$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json) Hash identifier: MyKsJFQCCUSc/5wGcVjrhW+caGdZ4TJiU5z4aApOljA= Subject key identifier: C8:72:52:71:4C:93:D5:A5:8F:02:B5:A2:FF:D5:82:98:D0:E9:EA:5C Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft Manifest number: 019B Signing time: Tue 13 May 2025 02:35:59 +0000 Manifest this update: Tue 13 May 2025 02:35:58 +0000 Manifest next update: Tue 20 May 2025 02:35:58 +0000 Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: 7s0wtPAwq9sGZBnNaKVYpyP21H139wZcmX0C4n9y0Js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Validity Not Before: May 13 02:35:58 2025 GMT Not After : May 20 02:35:58 2025 GMT Subject: CN=6822b00e-c554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:0c:43:9e:4c:1a:99:dd:57:d7:ef:7f:53: 75:73:65:de:1b:88:ae:89:e4:66:56:86:60:3a:87: f9:f8:6f:fd:8c:05:aa:5b:52:bf:88:51:85:6e:a5: 68:6c:85:45:a0:47:2d:fe:40:07:6c:cb:a1:54:4d: 00:74:b2:95:a9:62:bf:63:e7:46:d0:a6:43:6f:9e: d6:84:9f:d1:51:ec:6b:ae:b5:75:f2:23:56:b8:3b: e9:57:c8:7f:e2:0d:10:a0:74:f8:6c:49:11:60:83: b3:a0:9c:72:46:74:f5:9f:0b:5d:e2:fd:89:7a:7e: 5e:27:e2:4d:26:b9:d1:4b:23:86:ff:71:b0:3b:a6: db:e9:3f:35:5d:51:25:2e:4e:7d:19:d2:87:82:17: 39:04:fe:d4:9c:cf:2a:c4:6d:74:09:c7:ca:f5:69: 88:2d:74:93:00:d8:2f:ef:8b:a3:d5:12:bd:fe:2a: c1:93:a9:b1:bc:53:7e:44:3b:35:45:f5:42:b8:f2: 4b:26:2b:37:07:ce:68:6b:6f:f0:2a:dc:04:59:92: 90:d4:f2:b8:4e:04:e5:b6:c8:78:7c:ca:30:1a:a1: 2a:10:27:f2:8c:30:b0:0f:84:b9:fa:0c:28:b6:32: 99:e3:16:23:67:8e:08:7a:bd:c4:46:bc:a0:ba:5f: 33:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:52:71:4C:93:D5:A5:8F:02:B5:A2:FF:D5:82:98:D0:E9:EA:5C X509v3 Authority Key Identifier: keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c5:ea:29:77:09:5b:6e:34:47:25:7d:78:75:b4:4c:42:24: 23:06:30:df:54:37:6a:a7:49:b4:ca:8f:71:d4:2c:fe:3d:77: ce:e3:2a:02:b3:d3:36:8d:08:f8:3b:0b:78:1e:0b:84:1d:59: 99:0f:73:5a:87:7e:00:ee:b8:28:a7:0f:94:77:c1:bc:9d:85: c6:1a:dc:cf:8f:4e:50:35:36:0d:d0:92:8e:ac:82:65:94:1f: d1:96:01:3c:91:e7:77:4b:c2:ff:07:11:8b:d9:81:9f:c7:a3: 60:8a:a4:7b:f4:2f:cf:03:85:f8:f5:0f:a4:06:1d:11:96:c9: 70:2b:f7:5c:bb:da:5a:01:d7:57:08:ee:42:fe:dd:0a:a5:50: 09:99:f2:a3:44:ad:46:f0:19:f3:f4:03:b9:38:6e:c5:70:40: c7:96:a1:3b:8a:68:54:16:2f:82:87:b3:5a:e9:03:9f:0f:5a: 74:fc:96:13:36:87:38:aa:63:40:f8:f9:45:8f:da:bf:81:e3: db:be:94:d9:ab:3d:ab:07:3c:e1:8a:20:4e:ea:3c:21:f7:60: fb:71:0b:ae:38:80:2d:68:0d:97:9e:4c:ac:4e:9f:bd:c8:c1: ab:ba:04:7d:b2:b7:e1:c0:08:d2:7d:33:5f:31:f1:ac:b7:af: b0:66:bb:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE RTEyMjJDRUUwHhcNMjUwNTEzMDIzNTU4WhcNMjUwNTIwMDIzNTU4WjAYMRYwFAYD VQQDEw02ODIyYjAwZS1jNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQcMQ55MGpndV9fvf1N1c2XeG4iuieRmVoZgOof5+G/9jAWqW1K/iFGFbqVo bIVFoEct/kAHbMuhVE0AdLKVqWK/Y+dG0KZDb57WhJ/RUexrrrV18iNWuDvpV8h/ 4g0QoHT4bEkRYIOzoJxyRnT1nwtd4v2Jen5eJ+JNJrnRSyOG/3GwO6bb6T81XVEl Lk59GdKHghc5BP7UnM8qxG10CcfK9WmILXSTANgv74uj1RK9/irBk6mxvFN+RDs1 RfVCuPJLJis3B85oa2/wKtwEWZKQ1PK4TgTltsh4fMowGqEqECfyjDCwD4S5+gwo tjKZ4xYjZ44Ier3ERrygul8zcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhyUnFM k9WljwK1ov/VgpjQ6epcMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2 ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmxeopdwlbbjRHJX14dbRMQiQjBjDfVDdqp0m0yo9x1Cz+PXfO4yoC s9M2jQj4Owt4HguEHVmZD3Nah34A7rgopw+Ud8G8nYXGGtzPj05QNTYN0JKOrIJl lB/RlgE8ked3S8L/BxGL2YGfx6NgiqR79C/PA4X49Q+kBh0RlslwK/dcu9paAddX CO5C/t0KpVAJmfKjRK1G8Bnz9AO5OG7FcEDHlqE7imhUFi+Ch7Na6QOfD1p0/JYT Noc4qmNA+PlFj9q/gePbvpTZqz2rBzzhiiBO6jwh92D7cQuuOIAtaA2XnkysTp+9 yMGrugR9srfhwAjSfTNfMfGst6+wZruv -----END CERTIFICATE-----Generated at Tue May 13 19:52:24 2025 by rpki-client