$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json) Hash identifier: OKpG9TCfanZIgOp7cRmCd3D98Jd1xCgadplUrTuMUPM= Subject key identifier: 41:AD:B0:DA:54:53:94:91:3D:42:88:D9:FA:72:06:0D:70:B4:90:A8 Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft Manifest number: 0647 Signing time: Fri 30 May 2025 22:48:45 +0000 Manifest this update: Fri 30 May 2025 22:48:45 +0000 Manifest next update: Fri 06 Jun 2025 22:48:45 +0000 Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: /yJqUplPeH0eNnGyHXScFlY2v0vpYIYvuGMZvJ4QePA=) 2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: rIs0TSp/FOVS2yEmJo3gyqgsWO9NpZnz1xIrp85P4OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: May 30 22:48:45 2025 GMT Not After : Jun 6 22:48:45 2025 GMT Subject: CN=683a35cd-bb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:d2:f3:07:2f:39:e7:4b:16:6e:58:94:47: aa:c5:b9:e3:a7:d3:bd:53:30:94:f1:a6:a8:64:a7: bf:cb:ca:5c:5d:89:db:ec:d2:5c:6b:ab:15:0b:4f: ba:67:ae:b8:d3:52:81:da:5c:67:5d:c0:20:1e:57: 30:c2:a5:72:b5:7e:cf:88:1a:de:dc:14:62:15:ea: cf:9b:1d:ea:6c:40:c0:83:45:9e:44:21:0c:81:cd: 89:f9:bf:b6:d3:e4:b1:a1:26:86:5d:98:95:8a:7e: 9d:54:c2:6a:89:15:f1:6f:ec:2e:03:21:5d:cb:46: 5f:5a:5b:53:69:79:a1:6f:90:03:c7:09:11:5e:66: f7:4d:17:53:ed:af:4b:7b:39:f4:56:e7:ab:a5:56: ac:a5:3e:a1:af:25:0b:18:c6:3a:bf:6e:5f:96:80: 1a:70:15:2d:80:62:7f:7e:12:74:63:f1:fb:53:29: 2e:a4:66:05:3c:93:c2:24:a8:d4:bb:fb:ab:62:06: 71:0d:0a:f7:35:44:66:6e:e4:76:22:94:f2:16:52: 6a:b2:04:9c:2d:30:ce:29:1d:10:ae:d1:43:90:70: 53:8e:1a:d6:b3:59:7a:a0:d8:25:fb:92:5a:6c:40: dc:60:7f:15:e8:be:e2:4f:4f:bd:1a:56:0b:d7:0e: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AD:B0:DA:54:53:94:91:3D:42:88:D9:FA:72:06:0D:70:B4:90:A8 X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:37:bf:8c:f5:3d:d6:e2:5f:ef:65:bc:28:7a:70:62:ff:a9: 83:fb:09:5f:97:e9:41:10:9d:41:7f:7a:f8:e6:51:be:6b:36: 7c:c9:db:1f:81:98:02:85:11:d4:f6:f6:b1:aa:b4:3d:3e:fe: 7b:06:b4:f0:91:a9:25:92:58:34:0d:e4:48:13:a7:70:74:73: bc:8e:a8:6d:a4:3c:8f:67:8c:7b:5c:02:e7:21:29:17:69:37: 16:28:7e:a7:22:31:b3:52:c2:c8:33:a3:87:38:5c:9f:e4:cd: 5d:26:35:cd:75:9b:dc:be:07:9f:83:9e:39:0f:9e:97:26:dd: 1b:1f:6c:2d:71:46:10:69:91:68:de:fc:73:56:5f:0b:a8:20: 73:fc:41:04:80:97:d5:d5:5e:be:6c:c3:46:e9:ae:eb:67:4c: 83:66:e8:02:94:d9:81:e5:ec:9c:e1:8f:7c:90:1d:b1:59:17: 82:6e:45:96:54:95:ee:d6:14:db:14:96:37:00:fb:6e:9a:fb: 90:78:e1:88:82:22:9d:2d:be:70:d2:06:f0:b5:04:50:eb:95: 93:49:45:d0:43:57:8e:89:ee:f5:e8:22:72:f4:8e:2d:d5:13: 27:37:87:f1:c3:7d:b0:55:dd:3e:f7:cd:21:b7:e1:ac:50:1d: d6:d8:9f:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjUwNTMwMjI0ODQ1WhcNMjUwNjA2MjI0ODQ1WjAYMRYwFAYD VQQDEw02ODNhMzVjZC1iYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaTS8wcvOedLFm5YlEeqxbnjp9O9UzCU8aaoZKe/y8pcXYnb7NJca6sVC0+6 Z66401KB2lxnXcAgHlcwwqVytX7PiBre3BRiFerPmx3qbEDAg0WeRCEMgc2J+b+2 0+SxoSaGXZiVin6dVMJqiRXxb+wuAyFdy0ZfWltTaXmhb5ADxwkRXmb3TRdT7a9L ezn0VuerpVaspT6hryULGMY6v25floAacBUtgGJ/fhJ0Y/H7UykupGYFPJPCJKjU u/urYgZxDQr3NURmbuR2IpTyFlJqsgScLTDOKR0QrtFDkHBTjhrWs1l6oNgl+5Ja bEDcYH8V6L7iT0+9GlYL1w5xYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGtsNpU U5SRPUKI2fpyBg1wtJCoMB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBRC80QjY1MDY1ODhERTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpj MTR2Y09pRXJDMzV2a0xfR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGN7+M9T3W4l/vZbwoenBi/6mD+wlfl+lBEJ1Bf3r45lG+azZ8ydsf gZgChRHU9vaxqrQ9Pv57BrTwkaklklg0DeRIE6dwdHO8jqhtpDyPZ4x7XALnISkX aTcWKH6nIjGzUsLIM6OHOFyf5M1dJjXNdZvcvgefg545D56XJt0bH2wtcUYQaZFo 3vxzVl8LqCBz/EEEgJfV1V6+bMNG6a7rZ0yDZugClNmB5eyc4Y98kB2xWReCbkWW VJXu1hTbFJY3APtumvuQeOGIgiKdLb5w0gbwtQRQ65WTSUXQQ1eOie716CJy9I4t 1RMnN4fxw32wVd0+980ht+GsUB3W2J+C -----END CERTIFICATE-----Generated at Sat May 31 17:46:28 2025 by rpki-client