$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft File: gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json) Hash identifier: zViKMEX8Haft3+5s1L/dBWAFAgasSomVCGm4brDLhDo= Subject key identifier: AF:E0:36:46:D4:25:2A:42:36:9F:12:0D:1D:A5:34:6E:FF:60:88:F0 Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Certificate serial: 0751 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft Manifest number: 074B Signing time: Sun 20 Jul 2025 21:48:57 +0000 Manifest this update: Sun 20 Jul 2025 21:48:57 +0000 Manifest next update: Sun 27 Jul 2025 21:48:57 +0000 Files and hashes: 1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: 4u2EvSp6FgDk5+ygYV8dhRbAySQt/dNDxhQY2UvAEq4=) 2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1873 (0x751) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Validity Not Before: Jul 20 21:48:57 2025 GMT Not After : Jul 27 21:48:57 2025 GMT Subject: CN=687d6449-3af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:92:f8:73:91:37:06:21:97:04:2f:7c:92: 58:ea:dc:a0:49:3b:a1:60:a4:98:5e:d3:9a:5a:67: 88:73:35:d8:37:34:d9:31:78:3c:66:e3:cd:4a:c3: a4:4a:0c:87:57:fc:ed:32:7d:26:ba:63:2b:6e:86: 86:21:a9:2c:73:ac:e2:0a:0f:be:9f:2e:c3:66:85: 99:18:7d:9c:c7:15:05:fb:53:4e:4a:21:eb:5d:66: 64:e9:cf:ba:95:74:b7:56:a2:e6:a7:f4:87:df:4d: ae:cf:7c:2a:3d:29:26:b3:6d:76:fb:9d:12:05:08: b2:6f:f6:4d:f4:fb:ff:cd:05:91:e3:86:6a:ee:e2: 0b:a7:13:1b:94:0a:d2:5e:94:5f:fc:b4:18:f9:dd: df:9d:2c:f6:02:1b:da:74:fe:15:06:b5:41:09:08: 17:cc:f4:91:49:25:7b:5a:bd:e7:0a:fc:69:b2:a5: a3:70:4d:ed:2c:81:fa:fb:e4:b2:51:91:90:5b:07: 47:d3:26:ee:f7:fb:fa:11:7a:7d:d9:ad:0d:ef:dc: 0c:fb:8f:79:c0:a9:1c:ce:b4:c7:a7:5f:15:3d:59: f6:7c:00:47:0d:94:0a:9b:57:87:fe:d9:b1:59:4a: bc:c9:2b:94:ba:07:18:77:fa:57:2a:61:30:39:3b: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:36:46:D4:25:2A:42:36:9F:12:0D:1D:A5:34:6E:FF:60:88:F0 X509v3 Authority Key Identifier: keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e5:0c:1c:ae:ba:6d:fc:e0:cd:34:85:13:53:23:e6:05:e8: 7d:79:61:42:29:65:19:50:a3:e0:fa:fe:e1:e1:14:c5:73:86: b4:ac:bb:52:fb:44:d7:4c:91:08:ff:85:fb:46:d2:87:4a:24: 11:8a:fb:1b:4f:59:86:97:e5:5b:59:87:1f:3b:2e:98:ad:d8: 22:fe:da:eb:fb:88:90:41:03:9b:b6:c4:e0:7e:4c:06:3e:80: 74:b1:52:70:e9:1d:03:91:77:af:7f:50:fe:46:16:c1:2f:1c: 74:57:db:cb:14:7e:52:4e:f5:76:73:b0:98:74:28:c7:e9:a6: d9:30:f7:e5:7f:26:d5:7c:15:2d:c8:37:e6:42:01:a6:ce:f0: 91:30:ed:94:96:c1:d9:60:31:dd:83:72:fc:01:51:43:e3:8e: 83:47:b6:ac:a9:50:ee:79:ca:e4:16:c3:bb:87:c9:26:6a:f1: da:98:4e:c5:45:f2:33:5e:f3:3b:5c:53:9e:ce:33:2c:e6:ae: 8f:51:7f:a3:cb:f9:24:9e:da:f9:c0:41:cf:2d:64:35:3b:23: bc:2f:56:a9:16:31:97:07:ad:7b:06:c1:11:74:79:f9:42:58: df:3a:a2:8e:b3:4f:e7:54:4d:d8:20:4e:ea:74:f4:1b:89:2d: 26:77:5c:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwMjkxMTAvBgNVBAUTKDgzMkNDMDU2RTIzRTM4OEFFMzc4MUE1MjBCREQ5MTE2 OTYzNkU1OUIwHhcNMjUwNzIwMjE0ODU3WhcNMjUwNzI3MjE0ODU3WjAYMRYwFAYD VQQDEw02ODdkNjQ0OS0zYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoCS+HORNwYhlwQvfJJY6tygSTuhYKSYXtOaWmeIczXYNzTZMXg8ZuPNSsOk SgyHV/ztMn0mumMrboaGIaksc6ziCg++ny7DZoWZGH2cxxUF+1NOSiHrXWZk6c+6 lXS3VqLmp/SH302uz3wqPSkms212+50SBQiyb/ZN9Pv/zQWR44Zq7uILpxMblArS XpRf/LQY+d3fnSz2AhvadP4VBrVBCQgXzPSRSSV7Wr3nCvxpsqWjcE3tLIH6++Sy UZGQWwdH0ybu9/v6EXp92a0N79wM+495wKkczrTHp18VPVn2fABHDZQKm1eH/tmx WUq8ySuUugcYd/pXKmEwOTsMbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/gNkbU JSpCNp8SDR2lNG7/YIjwMB8GA1UdIwQYMBaAFIMswFbiPjiK43gaUgvdkRaWNuWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTAyOS8xMDg5N0IzMjJG QjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9JcmplQnBTQzkyUkZwWTI1 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5ekFWdUktT0lyamVCcFNDOTJSRnBZMjVacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTAyOS8xMDg5N0IzMjJGQjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9J cmplQnBTQzkyUkZwWTI1WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr5Qwcrrpt/ODNNIUTUyPmBeh9eWFCKWUZUKPg+v7h4RTFc4a0rLtS +0TXTJEI/4X7RtKHSiQRivsbT1mGl+VbWYcfOy6Yrdgi/trr+4iQQQObtsTgfkwG PoB0sVJw6R0DkXevf1D+RhbBLxx0V9vLFH5STvV2c7CYdCjH6abZMPflfybVfBUt yDfmQgGmzvCRMO2UlsHZYDHdg3L8AVFD446DR7asqVDuecrkFsO7h8kmavHamE7F RfIzXvM7XFOezjMs5q6PUX+jy/kkntr5wEHPLWQ1OyO8L1apFjGXB617BsERdHn5 QljfOqKOs0/nVE3YIE7qdPQbiS0md1xI -----END CERTIFICATE-----Generated at Mon Jul 21 06:33:43 2025 by rpki-client