$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json) Hash identifier: /EQO0QkE63qWRgeTh7h93Zb4vGFHxhOLt/Q4Iwwu8gI= Subject key identifier: 21:CC:C3:60:F4:C6:2A:E8:B2:C2:B3:06:44:F8:8B:06:E5:81:AE:C1 Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft Manifest number: 05 Signing time: Sat 19 Jul 2025 06:20:30 +0000 Manifest this update: Sat 19 Jul 2025 06:20:30 +0000 Manifest next update: Sat 26 Jul 2025 06:20:30 +0000 Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: 36Es69G+b3M2C00S3crw9bQT5gBb/aEtPJ32xX8fljo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Validity Not Before: Jul 19 06:20:30 2025 GMT Not After : Jul 26 06:20:30 2025 GMT Subject: CN=687b392e-b45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:58:68:21:47:98:e2:57:94:65:f4:78:aa: 76:66:e4:0f:db:27:5e:cc:6d:04:75:b7:f0:56:29: 4b:54:8a:d2:fb:62:62:64:c4:33:bf:1d:28:3d:19: a6:d5:78:ac:5c:3c:49:54:e8:f0:b1:02:1b:1d:30: 32:12:81:9b:e3:67:4c:41:75:7d:6b:d9:12:cc:ee: b1:ef:95:6d:b7:a2:1e:31:bc:3a:14:9e:54:66:cc: 67:a9:6d:cb:6c:68:e4:98:0d:3d:f1:cf:f2:cd:a4: ef:e9:cb:3c:af:52:0f:1b:fa:5d:61:e7:f6:9f:52: 55:0d:31:22:0a:51:82:32:78:c6:f4:6b:42:29:d8: 71:27:35:6d:21:8e:95:08:2f:ae:7e:da:bf:15:1c: fe:ef:eb:ed:88:88:2c:f1:13:ec:44:e0:b9:69:fc: 12:31:eb:53:80:7f:43:d7:65:a5:89:a5:90:88:cd: 86:2a:e5:0f:65:2e:3d:e4:ea:da:62:cf:18:5e:18: ad:98:c1:72:ad:34:14:50:38:c5:0a:15:29:6d:86: 4b:83:f4:81:53:58:ab:79:da:fa:9f:ad:7c:07:34: 69:74:31:03:41:0c:b8:fc:30:45:89:e2:1e:63:e2: ba:fa:ba:65:fa:ce:05:92:8a:80:4c:b0:19:70:38: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:C3:60:F4:C6:2A:E8:B2:C2:B3:06:44:F8:8B:06:E5:81:AE:C1 X509v3 Authority Key Identifier: keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4b:69:e4:b0:71:1b:e3:6e:c6:53:1e:b9:3b:ef:ed:f6:bd: ff:85:96:50:c9:8f:d8:7e:27:07:08:77:79:4e:ac:97:cc:74: 38:6b:e3:fc:28:7c:26:b3:50:e7:2f:77:a4:c6:b5:25:54:9b: db:37:c4:00:e5:1b:1b:f1:35:45:44:83:b2:3c:42:e6:2b:d4: b7:13:59:ca:f3:96:20:9b:7f:a8:e1:e1:3e:51:17:29:6d:2e: c1:95:b1:49:8d:2e:8a:f7:70:65:9d:00:b7:2e:75:81:81:94: 74:07:a3:04:88:72:f2:96:ea:b3:13:9c:ab:58:cb:c9:84:47: 41:d8:e9:87:2c:4a:f5:39:49:80:25:ec:5a:ea:ba:45:b8:85: ca:c7:ae:4a:6f:7d:8d:b8:6b:4c:51:66:e9:82:c2:0b:67:ee: 33:07:57:85:0a:6f:07:e6:5d:41:48:7b:b4:f5:e9:ab:29:ec: ac:02:af:21:3a:99:3f:7e:fa:a6:16:9f:af:d3:d0:6a:fd:51: 0f:c0:c5:7f:9c:78:c4:3c:3a:b3:07:9e:c5:58:d4:5a:0e:aa: d2:7b:cd:cf:b8:31:79:ac:7f:ed:7e:a2:5d:eb:aa:d5:da:57: 95:4e:23:b7:3a:e8:4f:94:7f:e8:96:0c:a0:80:2f:ef:4d:43: cc:04:d3:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoODE4QkJFMDUxMTA4QTlBNjJCMDZGQzY5RTRCRkEzNjk3 RTY1RTMwRjAeFw0yNTA3MTkwNjIwMzBaFw0yNTA3MjYwNjIwMzBaMBgxFjAUBgNV BAMTDTY4N2IzOTJlLWI0NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmFhoIUeY4leUZfR4qnZm5A/bJ17MbQR1t/BWKUtUitL7YmJkxDO/HSg9GabV eKxcPElU6PCxAhsdMDISgZvjZ0xBdX1r2RLM7rHvlW23oh4xvDoUnlRmzGepbcts aOSYDT3xz/LNpO/pyzyvUg8b+l1h5/afUlUNMSIKUYIyeMb0a0Ip2HEnNW0hjpUI L65+2r8VHP7v6+2IiCzxE+xE4Llp/BIx61OAf0PXZaWJpZCIzYYq5Q9lLj3k6tpi zxheGK2YwXKtNBRQOMUKFSlthkuD9IFTWKt52vqfrXwHNGl0MQNBDLj8MEWJ4h5j 4rr6umX6zgWSioBMsBlwOKcFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIczDYPTG KuiywrMGRPiLBuWBrsEwHwYDVR0jBBgwFoAUgYu+BREIqaYrBvxp5L+jaX5l4w8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0NENkQ2QzdFNUUy MDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1l1LUJSRUlxYVlyQnZ4cDVMLWphWDVsNHc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0NENkQ2QzdFNUUyMDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZ ckJ2eHA1TC1qYVg1bDR3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADdLaeSwcRvjbsZTHrk77+32vf+FllDJj9h+JwcId3lOrJfMdDhr4/wo fCazUOcvd6TGtSVUm9s3xADlGxvxNUVEg7I8QuYr1LcTWcrzliCbf6jh4T5RFylt LsGVsUmNLor3cGWdALcudYGBlHQHowSIcvKW6rMTnKtYy8mER0HY6YcsSvU5SYAl 7FrqukW4hcrHrkpvfY24a0xRZumCwgtn7jMHV4UKbwfmXUFIe7T16asp7KwCryE6 mT9++qYWn6/T0Gr9UQ/AxX+ceMQ8OrMHnsVY1FoOqtJ7zc+4MXmsf+1+ol3rqtXa V5VOI7c66E+Uf+iWDKCAL+9NQ8wE01c= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:15 2025 by rpki-client