$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json) Hash identifier: 53aTyaZWmYauQMiFO7RnbMz293jcG/kmgdrz1ge1Aiw= Subject key identifier: DD:FA:D0:95:F7:C0:26:66:F8:B0:6F:A1:4E:65:BA:CA:9D:39:6E:69 Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft Manifest number: 02B0 Signing time: Wed 17 Sep 2025 02:01:13 +0000 Manifest this update: Wed 17 Sep 2025 02:01:12 +0000 Manifest next update: Wed 24 Sep 2025 02:01:12 +0000 Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: ha/8YUPnDINkBjeLcbBfec0sdQroXxzxR4MegZGefBY=) 2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: KV+SoYHbA+Q51JP+NigJCe33FcHjWlimMC267ADRQGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Validity Not Before: Sep 17 02:01:12 2025 GMT Not After : Sep 24 02:01:12 2025 GMT Subject: CN=68ca1668-9188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:1f:28:9f:2b:2d:1d:96:4a:52:da:31:5c: 24:95:fe:d7:1d:45:dc:ca:53:e5:a7:1f:41:9c:1e: 72:ca:ca:e7:8d:20:b5:2e:da:af:11:54:15:24:ba: d4:1a:5c:5e:d5:ab:20:09:41:19:69:bf:32:8c:42: 4f:a6:bf:f8:47:9e:f0:5a:42:6a:24:eb:42:dc:d7: f2:ed:88:92:29:9a:2b:3f:9f:f0:cd:3c:99:02:1d: e4:cb:b1:02:b1:4c:07:ec:ab:d4:6f:08:bd:d7:06: 83:ba:27:ba:dd:de:ba:12:8f:05:46:b6:76:97:38: 17:7e:8e:14:75:8b:17:05:48:52:2d:91:38:22:1a: c8:5b:e5:7f:f8:24:a5:e5:74:0f:83:7b:f6:d8:df: 10:a7:f6:ce:c3:72:c6:29:9a:4e:6e:16:9e:c0:2b: 4c:f6:2e:9c:d3:49:c1:71:09:7c:4e:37:2b:47:66: bc:35:ab:0c:18:11:95:5b:88:cb:25:43:43:bd:7f: a9:11:a7:ec:73:14:5e:bb:2e:04:10:04:8c:f3:c6: 22:62:67:99:ea:4c:c1:eb:8e:4c:93:b4:c6:10:46: 21:d5:43:03:4e:26:ff:3a:88:63:07:2f:f5:da:1d: 39:77:93:fb:48:51:62:85:f0:d9:2a:e8:94:eb:60: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FA:D0:95:F7:C0:26:66:F8:B0:6F:A1:4E:65:BA:CA:9D:39:6E:69 X509v3 Authority Key Identifier: keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6f:f2:31:89:a6:ff:ba:70:36:34:66:e3:68:de:4f:62:51: 80:a2:dd:97:ee:0c:40:74:63:5d:f1:5d:03:4c:a1:46:93:72: 36:8c:e0:b3:89:38:63:6b:71:29:e8:2f:63:e2:78:21:bb:b7: 5d:7d:0d:6e:7f:eb:82:54:11:7d:27:5b:f2:aa:29:52:0c:cb: da:dc:60:d0:c2:eb:a6:03:43:6c:e1:5f:17:cb:d9:28:12:41: 82:79:a3:1c:36:5a:75:07:a0:56:86:aa:0f:07:f8:2d:8a:98: c8:22:4b:a0:04:2a:41:47:5f:b6:18:c7:55:ed:e8:84:41:44: 2c:83:92:ca:ea:27:f0:5a:53:69:db:08:30:e9:18:85:52:18: aa:ba:c6:e7:46:63:3a:b3:6f:6c:0e:e0:5e:3c:4e:dc:b9:20: 27:cc:aa:5e:2e:e6:5e:8a:f8:16:d9:87:85:47:11:85:a2:7e: 60:37:cd:63:9a:ac:dd:aa:50:9d:2d:b7:85:ae:e6:b4:26:f1: e6:95:1e:9e:3a:b9:36:7c:e4:9b:b9:eb:18:8e:47:52:66:76: ab:de:b7:b2:d4:39:69:37:47:88:4b:8c:cd:5b:4b:b0:17:9f: fe:c9:39:5e:5d:ae:3a:c4:e0:9d:70:49:00:d4:07:18:95:c9: e3:1f:ab:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2NjkxMTAvBgNVBAUTKDgzMkZFNTYxNEUwMkQzNTBGODg2NzkwREU0QkRDOTlG NDI2NDU1RTQwHhcNMjUwOTE3MDIwMTEyWhcNMjUwOTI0MDIwMTEyWjAYMRYwFAYD VQQDEw02OGNhMTY2OC05MTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycQfKJ8rLR2WSlLaMVwklf7XHUXcylPlpx9BnB5yysrnjSC1LtqvEVQVJLrU Glxe1asgCUEZab8yjEJPpr/4R57wWkJqJOtC3Nfy7YiSKZorP5/wzTyZAh3ky7EC sUwH7KvUbwi91waDuie63d66Eo8FRrZ2lzgXfo4UdYsXBUhSLZE4IhrIW+V/+CSl 5XQPg3v22N8Qp/bOw3LGKZpObhaewCtM9i6c00nBcQl8TjcrR2a8NasMGBGVW4jL JUNDvX+pEafscxReuy4EEASM88YiYmeZ6kzB645Mk7TGEEYh1UMDTib/OohjBy/1 2h05d5P7SFFihfDZKuiU62B/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN360JX3 wCZm+LBvoU5lusqdOW5pMB8GA1UdIwQYMBaAFIMv5WFOAtNQ+IZ5DeS9yZ9CZFXk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTY2OS9CNTU4QkEwNjBE OTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAxRDRobmtONUwzSm4wSmtW ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5X2xZVTRDMDFENGhua041TDNKbjBKa1ZlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTY2OS9CNTU4QkEwNjBEOTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAx RDRobmtONUwzSm4wSmtWZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMb/Ixiab/unA2NGbjaN5PYlGAot2X7gxAdGNd8V0DTKFGk3I2jOCz iThja3Ep6C9j4nghu7ddfQ1uf+uCVBF9J1vyqilSDMva3GDQwuumA0Ns4V8Xy9ko EkGCeaMcNlp1B6BWhqoPB/gtipjIIkugBCpBR1+2GMdV7eiEQUQsg5LK6ifwWlNp 2wgw6RiFUhiqusbnRmM6s29sDuBePE7cuSAnzKpeLuZeivgW2YeFRxGFon5gN81j mqzdqlCdLbeFrua0JvHmlR6eOrk2fOSbuesYjkdSZnar3rey1DlpN0eIS4zNW0uw F5/+yTleXa46xOCdcEkA1AcYlcnjH6vN -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:33 2025 by rpki-client