$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft File: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json) Hash identifier: 2jDxg6BDLi0G+i9+jtvRfQH4FVLKpFyOAav151s/L30= Subject key identifier: 2C:82:3F:5D:37:5E:5A:78:20:55:1D:87:0C:8D:B7:7E:6A:25:06:9E Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 Certificate issuer: /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft Manifest number: 04CA Signing time: Sat 31 May 2025 00:00:52 +0000 Manifest this update: Sat 31 May 2025 00:00:52 +0000 Manifest next update: Sat 07 Jun 2025 00:00:52 +0000 Files and hashes: 1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: aYv90sUXn97ikc3FH2C1OOMhDE2MfdPRAi9/ZTTV+t8=) 2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: D4U1lUqveYfyWOIkh6414WCzafazdL5eQysTdY6uwXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Validity Not Before: May 31 00:00:52 2025 GMT Not After : Jun 7 00:00:52 2025 GMT Subject: CN=683a46b4-cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:72:cb:ba:33:24:69:d0:3b:03:fa:d3:4e: fe:b8:ac:37:f5:a8:e1:35:71:6c:eb:34:87:ad:8b: 36:f8:b7:fc:b9:ea:b8:12:41:ff:40:97:b4:96:56: 0b:3a:d5:30:75:ae:38:9a:fd:86:e0:e1:b1:33:e5: 4c:bf:ec:08:9a:cf:99:1b:bb:c9:5b:d4:70:95:95: 2c:e5:f2:a7:fa:d6:5d:1b:37:8d:c4:e3:3d:83:1e: 3e:dd:43:42:6f:bf:70:7b:4c:ba:f9:4f:d9:ce:e0: bf:a2:c3:ef:98:c5:f4:4d:ab:a4:88:2a:e2:6e:6f: 2f:38:62:b2:44:21:8f:66:ae:25:8f:dc:44:6f:d5: c9:95:99:d6:50:c7:c8:72:ae:4b:55:6f:30:ac:15: ad:c8:31:98:50:2e:db:1d:e2:96:2f:76:55:8b:92: 78:f7:93:46:37:44:ba:50:1b:52:4e:71:11:49:fa: 16:76:f4:1d:4a:5b:47:3b:7a:17:c5:c1:2e:ae:87: 7a:8c:95:df:6c:2a:0f:b7:cc:57:99:b9:90:b3:bf: 02:de:17:1e:f7:59:f3:b5:7e:36:d3:01:e8:54:74: 23:01:12:c2:b7:59:49:d5:c4:c0:ed:58:41:de:8a: 97:6c:83:5c:3e:15:e4:68:20:91:2b:ef:f4:8e:ee: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:82:3F:5D:37:5E:5A:78:20:55:1D:87:0C:8D:B7:7E:6A:25:06:9E X509v3 Authority Key Identifier: keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:87:ba:29:c0:05:6d:7c:9f:f1:63:39:31:86:7f:c7:8f:4c: df:ec:e9:6f:45:c2:bd:67:db:8f:9d:2d:1f:4f:be:f7:2d:58: ce:23:11:c0:f4:4e:3c:c4:ef:15:44:6d:ce:35:de:b8:97:5c: 8f:71:8d:00:cc:c4:60:d4:3e:51:bd:25:55:88:0b:5c:ae:7e: 37:f2:85:fd:25:e4:97:5d:6c:81:4d:97:f4:7d:d5:d6:c1:d2: d1:4a:a8:8c:11:57:6e:c7:c8:8a:91:31:07:09:3d:98:10:36: ac:63:b1:a7:70:1c:6c:40:9a:f1:22:c2:d1:ec:c4:22:4d:a9: d8:95:ab:6a:f8:bf:20:d3:8f:18:47:b4:b0:f0:1e:f5:e9:02: f2:7f:96:c9:fa:05:e6:cb:0e:4a:0f:62:4c:03:38:78:37:4c: 04:eb:fd:e1:93:c9:c4:53:53:e3:ca:d6:34:d3:98:80:60:06: 3d:80:5e:45:ec:77:1b:02:6d:b9:db:b7:4c:38:6c:6b:d7:d3: bf:f2:1b:e7:6b:0e:e6:f0:92:85:c8:19:f5:65:ec:fd:da:d6: f5:e3:14:9d:22:a3:8a:06:3a:b3:27:26:34:b1:8a:4b:22:39: 3d:06:fc:ca:23:6e:e5:6c:62:ff:51:6e:87:7c:78:53:74:c9: 2c:be:b1:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF OTk3NjEzQTMwHhcNMjUwNTMxMDAwMDUyWhcNMjUwNjA3MDAwMDUyWjAYMRYwFAYD VQQDEw02ODNhNDZiNC1jY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uRyy7ozJGnQOwP6007+uKw39ajhNXFs6zSHrYs2+Lf8ueq4EkH/QJe0llYL OtUwda44mv2G4OGxM+VMv+wIms+ZG7vJW9RwlZUs5fKn+tZdGzeNxOM9gx4+3UNC b79we0y6+U/ZzuC/osPvmMX0TaukiCribm8vOGKyRCGPZq4lj9xEb9XJlZnWUMfI cq5LVW8wrBWtyDGYUC7bHeKWL3ZVi5J495NGN0S6UBtSTnERSfoWdvQdSltHO3oX xcEurod6jJXfbCoPt8xXmbmQs78C3hce91nztX420wHoVHQjARLCt1lJ1cTA7VhB 3oqXbINcPhXkaCCRK+/0ju4rSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyCP103 Xlp4IFUdhwyNt35qJQaeMB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgh7opwAVtfJ/xYzkxhn/Hj0zf7OlvRcK9Z9uPnS0fT773LVjOIxHA 9E48xO8VRG3ONd64l1yPcY0AzMRg1D5RvSVViAtcrn438oX9JeSXXWyBTZf0fdXW wdLRSqiMEVdux8iKkTEHCT2YEDasY7GncBxsQJrxIsLR7MQiTanYlatq+L8g048Y R7Sw8B716QLyf5bJ+gXmyw5KD2JMAzh4N0wE6/3hk8nEU1PjytY005iAYAY9gF5F 7HcbAm2527dMOGxr19O/8hvnaw7m8JKFyBn1Zez92tb14xSdIqOKBjqzJyY0sYpL Ijk9BvzKI27lbGL/UW6HfHhTdMksvrH1 -----END CERTIFICATE-----Generated at Sat May 31 15:02:51 2025 by rpki-client