$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: 3nUH8/lOdr36fZs2GpVwI+XAZgrdN/FL4Af0OyevAhE= Subject key identifier: 58:E6:5E:97:1D:D0:DC:22:7D:6C:D3:19:55:B9:21:F9:1E:F3:14:75 Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 14FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 14F4 Signing time: Fri 18 Jul 2025 16:57:15 +0000 Manifest this update: Fri 18 Jul 2025 16:57:14 +0000 Manifest next update: Fri 25 Jul 2025 16:57:14 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: TllgE5FZ1N/SfKMAPNOqqC+KjmAb50v1KJyF9f8TtNo=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: ts6CuXT017m+Eo1tnvA5GQ371D5wqgoVWLN1l6w+WmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5374 (0x14fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: Jul 18 16:57:14 2025 GMT Not After : Jul 25 16:57:14 2025 GMT Subject: CN=687a7ceb-27a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:ee:e6:ad:88:23:03:80:c2:d9:9e:4a:1d: a3:2b:fc:47:17:b3:92:93:5d:33:c2:fd:5c:65:73: 59:a4:27:9e:70:7b:86:79:dc:ab:6a:4b:43:d4:2e: ef:ae:a5:0c:e3:71:80:ea:0c:9c:41:fc:22:21:04: c7:dd:a3:f3:18:6b:e7:12:a1:c3:5f:da:b2:09:9b: 25:12:d0:05:65:c6:e3:d5:ef:b5:73:33:81:b0:76: 26:dc:e9:6f:63:8c:1e:1d:46:4e:9f:69:67:9b:6e: f8:af:3f:5a:c4:e8:71:ef:88:17:2d:fc:02:b1:bc: da:72:bb:67:35:70:66:11:fd:c6:38:11:07:5b:1f: 8a:d9:05:16:d6:07:27:b6:ed:18:19:24:af:13:cd: da:0a:20:82:59:a4:a3:9a:94:f5:87:85:7a:00:09: 05:5d:c2:58:6a:26:93:e8:07:8f:98:cd:b6:a6:e4: 04:24:dc:81:c2:f1:81:64:e2:93:d5:eb:ef:4d:78: 02:96:d8:82:1e:93:4e:7a:6b:2c:61:1e:29:be:a3: d7:84:24:18:9e:a9:c3:23:24:d8:ad:91:9a:dd:c5: 1d:b1:7d:b6:ce:96:2f:51:0d:39:ff:c8:1a:5e:62: 80:1e:9a:13:94:df:33:e5:10:be:c7:aa:63:76:cd: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:5E:97:1D:D0:DC:22:7D:6C:D3:19:55:B9:21:F9:1E:F3:14:75 X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:bd:cf:99:62:61:f6:b8:f7:d8:7c:4e:d5:c5:bb:94:97:8b: a1:89:54:50:ee:60:f1:53:63:6f:e7:4a:cb:a0:4c:37:9a:fb: d6:fc:94:90:cf:53:c6:1d:7d:4e:71:84:81:f1:2b:6b:e0:a5: 1a:af:48:15:74:86:02:75:aa:cb:6e:52:e8:09:39:bb:79:9c: 54:29:1d:30:b4:b2:ee:71:62:cd:ad:e7:50:58:04:a5:56:45: f0:76:05:85:13:d9:b6:d6:19:d3:69:96:c0:ee:c4:9f:3e:b8: 59:89:ce:88:29:f6:91:83:53:cb:e6:58:83:65:63:22:99:6f: 5b:f5:80:44:c5:14:81:7f:79:58:9c:f4:39:a5:12:14:3d:11: f9:77:49:5c:6f:ef:c2:02:0d:31:d3:cc:74:00:03:fa:39:ba: 7f:60:ba:98:5e:8a:c3:36:08:0f:da:6d:c0:53:c8:c4:aa:31: d4:c2:98:ee:7d:94:aa:e0:f7:bb:76:e9:7b:af:1d:60:50:c7: 69:d7:12:6a:e9:5a:1f:b8:ba:2b:72:85:59:ff:1f:da:b2:f9: 03:f0:c8:2a:f0:0b:35:36:23:55:0a:b3:dc:08:4a:bc:8b:29: 7c:e6:b5:e7:72:5c:de:00:74:ce:ad:43:15:fe:fb:2f:ab:cc: 53:b2:4c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjUwNzE4MTY1NzE0WhcNMjUwNzI1MTY1NzE0WjAYMRYwFAYD VQQDEw02ODdhN2NlYi0yN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2ru5q2IIwOAwtmeSh2jK/xHF7OSk10zwv1cZXNZpCeecHuGedyraktD1C7v rqUM43GA6gycQfwiIQTH3aPzGGvnEqHDX9qyCZslEtAFZcbj1e+1czOBsHYm3Olv Y4weHUZOn2lnm274rz9axOhx74gXLfwCsbzacrtnNXBmEf3GOBEHWx+K2QUW1gcn tu0YGSSvE83aCiCCWaSjmpT1h4V6AAkFXcJYaiaT6AePmM22puQEJNyBwvGBZOKT 1evvTXgCltiCHpNOemssYR4pvqPXhCQYnqnDIyTYrZGa3cUdsX22zpYvUQ05/8ga XmKAHpoTlN8z5RC+x6pjds2sCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjmXpcd 0NwifWzTGVW5Ifke8xR1MB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkvc+ZYmH2uPfYfE7VxbuUl4uhiVRQ7mDxU2Nv50rLoEw3mvvW/JSQ z1PGHX1OcYSB8Str4KUar0gVdIYCdarLblLoCTm7eZxUKR0wtLLucWLNredQWASl VkXwdgWFE9m21hnTaZbA7sSfPrhZic6IKfaRg1PL5liDZWMimW9b9YBExRSBf3lY nPQ5pRIUPRH5d0lcb+/CAg0x08x0AAP6Obp/YLqYXorDNggP2m3AU8jEqjHUwpju fZSq4Pe7dul7rx1gUMdp1xJq6VofuLorcoVZ/x/asvkD8Mgq8As1NiNVCrPcCEq8 iyl85rXnclzeAHTOrUMV/vsvq8xTskyx -----END CERTIFICATE-----Generated at Sun Jul 20 10:08:02 2025 by rpki-client