$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft File: gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json) Hash identifier: gMNkMVC1AwEX4oNp0y9a5ReHp7dVnH3ea7DMo4pCBSM= Subject key identifier: AB:CC:12:97:00:A4:61:D4:1E:1B:4A:84:DA:F9:8F:2A:B2:F9:63:00 Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft Manifest number: 1C3E Signing time: Fri 30 May 2025 16:22:36 +0000 Manifest this update: Fri 30 May 2025 16:22:35 +0000 Manifest next update: Fri 06 Jun 2025 16:22:35 +0000 Files and hashes: 1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: 7ZpDTUlMoHxXmlcVJrbjo3BId5gtwHRv0TUittbMCSQ=) 2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: X/4GCRMZ/gVyKNef6s/CyH3yqYjWWcRQZHTiFuRUpcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7246 (0x1c4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: May 30 16:22:35 2025 GMT Not After : Jun 6 16:22:35 2025 GMT Subject: CN=6839db4b-0915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:cd:d8:41:c0:f2:96:d9:ec:a0:7f:57:f2: c5:58:a4:9b:65:85:ee:fc:f0:d1:2a:a7:fd:e3:6d: bc:d6:c4:50:46:52:d5:03:6f:d5:65:5f:9f:c2:41: 84:20:11:72:64:f2:ec:85:0b:56:e8:40:41:1e:fe: 65:cf:1a:94:b6:8c:b1:3e:79:3a:13:50:61:11:4a: 8e:b5:bf:0b:09:16:64:96:68:b4:a6:53:ec:7d:03: 55:3b:7b:ae:d1:08:10:c7:e9:b3:a0:10:03:ab:3d: 5e:7e:bd:94:70:a7:f9:e7:13:3f:7a:46:d0:ff:82: ed:c9:fd:53:96:3e:af:b3:e7:6e:51:8a:ba:ae:84: 3e:f3:fa:d4:06:e6:99:52:cd:70:91:2e:bf:75:f9: e9:87:26:64:d4:40:09:17:fc:01:39:f8:72:73:1f: a1:60:04:44:9b:a6:8e:bd:00:49:d3:95:1e:66:4c: 63:c7:c7:aa:38:f3:b0:38:8e:98:24:a2:b0:36:92: 75:2d:d3:63:a7:34:23:18:96:4c:42:d3:b1:5e:2a: 3c:5c:2f:23:30:9d:2a:25:94:6c:49:4c:e4:1c:9b: 98:7e:54:66:ba:1e:c4:72:7e:9e:09:46:84:0b:32: 9f:b6:d5:2a:2a:90:41:d1:e1:a1:8c:62:6d:7d:f3: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:12:97:00:A4:61:D4:1E:1B:4A:84:DA:F9:8F:2A:B2:F9:63:00 X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:bd:43:dc:c5:88:fb:47:e7:d6:fc:c4:8a:a4:f1:2a:80:cb: 24:8a:a2:de:1b:9a:73:51:cb:50:2b:f1:bd:73:a1:44:bc:ed: 94:d4:f6:b9:2e:35:25:fe:91:9e:0d:1b:cb:a2:e0:a0:6c:4d: e1:1f:92:61:a2:70:b5:2a:1b:50:80:d2:40:ab:26:94:bb:4e: bb:16:f8:eb:60:fd:92:5c:42:5b:fc:63:57:37:9f:ae:c8:e1: b0:56:79:63:72:1c:96:05:fb:ad:76:f6:23:36:78:af:bc:cd: ca:bb:e5:2c:67:40:7e:f7:20:eb:f1:62:9a:53:77:2a:7d:6a: 4b:c5:00:c8:b9:40:17:4c:45:58:4e:71:06:19:81:51:7b:da: 31:d9:0d:0d:32:1a:36:f7:cb:bc:14:15:da:78:24:a9:84:93: b6:ff:cf:27:7e:77:14:11:30:24:f8:49:22:51:0c:2e:0a:19: 2a:df:d7:13:c0:45:03:9d:c0:cb:d7:c7:50:3a:84:3d:f0:f5: 78:b3:eb:fe:ef:f6:66:98:69:49:2c:b4:2d:41:37:b2:f7:e5: a8:4d:ff:3f:ed:a4:56:04:a4:97:c6:df:42:32:e6:ee:be:49: ac:be:a6:80:9c:5f:8a:a3:55:ed:34:ec:88:68:7f:37:a6:58: e1:6a:2d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjUwNTMwMTYyMjM1WhcNMjUwNjA2MTYyMjM1WjAYMRYwFAYD VQQDEw02ODM5ZGI0Yi0wOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ3N2EHA8pbZ7KB/V/LFWKSbZYXu/PDRKqf942281sRQRlLVA2/VZV+fwkGE IBFyZPLshQtW6EBBHv5lzxqUtoyxPnk6E1BhEUqOtb8LCRZklmi0plPsfQNVO3uu 0QgQx+mzoBADqz1efr2UcKf55xM/ekbQ/4Ltyf1Tlj6vs+duUYq6roQ+8/rUBuaZ Us1wkS6/dfnphyZk1EAJF/wBOfhycx+hYAREm6aOvQBJ05UeZkxjx8eqOPOwOI6Y JKKwNpJ1LdNjpzQjGJZMQtOxXio8XC8jMJ0qJZRsSUzkHJuYflRmuh7Ecn6eCUaE CzKfttUqKpBB0eGhjGJtffP9zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvMEpcA pGHUHhtKhNr5jyqy+WMAMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU S29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAovUPcxYj7R+fW/MSKpPEqgMskiqLeG5pzUctQK/G9c6FEvO2U1Pa5 LjUl/pGeDRvLouCgbE3hH5JhonC1KhtQgNJAqyaUu067FvjrYP2SXEJb/GNXN5+u yOGwVnljchyWBfutdvYjNnivvM3Ku+UsZ0B+9yDr8WKaU3cqfWpLxQDIuUAXTEVY TnEGGYFRe9ox2Q0NMho298u8FBXaeCSphJO2/88nfncUETAk+EkiUQwuChkq39cT wEUDncDL18dQOoQ98PV4s+v+7/ZmmGlJLLQtQTey9+WoTf8/7aRWBKSXxt9CMubu vkmsvqaAnF+Ko1XtNOyIaH83pljhai15 -----END CERTIFICATE-----Generated at Sat May 31 17:28:51 2025 by rpki-client