$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: qrAO7kUhfw0D1PzUy7GBb8vK/uuMrq3bB8WFa1R7/+s= Subject key identifier: 60:7C:64:0D:E5:48:BC:0D:CC:E4:5F:D8:19:3B:76:5C:DF:60:87:D5 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 347B Signing time: Fri 16 May 2025 15:19:59 +0000 Manifest this update: Fri 16 May 2025 15:19:59 +0000 Manifest next update: Fri 23 May 2025 15:19:59 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: 2dcjh/UrImthrRrXKOL0B4j6yCg1PrCa1K/YAafwGZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: May 16 15:19:59 2025 GMT Not After : May 23 15:19:59 2025 GMT Subject: CN=6827579f-59d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:e0:a7:2f:74:d4:3f:7e:e8:dc:b8:93:79: 5b:14:87:2c:d4:f9:33:ad:6d:70:e7:31:93:4d:92: ce:7a:2e:0e:17:35:10:f7:93:32:ce:f8:64:9a:6b: 26:66:39:73:95:49:a4:51:34:8c:fe:23:19:36:57: 5e:fb:6d:7f:b9:03:da:4a:80:90:fc:33:41:42:06: 9b:3d:e9:f8:ff:ee:1d:35:3b:60:b3:7c:8d:2d:26: 52:8d:31:e4:44:96:c0:bd:01:75:da:64:c1:2e:95: d8:c4:2c:58:9b:37:d4:8c:a9:bc:a0:8f:0e:09:63: 56:d8:72:af:ce:67:61:ff:8d:73:83:f4:f8:0c:df: b7:ef:6a:0f:78:c9:41:7b:f2:ad:0e:00:12:77:56: 3d:86:83:81:25:9a:03:2b:44:16:50:b0:84:42:87: c7:59:38:9e:04:36:a7:ee:95:f6:c8:81:da:c5:10: b3:61:eb:35:3d:b4:51:30:45:78:06:67:28:19:7c: 56:7f:9a:7e:25:8e:87:07:df:f4:4b:b8:a4:49:35: 5f:4b:ca:aa:17:0a:6f:40:05:05:c1:e6:8b:74:3e: 5f:76:46:66:b9:52:6c:95:b5:4d:47:40:d6:6e:b2: 88:cf:86:85:5a:e4:9e:ea:91:e2:d6:c3:04:88:a3: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:64:0D:E5:48:BC:0D:CC:E4:5F:D8:19:3B:76:5C:DF:60:87:D5 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e8:00:29:88:f5:1b:7d:2a:b7:7c:ea:a3:78:36:bf:77:6c: f6:18:d2:99:88:f6:7b:56:af:83:72:38:bc:e4:f2:f8:eb:6f: 1c:af:14:b6:e7:4e:f4:7f:55:f5:69:47:3b:2a:55:5c:00:a7: ba:2f:2b:48:17:d7:5a:38:b9:e7:17:d3:3f:a8:03:1a:31:9c: 82:a7:57:72:4a:b3:29:91:dd:c7:47:13:b3:58:14:3d:b3:d8: 43:66:a0:8c:5f:71:6e:7b:ca:0c:76:e7:d6:1f:3f:3e:1c:5a: c1:1a:b1:7d:e2:f5:42:29:07:05:6d:7e:58:21:a4:7b:b6:9b: fa:26:ab:51:14:c2:00:45:2a:a5:e4:cb:da:6d:11:b5:29:fb: b5:db:47:57:e6:82:eb:63:50:39:fe:cc:e7:71:ed:69:3c:c2: f6:c9:9c:57:b9:68:ab:5e:47:7f:f7:f6:db:15:72:c0:0c:16: 0a:0b:e0:77:51:23:df:41:30:45:80:f9:d5:45:b5:c8:3a:01: dd:eb:3d:20:4f:31:08:a0:65:de:4f:88:a3:e3:c8:b4:31:8d: 7c:84:87:1b:e4:34:b6:73:34:f7:33:90:be:cb:5b:20:e7:a0: 27:ac:72:25:9b:e7:ed:76:13:d3:28:e4:0d:1b:be:fc:57:67: 67:84:0e:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwNTE2MTUxOTU5WhcNMjUwNTIzMTUxOTU5WjAYMRYwFAYD VQQDEw02ODI3NTc5Zi01OWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEPgpy901D9+6Ny4k3lbFIcs1PkzrW1w5zGTTZLOei4OFzUQ95Myzvhkmmsm ZjlzlUmkUTSM/iMZNlde+21/uQPaSoCQ/DNBQgabPen4/+4dNTtgs3yNLSZSjTHk RJbAvQF12mTBLpXYxCxYmzfUjKm8oI8OCWNW2HKvzmdh/41zg/T4DN+372oPeMlB e/KtDgASd1Y9hoOBJZoDK0QWULCEQofHWTieBDan7pX2yIHaxRCzYes1PbRRMEV4 BmcoGXxWf5p+JY6HB9/0S7ikSTVfS8qqFwpvQAUFweaLdD5fdkZmuVJslbVNR0DW brKIz4aFWuSe6pHi1sMEiKORTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGB8ZA3l SLwNzORf2Bk7dlzfYIfVMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6AApiPUbfSq3fOqjeDa/d2z2GNKZiPZ7Vq+Dcji85PL4628crxS2 5070f1X1aUc7KlVcAKe6LytIF9daOLnnF9M/qAMaMZyCp1dySrMpkd3HRxOzWBQ9 s9hDZqCMX3Fue8oMdufWHz8+HFrBGrF94vVCKQcFbX5YIaR7tpv6JqtRFMIARSql 5MvabRG1Kfu120dX5oLrY1A5/sznce1pPML2yZxXuWirXkd/9/bbFXLADBYKC+B3 USPfQTBFgPnVRbXIOgHd6z0gTzEIoGXeT4ij48i0MY18hIcb5DS2czT3M5C+y1sg 56AnrHIlm+ftdhPTKOQNG778V2dnhA41 -----END CERTIFICATE-----Generated at Fri May 16 18:51:49 2025 by rpki-client