$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft File: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json) Hash identifier: eB9zQIRvr4LOj+iHVI97aES6IpvqUEAcuJihGtDOqzA= Subject key identifier: 65:8A:0F:EE:A7:BB:A4:84:48:CB:E3:20:C7:0A:FB:4F:83:F4:1F:3C Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 Certificate issuer: /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft Manifest number: 04AF Signing time: Fri 04 Apr 2025 23:59:40 +0000 Manifest this update: Fri 04 Apr 2025 23:59:39 +0000 Manifest next update: Fri 11 Apr 2025 23:59:39 +0000 Files and hashes: 1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: ZRLi7gPO6Xi4OGvzwD2QP1W+A1p3nITdUBLhSseRG+Y=) 2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: D4U1lUqveYfyWOIkh6414WCzafazdL5eQysTdY6uwXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4CB Validity Not Before: Apr 4 23:59:39 2025 GMT Not After : Apr 11 23:59:39 2025 GMT Subject: CN=67f0726b-18fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:38:55:40:e6:11:38:8c:94:54:30:dc:b0: 71:00:1e:28:61:5a:3f:0e:a5:b5:19:b9:b1:f5:b0: 13:61:1c:55:96:29:fd:91:8d:51:ab:30:3c:ef:27: ed:46:b0:be:0c:f3:68:d7:8a:1d:1f:b7:8c:a4:98: 4b:7c:7f:dd:5f:a0:92:aa:54:8e:63:d9:9d:1a:0e: 88:6b:2c:22:de:f1:37:5e:84:9c:66:82:30:45:35: 11:a9:01:28:37:22:f2:fd:76:31:c7:2c:e4:3d:0d: 2c:6f:9a:9f:ef:a2:3e:4e:11:22:ee:6a:3d:f7:e3: 96:61:cc:a7:14:a1:9f:76:d4:9b:9b:de:f6:3b:0f: 22:41:ad:b0:a7:99:52:0e:d8:b0:e5:10:1d:b2:41: ee:9a:06:bf:a8:93:24:d5:12:71:2c:43:0a:9d:8a: 46:23:2e:58:f3:d0:9f:a7:9e:7a:cc:97:5c:d0:48: 0e:e3:a7:5a:c6:77:5f:cf:8a:ec:e6:24:3f:3f:e0: f8:96:59:b5:74:79:1d:d2:02:ed:36:71:97:63:af: 84:74:d7:21:fc:76:22:b7:9b:e9:88:be:b1:bf:17: 6e:5f:4f:87:68:8b:e7:3d:e3:65:39:4e:d5:d3:34: 83:a7:e1:7b:14:ac:d3:af:cc:bc:4f:b7:60:99:a1: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8A:0F:EE:A7:BB:A4:84:48:CB:E3:20:C7:0A:FB:4F:83:F4:1F:3C X509v3 Authority Key Identifier: keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5f:36:9b:d3:cf:65:1f:96:00:ab:0c:67:d7:aa:92:d0:e5: fb:06:01:30:a2:c4:ff:c3:57:e2:4d:85:b3:f8:0d:7c:6f:36: 6e:3c:eb:dc:23:e0:78:46:36:8f:6a:d3:df:9f:91:2b:b9:20: 24:ca:e8:5a:86:76:b9:06:bc:4f:8d:a4:da:12:11:65:8a:b7: 8c:78:f1:6c:b2:c5:00:5d:70:83:00:62:e6:21:47:a0:a6:a4: cc:08:3a:1b:27:c2:cf:57:53:2e:72:2d:8b:7a:25:b7:2e:8f: b7:c5:5a:be:6a:95:cd:ba:ce:88:33:5e:80:93:64:10:73:73: ca:50:54:63:d4:f8:2f:9a:6b:b0:3c:ef:82:cd:88:65:e2:0a: 58:64:7a:27:c6:7a:aa:23:a6:c7:68:95:6a:d8:71:86:cb:72: 8f:0d:4d:d1:23:1e:16:cf:ad:61:bd:d5:68:56:64:ec:f6:20: 07:e8:3f:6f:1d:dd:5a:97:95:55:7b:58:fa:18:00:4d:ba:4e: 04:2a:54:cb:21:c6:c8:c8:70:52:8f:50:f9:da:7f:5d:aa:37: 53:7d:63:76:24:91:98:c7:53:cf:79:92:5d:66:f7:a1:c8:cb: e8:ff:41:ca:0d:bc:bb:22:ff:24:ae:73:7f:6e:3d:3f:94:a3: 7f:e5:89:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF OTk3NjEzQTMwHhcNMjUwNDA0MjM1OTM5WhcNMjUwNDExMjM1OTM5WjAYMRYwFAYD VQQDEw02N2YwNzI2Yi0xOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qo4VUDmETiMlFQw3LBxAB4oYVo/DqW1Gbmx9bATYRxVlin9kY1RqzA87yft RrC+DPNo14odH7eMpJhLfH/dX6CSqlSOY9mdGg6Iaywi3vE3XoScZoIwRTURqQEo NyLy/XYxxyzkPQ0sb5qf76I+ThEi7mo99+OWYcynFKGfdtSbm972Ow8iQa2wp5lS Dtiw5RAdskHumga/qJMk1RJxLEMKnYpGIy5Y89Cfp556zJdc0EgO46daxndfz4rs 5iQ/P+D4llm1dHkd0gLtNnGXY6+EdNch/HYit5vpiL6xvxduX0+HaIvnPeNlOU7V 0zSDp+F7FKzTr8y8T7dgmaFb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWKD+6n u6SESMvjIMcK+0+D9B88MB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Xzab089lH5YAqwxn16qS0OX7BgEwosT/w1fiTYWz+A18bzZuPOvc I+B4RjaPatPfn5EruSAkyuhahna5BrxPjaTaEhFlireMePFsssUAXXCDAGLmIUeg pqTMCDobJ8LPV1Muci2LeiW3Lo+3xVq+apXNus6IM16Ak2QQc3PKUFRj1Pgvmmuw PO+CzYhl4gpYZHonxnqqI6bHaJVq2HGGy3KPDU3RIx4Wz61hvdVoVmTs9iAH6D9v Hd1al5VVe1j6GABNuk4EKlTLIcbIyHBSj1D52n9dqjdTfWN2JJGYx1PPeZJdZveh yMvo/0HKDby7Iv8krnN/bj0/lKN/5YmG -----END CERTIFICATE-----Generated at Sat Apr 5 06:58:01 2025 by rpki-client