$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: BxHVLlommzGnzh+nCWSQip6TOBngz5AWZy1OwUq9fs4= Subject key identifier: 5A:3A:D5:89:5E:D6:05:FC:DE:5F:B6:B1:80:0F:C5:3E:E4:3F:6E:53 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 3493 Signing time: Wed 02 Jul 2025 15:17:16 +0000 Manifest this update: Wed 02 Jul 2025 15:17:15 +0000 Manifest next update: Wed 09 Jul 2025 15:17:15 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: /ZuElh+AEAg87RJ6cizdUtp6vNyjX5xxRxrh5NL/IvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Jul 2 15:17:15 2025 GMT Not After : Jul 9 15:17:15 2025 GMT Subject: CN=68654d7c-5f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:ec:a9:99:1b:8a:6c:e8:fc:2a:40:39:b9: 6e:d2:39:98:0a:45:bd:c8:65:38:7f:93:ba:11:76: da:a9:e8:9f:33:0d:00:c1:f3:27:42:38:40:7f:3d: f0:48:f2:3a:1f:71:fc:5b:32:8c:94:de:60:4b:75: 9b:47:e8:af:76:01:32:40:1b:f6:8e:49:f2:2e:5a: 21:e2:7e:9e:66:54:d9:53:ed:7c:0b:4a:b6:90:ab: 41:43:c9:1c:20:b3:a3:d9:58:ca:20:ca:33:64:2c: bb:18:0f:b4:3a:e7:58:e7:01:02:4f:14:94:4c:8b: 16:87:90:21:c4:57:ba:83:6f:f3:36:81:2e:59:87: ba:97:03:18:03:bc:56:27:aa:6d:68:f5:3b:c7:1f: 36:76:b1:a8:b9:3b:b8:33:b4:09:c5:e3:46:e6:40: 2a:9a:c5:43:98:ef:47:64:46:2e:58:6a:2d:73:5b: 56:38:d9:e2:50:36:b2:98:42:15:2c:51:bb:ea:97: 6f:54:98:c6:2f:8f:51:04:37:22:04:bf:06:98:11: a2:70:9b:f9:3b:fd:e8:85:9c:b0:1d:5b:26:cd:f2: 9c:7a:d6:29:79:ca:da:5d:dd:e8:ef:12:59:e7:f6: ca:51:6d:2c:83:1e:fe:d3:cb:2c:59:3e:dc:72:6b: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:D5:89:5E:D6:05:FC:DE:5F:B6:B1:80:0F:C5:3E:E4:3F:6E:53 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:df:bd:d6:6c:fc:38:19:d8:5b:e9:c8:41:00:b6:a1:2a:ef: 7e:1d:e7:eb:f5:38:9b:d2:a0:37:b4:42:20:0a:87:f9:15:97: cf:d4:dc:33:f8:b9:bb:f2:ca:6f:b7:d1:bc:21:1e:7c:fa:61: 0a:2f:9a:c1:11:f3:1c:1e:69:f2:d4:3c:46:52:4c:c7:cf:e7: 79:67:ac:25:49:7c:92:53:a7:b3:60:ac:17:eb:3d:09:6e:23: c2:fe:08:cd:f7:64:4a:10:b6:f0:5d:f9:2c:10:d5:a3:cd:ba: 37:86:50:06:00:60:b0:e8:bd:e4:54:0b:02:63:a2:bf:e5:5a: 10:58:30:24:38:92:b2:32:f8:e5:1d:34:92:ec:e0:39:71:6d: 05:a9:ca:06:e2:5a:be:f7:78:49:a3:ad:53:f3:5b:e5:45:6d: db:b1:04:e3:bd:38:d3:aa:a4:3a:9b:db:e6:8b:0a:f5:47:41: 39:24:6f:ea:86:b3:63:e5:bc:b0:51:08:a4:22:33:65:fe:01: de:d0:5a:0b:16:73:4f:ab:70:81:c9:ff:a2:14:36:02:67:2d: 2e:e2:08:fe:24:1f:fd:55:fe:94:95:ea:4a:d5:9d:11:a6:29: 3a:8b:02:f5:5c:e5:a1:00:69:00:f4:0b:a7:c6:a4:28:68:bb: 15:5b:56:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwNzAyMTUxNzE1WhcNMjUwNzA5MTUxNzE1WjAYMRYwFAYD VQQDEw02ODY1NGQ3Yy01ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTbsqZkbimzo/CpAOblu0jmYCkW9yGU4f5O6EXbaqeifMw0AwfMnQjhAfz3w SPI6H3H8WzKMlN5gS3WbR+ivdgEyQBv2jknyLloh4n6eZlTZU+18C0q2kKtBQ8kc ILOj2VjKIMozZCy7GA+0OudY5wECTxSUTIsWh5AhxFe6g2/zNoEuWYe6lwMYA7xW J6ptaPU7xx82drGouTu4M7QJxeNG5kAqmsVDmO9HZEYuWGotc1tWONniUDaymEIV LFG76pdvVJjGL49RBDciBL8GmBGicJv5O/3ohZywHVsmzfKcetYpecraXd3o7xJZ 5/bKUW0sgx7+08ssWT7ccmufhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo61Yle 1gX83l+2sYAPxT7kP25TMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/373WbPw4Gdhb6chBALahKu9+Hefr9Tib0qA3tEIgCof5FZfP1Nwz +Lm78spvt9G8IR58+mEKL5rBEfMcHmny1DxGUkzHz+d5Z6wlSXySU6ezYKwX6z0J biPC/gjN92RKELbwXfksENWjzbo3hlAGAGCw6L3kVAsCY6K/5VoQWDAkOJKyMvjl HTSS7OA5cW0FqcoG4lq+93hJo61T81vlRW3bsQTjvTjTqqQ6m9vmiwr1R0E5JG/q hrNj5bywUQikIjNl/gHe0FoLFnNPq3CByf+iFDYCZy0u4gj+JB/9Vf6UlepK1Z0R pik6iwL1XOWhAGkA9AunxqQoaLsVW1Ym -----END CERTIFICATE-----Generated at Thu Jul 3 17:37:47 2025 by rpki-client