$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json) Hash identifier: V4KaJeiTw9gdbfqPC/7bY+L+yKQh/Hw7RozvdhV/7ko= Subject key identifier: 9F:06:75:1A:83:6F:3C:3D:49:6A:DE:62:3C:5E:78:06:12:9A:54:CA Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft Manifest number: 0276 Signing time: Sat 31 May 2025 01:53:01 +0000 Manifest this update: Sat 31 May 2025 01:53:00 +0000 Manifest next update: Sat 07 Jun 2025 01:53:00 +0000 Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: w/szOIVeMR9WdrSgPn3YRAdrpYCv0BHR9ki1ZqIT4xo=) 2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: iNGLEhZ74V/teXh5s40LgFHohuZJ0yOem+a3lr8uSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Validity Not Before: May 31 01:53:00 2025 GMT Not After : Jun 7 01:53:00 2025 GMT Subject: CN=683a60fd-37fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:26:af:70:26:27:9b:64:dc:92:a8:72:70: 64:64:07:67:ac:a5:5f:56:95:d3:4c:8b:44:ec:7e: 36:06:78:e8:a1:4c:d5:a0:25:d7:c9:0d:fc:08:d1: 61:d5:b2:23:c2:22:e7:fa:0b:9c:39:7f:3d:67:d4: 81:21:51:89:ef:b4:f9:0c:1d:db:d7:5e:d6:dc:2b: 57:91:fb:75:8f:3c:4a:6f:07:c0:06:49:f9:dc:66: 41:1d:7b:91:8d:6d:80:fe:f4:46:ff:3a:af:e7:4e: 08:e8:28:9e:e6:97:76:1f:8e:82:53:0b:2f:49:69: 6f:b5:c3:66:9e:2d:d4:53:ae:54:38:8a:1d:32:06: ca:26:1a:86:bb:a4:46:e0:9e:e8:ba:f9:7b:de:2c: c3:68:5e:9c:6d:fe:44:d8:6b:93:a7:79:96:97:c9: 6c:2e:ba:c9:bb:a0:88:85:53:44:82:37:42:24:af: d7:39:f4:73:6e:94:fd:ea:36:10:49:31:5a:29:fd: 99:ac:18:eb:b0:c8:38:b2:80:9b:f4:fa:19:64:68: 74:9e:cf:6a:e3:21:95:c2:0a:38:0d:61:86:a1:e4: 10:0c:d6:16:8e:e4:ae:45:2c:df:05:9c:92:9f:65: 18:b3:54:c0:67:ee:8b:45:d5:e6:28:e4:b9:5b:59: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:75:1A:83:6F:3C:3D:49:6A:DE:62:3C:5E:78:06:12:9A:54:CA X509v3 Authority Key Identifier: keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b3:5d:7a:dd:dd:b8:52:f9:cf:95:66:b3:69:be:03:b5:fa: 45:fa:e1:db:3b:54:77:66:be:64:c2:66:01:d5:80:1f:01:c8: 6f:4e:f1:0f:f7:0b:24:2a:4b:d1:40:7c:b8:de:e9:78:c4:d6: 5a:a7:6a:9d:1f:9c:40:b8:20:8c:c1:33:f7:79:26:1d:7a:bc: 9d:78:97:59:2c:57:b6:ac:71:9a:ec:6d:d0:65:16:a9:87:3b: 50:10:59:90:ef:ea:ec:bc:3a:d7:8b:a5:03:34:45:0c:89:af: 49:33:9f:7d:e1:b4:9b:0c:f0:ee:31:32:d4:9d:13:92:97:05: cc:5f:76:3b:7b:9a:84:e4:12:ef:0f:c8:e0:7f:d4:a8:33:da: 5c:6b:96:18:9e:3c:17:a4:83:73:e0:99:4a:7b:d8:e9:4f:70: 58:0b:17:0c:38:13:11:9c:17:59:3d:ca:b3:1f:5a:22:a6:75: 54:00:ce:35:89:21:dc:08:11:63:1e:e5:19:e3:31:cb:2f:dc: 0e:47:d4:0a:49:84:5d:31:d8:e4:67:0d:4b:8d:81:48:0b:64: d2:b8:e9:5f:16:00:ba:a5:b4:6f:56:fa:a4:ed:f6:4a:79:25: 14:4d:d2:d2:97:90:a4:45:13:ed:7e:0c:8a:23:2e:fc:69:22: 07:56:da:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2NjkxMTAvBgNVBAUTKDgzMkZFNTYxNEUwMkQzNTBGODg2NzkwREU0QkRDOTlG NDI2NDU1RTQwHhcNMjUwNTMxMDE1MzAwWhcNMjUwNjA3MDE1MzAwWjAYMRYwFAYD VQQDEw02ODNhNjBmZC0zN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZImr3AmJ5tk3JKocnBkZAdnrKVfVpXTTItE7H42BnjooUzVoCXXyQ38CNFh 1bIjwiLn+gucOX89Z9SBIVGJ77T5DB3b117W3CtXkft1jzxKbwfABkn53GZBHXuR jW2A/vRG/zqv504I6Cie5pd2H46CUwsvSWlvtcNmni3UU65UOIodMgbKJhqGu6RG 4J7ouvl73izDaF6cbf5E2GuTp3mWl8lsLrrJu6CIhVNEgjdCJK/XOfRzbpT96jYQ STFaKf2ZrBjrsMg4soCb9PoZZGh0ns9q4yGVwgo4DWGGoeQQDNYWjuSuRSzfBZyS n2UYs1TAZ+6LRdXmKOS5W1kZfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8GdRqD bzw9SWreYjxeeAYSmlTKMB8GA1UdIwQYMBaAFIMv5WFOAtNQ+IZ5DeS9yZ9CZFXk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTY2OS9CNTU4QkEwNjBE OTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAxRDRobmtONUwzSm4wSmtW ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5X2xZVTRDMDFENGhua041TDNKbjBKa1ZlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTY2OS9CNTU4QkEwNjBEOTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAx RDRobmtONUwzSm4wSmtWZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcs1163d24UvnPlWazab4DtfpF+uHbO1R3Zr5kwmYB1YAfAchvTvEP 9wskKkvRQHy43ul4xNZap2qdH5xAuCCMwTP3eSYderydeJdZLFe2rHGa7G3QZRap hztQEFmQ7+rsvDrXi6UDNEUMia9JM5994bSbDPDuMTLUnROSlwXMX3Y7e5qE5BLv D8jgf9SoM9pca5YYnjwXpINz4JlKe9jpT3BYCxcMOBMRnBdZPcqzH1oipnVUAM41 iSHcCBFjHuUZ4zHLL9wOR9QKSYRdMdjkZw1LjYFIC2TSuOlfFgC6pbRvVvqk7fZK eSUUTdLSl5CkRRPtfgyKIy78aSIHVtrs -----END CERTIFICATE-----Generated at Sat May 31 17:45:03 2025 by rpki-client