyiqmzVp9QhCyqOjJ8WkfprwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPlm6gR /4AGdSs46rmVaFKH89W8MB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg5EAejLUkq+v3KKA8yJ33L+TYw3U8enx8mZUvb8pSoFpCMWSFgk8A 7uzzzjzmN3fPJAiogyaSMkRV99SXX4+hePFd8YjIyNVyfuSgNnClVq5AzH66Wmkg pmLLEuHpG4atuq60lDTSX8Eu9O+PCV5l16Cd045YevpWBhGllD56xbZgljFAxtL3 x5ZuhbxJnR8kNn7Almzk5LSYleaH8QLzY0F+I+eawRrRD9HKQdnw8Rj7aaOQgiGi gJLh9kX9s26vuJrPHC+svZAIcstPT3Duf5cyFUs2purlgamdFzY6ygbLTQd+nXVz kc39XGDsRY+Zqh0ThoF5oB5qDaDqEpjc -----END CERTIFICATE-----Generated at Tue Jul 1 10:32:13 2025 by rpki-client