$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: b3tRPfz7tr4/gTeeygCcrV4Ck48QZd6k4eBctFVYKEs= Subject key identifier: 87:2D:F8:95:86:71:2A:DA:5B:67:43:8E:D1:8E:19:E9:B1:15:C2:B9 Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 0161 Signing time: Sun 11 May 2025 03:12:35 +0000 Manifest this update: Sun 11 May 2025 03:12:35 +0000 Manifest next update: Sun 18 May 2025 03:12:35 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: IGQtDzJCTrITD/p6ohQCB9BoaYL+B6ry1I93hOQdcpM=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: n+UG6V5XV7UFganlBH1N62nTVgBD1jdXRIOHq8v8JMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: May 11 03:12:35 2025 GMT Not After : May 18 03:12:35 2025 GMT Subject: CN=682015a3-08de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:d5:69:95:2a:ba:18:6e:f9:b9:df:d9:14: cd:03:da:91:bc:f8:4a:45:e0:39:71:d4:62:f8:24: ad:25:dd:2c:5f:e0:33:a3:48:1c:46:96:de:07:1c: ff:74:9b:f7:1c:33:a7:ba:01:81:79:02:46:7a:61: 7c:32:c2:47:80:23:43:87:06:a1:ce:b3:38:08:b7: c1:72:4b:bd:8a:18:3c:25:1b:64:7a:1f:59:28:1d: 5a:37:ab:c2:86:61:1c:f1:86:6c:51:62:ab:72:ec: d3:b6:4f:d9:c7:1f:2f:dd:e7:49:24:0c:29:b4:ad: 71:0d:b1:0e:0f:e6:ef:9e:c2:38:90:59:b1:78:a5: 49:c4:53:00:37:0d:16:ca:7d:0b:a3:8b:3e:57:25: ae:7c:cb:31:55:44:6f:80:9e:5f:50:c6:93:f6:74: e7:fa:9d:d2:dd:af:48:cb:b4:d2:8b:2e:9b:14:56: 73:e7:81:3c:18:c1:d2:85:e7:c3:bc:77:c3:9b:37: 43:02:ff:b1:d0:00:72:61:5d:9b:bb:7a:86:5f:3f: 12:3e:5d:c9:bf:25:3f:7f:fd:44:b3:7b:d6:01:ae: 31:3c:54:b7:87:0a:94:fc:bd:2b:e5:a2:3f:9f:2a: 26:40:7e:cf:35:33:fe:ae:1a:bb:e6:f2:77:4a:a5: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:F8:95:86:71:2A:DA:5B:67:43:8E:D1:8E:19:E9:B1:15:C2:B9 X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f7:2f:6f:cd:d4:b8:5d:66:80:d6:68:37:73:fa:7a:e9:42: b7:54:fc:78:91:64:ca:2e:5c:27:57:c8:8b:8c:8c:c1:38:5a: 81:07:99:1b:e5:b9:8d:0f:63:5b:51:84:3b:70:a6:b2:bb:52: c8:f2:d4:11:9f:f9:4c:1b:31:13:36:72:b2:4d:4f:af:12:b0: c7:38:cd:95:b9:88:0e:15:12:6b:5b:ac:44:f4:07:84:e0:6a: 93:3a:22:9a:6b:cc:62:1b:f1:e5:a9:6c:bf:26:dc:e3:ab:ba: d7:f7:69:5c:75:42:92:cd:d2:8d:d3:d7:80:a8:57:8e:4b:f2: 75:14:01:98:9f:c7:98:a4:2d:dd:c5:51:84:a6:73:e3:28:ef: c6:7b:23:5b:a5:3b:d1:54:f2:d4:ec:e1:69:dc:27:5e:55:4f: 11:3c:36:dc:c3:47:5c:86:7e:2c:37:dd:dc:f2:b4:5c:72:b2: 4e:4a:7d:0a:2e:c5:b1:32:f5:b3:1f:95:01:94:ca:49:9d:d7: a5:eb:8c:2b:a7:cd:5f:fd:a9:af:dd:b4:98:bb:4c:94:94:fc: de:ef:2b:ad:46:f2:96:ec:6f:e3:96:3a:a0:16:34:20:b8:73: 7e:6f:ac:ba:ca:0a:5f:d0:de:fb:32:0b:a5:d7:ff:18:08:e8: a7:6c:64:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwNTExMDMxMjM1WhcNMjUwNTE4MDMxMjM1WjAYMRYwFAYD VQQDEw02ODIwMTVhMy0wOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U3VaZUquhhu+bnf2RTNA9qRvPhKReA5cdRi+CStJd0sX+Azo0gcRpbeBxz/ dJv3HDOnugGBeQJGemF8MsJHgCNDhwahzrM4CLfBcku9ihg8JRtkeh9ZKB1aN6vC hmEc8YZsUWKrcuzTtk/Zxx8v3edJJAwptK1xDbEOD+bvnsI4kFmxeKVJxFMANw0W yn0Lo4s+VyWufMsxVURvgJ5fUMaT9nTn+p3S3a9Iy7TSiy6bFFZz54E8GMHShefD vHfDmzdDAv+x0AByYV2bu3qGXz8SPl3JvyU/f/1Es3vWAa4xPFS3hwqU/L0r5aI/ nyomQH7PNTP+rhq75vJ3SqUHIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIct+JWG cSraW2dDjtGOGemxFcK5MB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr9y9vzdS4XWaA1mg3c/p66UK3VPx4kWTKLlwnV8iLjIzBOFqBB5kb 5bmND2NbUYQ7cKayu1LI8tQRn/lMGzETNnKyTU+vErDHOM2VuYgOFRJrW6xE9AeE 4GqTOiKaa8xiG/HlqWy/Jtzjq7rX92lcdUKSzdKN09eAqFeOS/J1FAGYn8eYpC3d xVGEpnPjKO/GeyNbpTvRVPLU7OFp3CdeVU8RPDbcw0dchn4sN93c8rRccrJOSn0K LsWxMvWzH5UBlMpJndel64wrp81f/amv3bSYu0yUlPze7yutRvKW7G/jljqgFjQg uHN+b6y6ygpf0N77Mgul1/8YCOinbGRn -----END CERTIFICATE-----Generated at Sun May 11 18:49:34 2025 by rpki-client