$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json) Hash identifier: AqqPgyRATE1SC3NnpIbjlfHuS1KxdGjsEGdmexmu7sE= Subject key identifier: 5A:C7:49:7D:83:43:DA:4F:C6:FA:2A:B9:BB:9A:64:7A:28:45:FB:10 Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft Manifest number: 0D Signing time: Sun 03 Aug 2025 06:22:18 +0000 Manifest this update: Sun 03 Aug 2025 06:22:17 +0000 Manifest next update: Sun 10 Aug 2025 06:22:17 +0000 Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: Zgpy0avW0TozRJpwJTvWeR6o2GE2RmT6JLt4uaEXlVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Validity Not Before: Aug 3 06:22:17 2025 GMT Not After : Aug 10 06:22:17 2025 GMT Subject: CN=688f0019-3a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:bd:07:8d:f7:6d:bf:6b:dd:c0:77:ac:1a: b2:01:f9:81:de:cb:01:74:4f:a6:93:5a:92:8e:83: f8:e3:4e:59:79:e8:2e:de:4e:06:bd:f3:f0:35:66: db:0b:d8:c2:eb:62:7d:a2:53:ec:43:83:9f:b3:37: f4:26:b8:aa:fd:db:ea:35:54:81:f9:61:d0:af:3c: 8e:e0:9f:66:cd:92:df:ab:5a:95:f8:c2:c0:67:cb: 25:22:b9:87:4c:07:70:8a:2b:bf:4e:cf:74:2f:09: 68:b0:0e:ca:03:15:31:03:e2:6a:b7:44:f4:d9:e0: 96:8a:d8:e8:53:08:17:a3:03:b2:ec:cf:0c:8f:35: a0:f1:39:57:55:cc:ba:75:0b:b5:ba:a0:76:16:27: 3b:95:0c:c9:88:69:20:ab:bb:0a:bd:85:d6:84:fd: 8f:5e:39:3a:b4:89:68:0f:6c:1a:de:bd:38:61:e0: ad:f4:3f:da:89:a9:21:13:b8:63:e4:32:66:24:d1: bd:45:eb:62:d1:a7:b7:40:77:3a:00:1d:67:ec:15: e4:94:99:22:52:1e:bb:5d:f9:1d:43:bf:26:a7:67: b3:b1:b4:2b:dc:a1:dc:30:fc:ed:a5:d8:6e:11:b7: 77:52:89:f0:c6:21:92:32:7b:f2:dc:85:11:90:a3: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C7:49:7D:83:43:DA:4F:C6:FA:2A:B9:BB:9A:64:7A:28:45:FB:10 X509v3 Authority Key Identifier: keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:bb:60:df:38:ff:49:e8:4b:73:a0:d2:58:02:fd:62:88:82: c8:77:4d:21:b0:60:62:71:6c:c6:87:f6:4f:81:79:69:d9:22: bb:17:a4:ab:c1:62:b1:2b:fa:85:68:3f:8c:ba:63:54:25:a7: dd:5d:7d:46:d5:77:9c:b1:3a:5e:0e:81:4e:31:4b:68:83:92: fd:68:d6:05:ec:d4:ce:fb:6c:80:e9:ae:96:9a:b2:4e:97:12: d9:44:a4:f0:8f:a0:4e:d6:6a:c2:0d:00:4c:4c:fa:7d:03:d2: bf:0e:7b:61:ce:0d:91:73:ad:3d:4e:0d:c3:a3:51:f4:27:24: 6e:10:4e:1c:bd:03:3e:79:56:23:59:c9:f6:26:2c:16:60:e4: 0e:15:94:97:f9:88:c2:fb:cc:53:01:81:dc:b1:a4:ff:2f:f2: f6:cb:6e:72:60:e4:98:17:21:e1:30:b4:9c:aa:0f:26:5a:ce: 92:5d:7e:ef:01:fd:6c:50:ff:cb:ad:d1:44:81:fb:dc:7d:b2: 2b:51:19:b9:43:56:55:74:e0:0a:d9:e7:a1:fe:af:67:91:4a: 2c:02:46:12:e7:fa:91:2e:14:36:5b:39:67:57:5f:01:ad:27: d0:b7:f7:45:ad:59:d0:98:09:e4:a9:7a:49:eb:26:c4:08:60: 21:89:0d:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoODE4QkJFMDUxMTA4QTlBNjJCMDZGQzY5RTRCRkEzNjk3 RTY1RTMwRjAeFw0yNTA4MDMwNjIyMTdaFw0yNTA4MTAwNjIyMTdaMBgxFjAUBgNV BAMTDTY4OGYwMDE5LTNhODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0XL0Hjfdtv2vdwHesGrIB+YHeywF0T6aTWpKOg/jjTll56C7eTga98/A1ZtsL 2MLrYn2iU+xDg5+zN/QmuKr92+o1VIH5YdCvPI7gn2bNkt+rWpX4wsBnyyUiuYdM B3CKK79Oz3QvCWiwDsoDFTED4mq3RPTZ4JaK2OhTCBejA7LszwyPNaDxOVdVzLp1 C7W6oHYWJzuVDMmIaSCruwq9hdaE/Y9eOTq0iWgPbBrevThh4K30P9qJqSETuGPk MmYk0b1F62LRp7dAdzoAHWfsFeSUmSJSHrtd+R1DvyanZ7OxtCvcodww/O2l2G4R t3dSifDGIZIye/LchRGQo6JPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWsdJfYND 2k/G+iq5u5pkeihF+xAwHwYDVR0jBBgwFoAUgYu+BREIqaYrBvxp5L+jaX5l4w8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0NENkQ2QzdFNUUy MDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1l1LUJSRUlxYVlyQnZ4cDVMLWphWDVsNHc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0NENkQ2QzdFNUUyMDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZ ckJ2eHA1TC1qYVg1bDR3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHe7YN84/0noS3Og0lgC/WKIgsh3TSGwYGJxbMaH9k+BeWnZIrsXpKvB YrEr+oVoP4y6Y1Qlp91dfUbVd5yxOl4OgU4xS2iDkv1o1gXs1M77bIDprpaask6X EtlEpPCPoE7WasINAExM+n0D0r8Oe2HODZFzrT1ODcOjUfQnJG4QThy9Az55ViNZ yfYmLBZg5A4VlJf5iML7zFMBgdyxpP8v8vbLbnJg5JgXIeEwtJyqDyZazpJdfu8B /WxQ/8ut0USB+9x9sitRGblDVlV04ArZ56H+r2eRSiwCRhLn+pEuFDZbOWdXXwGt J9C390WtWdCYCeSpeknrJsQIYCGJDWY= -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:32 2025 by rpki-client