$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: bHiQw86eWyz8rU5Pq+QSobiCqg+SG6L3hOlU/mxf8Io= Subject key identifier: E9:25:B3:5F:FA:54:FC:31:FB:E1:6A:01:4A:6D:01:B4:33:2B:DB:84 Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: 33 Signing time: Tue 13 May 2025 06:49:28 +0000 Manifest this update: Tue 13 May 2025 06:49:28 +0000 Manifest next update: Tue 20 May 2025 06:49:28 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: 9pFFiRTOG0EBs8qR2jgOKNf4Mr08+YlFRletOw4BRmo=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: May 13 06:49:28 2025 GMT Not After : May 20 06:49:28 2025 GMT Subject: CN=6822eb78-d242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:a6:d8:8e:a9:a7:38:dc:7b:3a:d0:41:e5: cd:a9:06:0d:69:dc:da:2e:55:c8:87:1e:68:2c:b9: 26:ff:e1:10:1f:66:e0:71:f3:ee:fd:b4:f1:a9:60: ca:11:3b:a4:87:49:4c:b5:9f:e5:28:a1:f3:f1:40: 14:e6:90:4e:cd:83:39:34:a2:d8:6c:ed:aa:d8:c1: b5:27:48:70:98:48:62:b8:2d:53:26:c5:ce:60:10: 48:56:39:aa:8f:c5:29:95:87:84:d5:35:f3:ce:c2: db:9a:02:03:4d:7c:78:5e:be:de:73:fd:b3:74:dd: b3:98:8e:91:ec:a7:b7:3c:48:6b:55:06:72:7f:a7: 04:8c:bf:f6:ec:2d:73:30:f6:0c:fb:b2:5f:9a:bc: eb:c1:4f:ae:82:30:10:40:42:b1:64:d5:0f:3a:b2: 05:8e:f3:20:37:52:94:05:2c:cc:16:9a:b8:7a:92: 73:05:f1:a5:2e:f1:93:cd:44:41:a1:41:85:39:2f: 50:d0:93:4d:01:8d:1d:bb:8e:cf:e2:24:77:c5:5d: 4d:ae:01:88:34:cb:ee:eb:4a:f2:88:5e:0c:94:db: 7d:1d:1c:01:a3:dc:0f:cf:8f:55:44:c7:76:ed:48: 83:bb:67:5c:22:78:1b:e9:a7:7e:f6:1d:f8:32:16: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:B3:5F:FA:54:FC:31:FB:E1:6A:01:4A:6D:01:B4:33:2B:DB:84 X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:af:81:9c:e3:ea:df:1a:0f:76:14:f5:af:4f:8d:38:2a:af: 39:39:dd:7d:93:c4:bb:68:a6:43:db:11:21:f9:67:a8:11:02: 12:3c:6b:cb:98:ba:7f:26:70:78:96:04:42:d8:18:97:6e:37: 36:3b:81:4f:97:9e:34:af:81:98:de:0f:95:1e:4d:8d:2a:da: 26:3a:42:9e:56:99:e2:96:1b:67:dc:6e:4c:1b:be:ac:01:9d: 07:b2:86:9d:36:93:16:bb:0c:6a:1c:6f:ad:e9:10:c5:4c:3c: 63:77:3f:03:6f:fb:b7:20:d4:68:37:68:69:eb:4a:e1:3b:30: 70:e2:82:21:ed:c8:e2:77:8f:4b:02:da:2f:e0:52:bb:0c:8f: 58:6d:10:aa:ab:84:f6:57:b6:47:97:59:52:ad:65:6d:29:9c: 43:24:18:20:77:bd:a0:c6:26:0e:bd:1f:05:c5:b3:57:c4:8b: b2:8a:46:bc:37:bd:cf:42:c3:ae:d0:c8:eb:0a:06:03:48:df: 2d:84:18:88:dd:9a:2c:5e:fa:67:e5:d8:c2:52:b1:3c:9c:e3: 4e:9b:13:f3:a2:ca:d9:34:a7:a5:e9:c3:2b:6d:77:0d:a4:56: de:a1:bd:a1:f9:5b:a7:39:75:bb:4c:b8:51:16:f3:25:b1:bf: ba:49:fb:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoNzU4QUMyQkVEQURDQkEzQUQ3MzgxNjlGQjM4OUQ1MDhC NTRENzRCRjAeFw0yNTA1MTMwNjQ5MjhaFw0yNTA1MjAwNjQ5MjhaMBgxFjAUBgNV BAMTDTY4MjJlYjc4LWQyNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoYKbYjqmnONx7OtBB5c2pBg1p3NouVciHHmgsuSb/4RAfZuBx8+79tPGpYMoR O6SHSUy1n+UoofPxQBTmkE7Ngzk0oths7arYwbUnSHCYSGK4LVMmxc5gEEhWOaqP xSmVh4TVNfPOwtuaAgNNfHhevt5z/bN03bOYjpHsp7c8SGtVBnJ/pwSMv/bsLXMw 9gz7sl+avOvBT66CMBBAQrFk1Q86sgWO8yA3UpQFLMwWmrh6knMF8aUu8ZPNREGh QYU5L1DQk00BjR27js/iJHfFXU2uAYg0y+7rSvKIXgyU230dHAGj3A/Pj1VEx3bt SIO7Z1wieBvpp372HfgyFlV5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6SWzX/pU /DH74WoBSm0BtDMr24QwHwYDVR0jBBgwFoAUdYrCvtrcujrXOBafs4nVCLVNdL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzJFMTBFREIyRTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFlyQ3Z0cmN1anJYT0JhZnM0blZDTFZOZEw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzJFMTBFREIyRTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpy WE9CYWZzNG5WQ0xWTmRMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOOvgZzj6t8aD3YU9a9PjTgqrzk53X2TxLtopkPbESH5Z6gRAhI8a8uY un8mcHiWBELYGJduNzY7gU+XnjSvgZjeD5UeTY0q2iY6Qp5WmeKWG2fcbkwbvqwB nQeyhp02kxa7DGocb63pEMVMPGN3PwNv+7cg1Gg3aGnrSuE7MHDigiHtyOJ3j0sC 2i/gUrsMj1htEKqrhPZXtkeXWVKtZW0pnEMkGCB3vaDGJg69HwXFs1fEi7KKRrw3 vc9Cw67QyOsKBgNI3y2EGIjdmixe+mfl2MJSsTyc406bE/Oiytk0p6Xpwyttdw2k Vt6hvaH5W6c5dbtMuFEW8yWxv7pJ+7M= -----END CERTIFICATE-----Generated at Wed May 14 19:35:42 2025 by rpki-client