$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: R01YHxvnPPgHvR3y0IMd4BCPWANmOuVnXmMj8p8r6nM= Subject key identifier: C6:EC:83:9C:F8:B6:D9:7B:C3:EB:69:19:DF:86:0B:A5:80:EE:02:C8 Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: FB Signing time: Tue 05 Aug 2025 05:39:36 +0000 Manifest this update: Tue 05 Aug 2025 05:39:35 +0000 Manifest next update: Tue 12 Aug 2025 05:39:35 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: kzla+vn+C0sFmKs94LYbsKXCjJpU5u2YdxyZ0mUDLEs=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Aug 5 05:39:35 2025 GMT Not After : Aug 12 05:39:35 2025 GMT Subject: CN=68919918-f666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:aa:5b:d1:e4:8a:de:a9:d0:06:ed:4f:8c: a1:12:97:91:60:8d:65:32:bc:ff:9a:0b:78:7d:b8: 9a:71:b3:4e:09:df:70:a7:e3:9c:97:f4:92:ed:01: ba:68:0a:90:ef:d3:a8:a6:43:ee:c8:ab:5b:db:b0: 48:ef:88:4f:ec:45:d5:ab:88:71:10:51:6a:9a:98: 95:85:dd:94:10:59:69:be:62:76:27:7d:77:de:1e: e3:ea:12:2a:7c:8c:1a:00:ae:ec:85:4e:a5:e1:a6: a8:e0:81:12:cc:d5:ad:e6:d1:02:b6:eb:c5:09:b4: 9b:88:f2:46:f7:9a:0d:3e:1a:23:43:f9:b2:8b:a1: f4:ab:9b:dd:1a:1e:63:ec:54:15:81:18:40:3f:6f: 62:85:d9:ba:2d:9f:81:8e:3f:1d:b1:a6:b2:b9:42: 94:1c:3d:9b:53:5c:20:a5:46:1d:1d:53:90:dc:da: 19:6d:8c:08:ff:13:14:30:94:52:a9:6b:74:ad:78: 1b:e7:b7:3d:54:ad:11:7b:b2:d6:41:78:cc:15:0b: d8:c5:15:55:15:91:18:ac:77:3d:f5:32:70:3b:e5: 00:87:da:60:f6:e2:ad:f5:cb:df:4b:29:ca:b5:82: 8c:de:af:33:24:75:dc:f6:3b:dc:90:c1:a2:d2:e3: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:83:9C:F8:B6:D9:7B:C3:EB:69:19:DF:86:0B:A5:80:EE:02:C8 X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:71:e6:e2:28:21:29:8f:5c:f0:12:43:a4:02:b1:8e:fe:0c: c3:86:f7:76:e5:3f:54:7c:bf:f5:46:c9:99:db:cc:f3:57:4a: 89:ee:e8:57:6f:a6:1b:72:fa:0d:ad:f5:d1:50:ac:6f:5b:14: 52:0e:af:53:a0:36:5e:a9:3c:77:62:73:04:de:e2:bc:9b:21: 50:d9:66:b0:87:b8:1a:e1:35:e2:fc:87:9f:fb:fe:5b:49:15: d2:de:6a:e0:73:a3:45:4f:1b:48:53:48:7e:f4:da:ed:e4:c2: b3:fe:f5:df:b7:98:7c:49:bd:a8:f3:64:9c:1f:d1:d4:85:2c: 99:6c:ed:d2:ea:e7:86:5b:a3:df:ca:ad:10:b4:15:4e:f0:57: 19:09:75:23:f8:5f:0e:c5:61:26:4b:10:2e:8d:78:48:08:44: a1:24:f5:c6:12:dc:8b:8b:1b:cb:67:b6:51:4a:53:58:6a:10: 52:fe:97:8d:1a:3c:3f:48:cb:b7:3a:69:b2:c7:e5:63:a5:12: 08:6c:ca:70:29:ad:50:bb:0f:ec:b5:f4:20:4a:6b:04:f5:b6: cf:de:39:8f:09:26:96:9b:ba:5f:8d:ee:c8:55:ea:6c:d9:73: cc:c3:b9:11:85:b8:df:ea:50:a4:10:83:bf:ff:c5:f7:88:80: 82:c7:89:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjUwODA1MDUzOTM1WhcNMjUwODEyMDUzOTM1WjAYMRYwFAYD VQQDEw02ODkxOTkxOC1mNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcuqW9Hkit6p0AbtT4yhEpeRYI1lMrz/mgt4fbiacbNOCd9wp+Ocl/SS7QG6 aAqQ79OopkPuyKtb27BI74hP7EXVq4hxEFFqmpiVhd2UEFlpvmJ2J3133h7j6hIq fIwaAK7shU6l4aao4IESzNWt5tECtuvFCbSbiPJG95oNPhojQ/myi6H0q5vdGh5j 7FQVgRhAP29ihdm6LZ+Bjj8dsaayuUKUHD2bU1wgpUYdHVOQ3NoZbYwI/xMUMJRS qWt0rXgb57c9VK0Re7LWQXjMFQvYxRVVFZEYrHc99TJwO+UAh9pg9uKt9cvfSynK tYKM3q8zJHXc9jvckMGi0uMEQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbsg5z4 ttl7w+tpGd+GC6WA7gLIMB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNcebiKCEpj1zwEkOkArGO/gzDhvd25T9UfL/1RsmZ28zzV0qJ7uhX b6YbcvoNrfXRUKxvWxRSDq9ToDZeqTx3YnME3uK8myFQ2Wawh7ga4TXi/Ief+/5b SRXS3mrgc6NFTxtIU0h+9Nrt5MKz/vXft5h8Sb2o82ScH9HUhSyZbO3S6ueGW6Pf yq0QtBVO8FcZCXUj+F8OxWEmSxAujXhICEShJPXGEtyLixvLZ7ZRSlNYahBS/peN Gjw/SMu3Ommyx+VjpRIIbMpwKa1Quw/stfQgSmsE9bbP3jmPCSaWm7pfje7IVeps 2XPMw7kRhbjf6lCkEIO//8X3iICCx4kM -----END CERTIFICATE-----Generated at Thu Aug 7 02:07:52 2025 by rpki-client