$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft File: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json) Hash identifier: qszme8j6BZvTGuIs+ZzRYgAW66dvYQbXFSuRqaSAfg8= Subject key identifier: E1:64:CF:50:1C:38:39:C2:01:3C:75:CB:F1:61:0A:5D:84:1F:C1:FF Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 Certificate issuer: /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft Manifest number: 04B9 Signing time: Thu 24 Apr 2025 23:38:36 +0000 Manifest this update: Thu 24 Apr 2025 23:38:36 +0000 Manifest next update: Thu 01 May 2025 23:38:36 +0000 Files and hashes: 1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: rmkbXVgn+f8nLVhLBF8ErPNTW4m40zrpUt3WUk8+drc=) 2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: D4U1lUqveYfyWOIkh6414WCzafazdL5eQysTdY6uwXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3 Validity Not Before: Apr 24 23:38:36 2025 GMT Not After : May 1 23:38:36 2025 GMT Subject: CN=680acb7c-b937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:b0:d1:30:fa:6e:04:e5:69:db:e7:b9:53: 34:5e:1b:f0:c8:33:92:23:1c:ed:02:56:53:d8:b7: 04:c9:f2:6d:7c:9e:9f:f2:d4:46:1e:9b:92:31:43: 5c:7c:ac:01:b5:78:bf:20:65:ea:89:29:aa:d8:f9: fd:e1:96:ca:2b:e7:66:60:1e:ad:60:89:da:91:31: 3a:04:52:15:f0:74:d9:b1:be:2a:b4:3d:ad:6b:de: 91:e9:1f:54:ce:4d:91:3b:d4:bf:43:c0:4f:21:fe: 95:f7:15:fd:fe:6b:0c:00:bd:0d:96:f3:ec:2f:8c: 13:ee:63:a8:fb:4a:fc:6f:f3:db:f1:5f:08:df:e3: 64:39:30:f5:2c:8a:17:0e:62:67:33:d2:ef:ee:bb: 79:d4:67:9c:56:5c:bf:e0:c3:9d:12:19:0e:60:d8: 32:f7:59:34:e0:ff:30:15:cd:ef:ec:bd:d5:5f:d7: 75:da:cc:9d:64:cc:69:d2:5f:86:7e:af:5c:57:24: 93:53:f5:36:39:39:bf:b5:7b:e0:52:c1:90:9d:ca: d2:b9:0f:0b:00:0a:a8:53:a5:a4:49:26:9c:d5:58: d1:00:97:cb:a7:ff:a6:4c:74:97:26:0b:1b:43:b4: 60:c6:ec:0a:1e:93:c1:9d:f7:41:eb:29:57:31:80: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:64:CF:50:1C:38:39:C2:01:3C:75:CB:F1:61:0A:5D:84:1F:C1:FF X509v3 Authority Key Identifier: keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:47:fd:61:d0:95:30:81:1b:e9:e4:73:b1:08:7d:b6:fe: 12:49:b5:6c:30:29:71:37:fb:c4:87:7e:72:5f:08:65:f2:30: 70:5c:c6:0e:c0:02:20:bb:de:8e:6a:de:f4:df:35:ef:31:2c: 61:a2:a5:c3:68:c9:97:d7:94:29:94:b8:7d:4e:34:47:8f:b9: 37:22:c8:28:33:2b:67:53:7a:66:9b:b6:a1:a8:fa:04:23:42: dd:05:d2:b5:78:10:9a:a9:fc:d2:c9:be:b3:fc:e2:e1:29:14: d4:1f:99:9a:1a:73:49:16:07:d1:88:ab:15:6d:db:a4:8a:79: 0f:e1:23:f6:84:98:b5:25:ae:9b:f6:ee:43:78:72:7c:67:a3: c6:20:e5:b2:22:dc:6e:1a:a4:15:44:ff:5a:18:36:d4:3d:e8: 6a:a0:95:f2:8a:5b:88:db:71:33:2d:7d:8e:5d:d1:4b:15:23: 73:90:d9:70:f0:0c:f5:0b:9f:51:81:f1:bd:42:44:22:18:cf: 22:bd:49:57:b1:74:0e:d3:a6:3e:74:37:c1:99:01:d8:49:99: 7d:b5:46:9e:5d:ff:48:86:9e:f1:f8:1c:cd:7a:a9:03:8e:3f: 88:f5:58:c9:0d:3d:11:15:0b:89:b0:5b:1e:dc:9e:f9:6d:74: e4:a9:88:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF OTk3NjEzQTMwHhcNMjUwNDI0MjMzODM2WhcNMjUwNTAxMjMzODM2WjAYMRYwFAYD VQQDEw02ODBhY2I3Yy1iOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE6w0TD6bgTladvnuVM0XhvwyDOSIxztAlZT2LcEyfJtfJ6f8tRGHpuSMUNc fKwBtXi/IGXqiSmq2Pn94ZbKK+dmYB6tYInakTE6BFIV8HTZsb4qtD2ta96R6R9U zk2RO9S/Q8BPIf6V9xX9/msMAL0NlvPsL4wT7mOo+0r8b/Pb8V8I3+NkOTD1LIoX DmJnM9Lv7rt51GecVly/4MOdEhkOYNgy91k04P8wFc3v7L3VX9d12sydZMxp0l+G fq9cVySTU/U2OTm/tXvgUsGQncrSuQ8LAAqoU6WkSSac1VjRAJfLp/+mTHSXJgsb Q7RgxuwKHpPBnfdB6ylXMYDxQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFkz1Ac ODnCATx1y/FhCl2EH8H/MB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/Ef9YdCVMIEb6eRzsQh9tv4SSbVsMClxN/vEh35yXwhl8jBwXMYO wAIgu96Oat703zXvMSxhoqXDaMmX15QplLh9TjRHj7k3IsgoMytnU3pmm7ahqPoE I0LdBdK1eBCaqfzSyb6z/OLhKRTUH5maGnNJFgfRiKsVbdukinkP4SP2hJi1Ja6b 9u5DeHJ8Z6PGIOWyItxuGqQVRP9aGDbUPehqoJXyiluI23EzLX2OXdFLFSNzkNlw 8Az1C59RgfG9QkQiGM8ivUlXsXQO06Y+dDfBmQHYSZl9tUaeXf9Ihp7x+BzNeqkD jj+I9VjJDT0RFQuJsFse3J75bXTkqYh/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:02 2025 by rpki-client