$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: vzomqEd52uws1t+TqjJh27GUNqiOMmrv9Ie2DAKZchE= Subject key identifier: 9C:FD:2A:89:AC:67:8F:8B:20:DC:24:96:1B:C7:73:C5:33:89:D0:B1 Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: E0 Signing time: Fri 13 Jun 2025 04:29:05 +0000 Manifest this update: Fri 13 Jun 2025 04:29:04 +0000 Manifest next update: Fri 20 Jun 2025 04:29:04 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: RfTg6wDDg6B4l8+3/UBd+DzqixF+Wl5G4WbopiclYFk=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Jun 13 04:29:04 2025 GMT Not After : Jun 20 04:29:04 2025 GMT Subject: CN=684ba910-ff7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:a4:21:f5:6f:3e:07:07:1f:8a:a4:82:64: bb:e1:00:01:9e:26:e8:55:f2:f5:6a:8d:70:32:22: d0:18:88:7f:63:cb:3d:ea:ec:35:32:11:df:9c:cc: 15:83:b9:20:23:72:2c:2b:0a:45:e6:d9:03:e2:b0: 0b:eb:a7:c7:57:bb:69:83:3b:6b:a8:ab:82:30:d6: ed:56:ad:75:26:d8:3b:62:e9:9c:22:40:dd:d4:3b: 05:95:1b:90:06:a3:6a:69:77:8f:92:05:1d:3b:27: 1a:23:67:35:23:4f:3d:2d:11:a3:a7:d6:07:32:22: 9f:5a:67:e5:43:0f:06:7e:0c:1b:fb:26:08:2a:6b: d6:7d:19:f3:68:3f:c7:f4:c4:96:2e:6e:1c:a1:fc: 59:f0:ee:b9:43:5b:27:5d:0e:5f:13:38:bb:64:55: 9d:69:8e:a6:13:56:eb:8c:91:47:29:2a:4b:72:13: 6a:f4:06:b7:24:cc:d1:00:65:23:73:76:98:b6:32: c0:fe:8c:f5:0a:a8:0a:2a:9e:a0:26:c0:7b:4c:53: d7:4c:a1:66:e9:7b:9f:9d:66:cf:63:81:c0:50:ea: e3:28:f7:94:46:e3:01:0a:56:9e:d5:2f:e5:5b:7b: d4:90:70:7e:88:e5:bb:79:94:e1:cb:8b:78:08:5a: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:2A:89:AC:67:8F:8B:20:DC:24:96:1B:C7:73:C5:33:89:D0:B1 X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2d:7b:14:ec:a0:07:76:78:9e:51:9e:e6:c3:16:13:11:54: 6f:38:27:4b:63:53:c6:34:0f:99:af:dc:f9:a4:9c:4d:04:df: 65:75:d0:95:b9:42:f4:2b:4c:3a:ef:56:97:0b:51:01:4f:21: 71:c8:65:d5:4e:93:f6:f4:c5:99:c2:85:38:b9:b2:35:58:49: 49:cc:47:d3:b5:8d:79:a6:e1:f1:4d:7f:29:a6:8b:3d:a0:82: 6f:ff:fa:44:5a:77:2c:28:de:5a:3e:4b:9e:aa:74:f7:49:5e: 4e:a7:33:87:52:48:52:95:a7:6d:32:40:3e:1a:ad:52:78:76: 8f:97:6c:19:b2:78:92:1d:7a:d3:71:0f:15:ab:f7:3a:f2:77: 8d:6a:ca:ee:5b:94:92:f7:94:7f:ac:e8:a4:56:2e:90:be:4a: 8e:69:84:f8:7f:2e:f8:2f:8c:56:1c:d1:85:ee:0b:1f:8e:5e: a6:01:2c:9c:3d:be:4f:6f:24:78:db:46:af:af:22:88:be:bf: 3c:8d:2a:6a:3e:2f:8b:79:03:18:c7:26:ba:63:ab:73:94:63: 1d:14:39:92:e2:f2:fd:ee:6d:a4:bb:92:44:98:34:1b:9b:de: 48:de:1a:e3:87:60:bd:ba:10:cc:8f:90:94:0f:c4:0f:e4:c8: 8e:1d:29:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjUwNjEzMDQyOTA0WhcNMjUwNjIwMDQyOTA0WjAYMRYwFAYD VQQDEw02ODRiYTkxMC1mZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48ykIfVvPgcHH4qkgmS74QABniboVfL1ao1wMiLQGIh/Y8s96uw1MhHfnMwV g7kgI3IsKwpF5tkD4rAL66fHV7tpgztrqKuCMNbtVq11Jtg7YumcIkDd1DsFlRuQ BqNqaXePkgUdOycaI2c1I089LRGjp9YHMiKfWmflQw8Gfgwb+yYIKmvWfRnzaD/H 9MSWLm4cofxZ8O65Q1snXQ5fEzi7ZFWdaY6mE1brjJFHKSpLchNq9Aa3JMzRAGUj c3aYtjLA/oz1CqgKKp6gJsB7TFPXTKFm6XufnWbPY4HAUOrjKPeURuMBClae1S/l W3vUkHB+iOW7eZThy4t4CFoIfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz9Koms Z4+LINwklhvHc8UzidCxMB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6LXsU7KAHdnieUZ7mwxYTEVRvOCdLY1PGNA+Zr9z5pJxNBN9lddCV uUL0K0w671aXC1EBTyFxyGXVTpP29MWZwoU4ubI1WElJzEfTtY15puHxTX8ppos9 oIJv//pEWncsKN5aPkueqnT3SV5OpzOHUkhSladtMkA+Gq1SeHaPl2wZsniSHXrT cQ8Vq/c68neNasruW5SS95R/rOikVi6QvkqOaYT4fy74L4xWHNGF7gsfjl6mASyc Pb5PbyR420avryKIvr88jSpqPi+LeQMYxya6Y6tzlGMdFDmS4vL97m2ku5JEmDQb m95I3hrjh2C9uhDMj5CUD8QP5MiOHSmA -----END CERTIFICATE-----Generated at Sun Jun 15 06:02:00 2025 by rpki-client