$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: +ZCvjATcNUjWFKTKcoghMP747FFuKQ3qgIN3+OoZvg8= Subject key identifier: AF:0C:58:0A:3B:C7:47:F0:13:E0:A6:03:30:63:DC:9F:6A:98:52:72 Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 020C Signing time: Wed 17 Sep 2025 02:42:44 +0000 Manifest this update: Wed 17 Sep 2025 02:42:44 +0000 Manifest next update: Wed 24 Sep 2025 02:42:44 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: rApQtA4WCpngGl5aZU+a+/xv0GqrdYJel+GxgJDxkE0=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Sep 17 02:42:44 2025 GMT Not After : Sep 24 02:42:44 2025 GMT Subject: CN=68ca2024-48e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:a7:9a:76:5d:34:27:28:7f:9d:75:52:cc: 5f:9e:7e:20:13:22:0e:a8:99:69:8e:8d:62:6b:c6: 0e:84:cb:f1:a5:c0:45:f8:20:f2:2d:fc:a2:6b:26: a8:8a:1e:e9:26:95:48:96:f4:db:8a:31:30:b1:17: ec:59:f3:c8:25:bb:e6:d9:99:82:c0:84:14:0c:ec: 94:f3:96:0a:b3:76:22:32:7f:d7:d2:8f:c2:a5:d4: 18:99:57:2d:55:28:50:4d:1c:f5:bd:29:7d:f7:68: c9:d6:48:ff:69:87:a4:d5:dc:f8:9a:96:01:26:09: 0d:bb:1b:42:88:76:d2:05:3f:a5:a1:13:03:f4:4f: 01:37:4e:aa:cf:c2:88:fc:44:65:d1:4c:16:e9:7f: 4f:cc:91:2c:97:45:1b:89:be:22:92:ff:2a:b4:5d: 6c:f4:a4:04:08:6c:05:a0:63:22:35:47:03:bb:6f: 5e:de:a2:38:9d:14:89:d2:f0:53:e4:a9:ea:71:98: 61:a4:47:e1:3e:d1:80:17:41:40:e7:87:a1:30:58: d2:13:8b:84:fb:62:6e:ba:6c:6a:04:6a:3a:68:9e: 77:bc:19:84:77:d5:09:38:2b:f1:2b:c9:52:e4:c8: e9:10:46:9f:a9:48:f3:42:57:31:31:ce:ca:33:41: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0C:58:0A:3B:C7:47:F0:13:E0:A6:03:30:63:DC:9F:6A:98:52:72 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:98:fd:82:66:ae:3e:ed:c8:b9:a9:45:60:80:e5:fc:51:5b: 47:86:a8:3c:f1:8a:12:97:12:00:91:2b:b7:50:5a:75:23:2e: da:47:26:0a:ab:17:b2:f2:3f:56:83:23:79:86:7a:bb:0b:da: 63:02:8f:05:84:88:cb:72:52:b8:d3:eb:55:0c:4c:eb:42:49: 6a:25:c7:91:ec:35:4c:5b:30:b9:4e:86:27:13:1d:99:ca:7a: f2:16:73:3d:75:be:af:c7:de:73:5f:95:58:a9:b2:95:6c:c9: 70:45:37:fd:bb:56:c9:6e:3a:5e:98:01:cb:9c:1d:c6:25:fd: 68:88:78:12:e0:22:e6:8d:7f:b2:a1:a4:22:90:77:3c:88:a9: 53:3b:da:f2:2f:ee:7a:19:13:79:7e:ef:3e:91:21:01:55:b9: 6d:16:d5:14:9f:8c:8f:eb:a9:76:fa:0e:7d:33:50:e7:92:9d: 6b:69:72:d0:4a:df:7e:6e:25:69:66:52:33:e6:28:4c:18:51: c4:8f:a5:b2:f3:49:46:6b:dd:10:25:d1:56:ab:e4:63:a3:b7: 5c:9f:53:c6:8e:dd:db:7f:66:9e:34:63:91:37:99:5f:2f:2c: 55:8b:d1:bb:94:c7:a2:b9:00:c0:49:ea:41:be:ef:97:f0:eb: ac:b9:af:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUwOTE3MDI0MjQ0WhcNMjUwOTI0MDI0MjQ0WjAYMRYwFAYD VQQDEw02OGNhMjAyNC00OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQWnmnZdNCcof511Usxfnn4gEyIOqJlpjo1ia8YOhMvxpcBF+CDyLfyiayao ih7pJpVIlvTbijEwsRfsWfPIJbvm2ZmCwIQUDOyU85YKs3YiMn/X0o/CpdQYmVct VShQTRz1vSl992jJ1kj/aYek1dz4mpYBJgkNuxtCiHbSBT+loRMD9E8BN06qz8KI /ERl0UwW6X9PzJEsl0Ubib4ikv8qtF1s9KQECGwFoGMiNUcDu29e3qI4nRSJ0vBT 5KnqcZhhpEfhPtGAF0FA54ehMFjSE4uE+2JuumxqBGo6aJ53vBmEd9UJOCvxK8lS 5MjpEEafqUjzQlcxMc7KM0FOEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8MWAo7 x0fwE+CmAzBj3J9qmFJyMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArmP2CZq4+7ci5qUVggOX8UVtHhqg88YoSlxIAkSu3UFp1Iy7aRyYK qxey8j9WgyN5hnq7C9pjAo8FhIjLclK40+tVDEzrQklqJceR7DVMWzC5ToYnEx2Z ynryFnM9db6vx95zX5VYqbKVbMlwRTf9u1bJbjpemAHLnB3GJf1oiHgS4CLmjX+y oaQikHc8iKlTO9ryL+56GRN5fu8+kSEBVbltFtUUn4yP66l2+g59M1Dnkp1raXLQ St9+biVpZlIz5ihMGFHEj6Wy80lGa90QJdFWq+Rjo7dcn1PGjt3bf2aeNGORN5lf LyxVi9G7lMeiuQDASepBvu+X8Ousua9y -----END CERTIFICATE-----Generated at Thu Sep 18 06:57:10 2025 by rpki-client