$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json) Hash identifier: 6/JXbd+Xx48L9aaL4c6F3kfi+xfn8zlhzNjZVzcflXM= Subject key identifier: E1:40:8E:50:9E:F2:AE:62:20:2E:6B:32:AB:89:17:C8:BF:F5:B3:B0 Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft Manifest number: 01AC Signing time: Sun 15 Jun 2025 02:25:30 +0000 Manifest this update: Sun 15 Jun 2025 02:25:29 +0000 Manifest next update: Sun 22 Jun 2025 02:25:29 +0000 Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: L+F7H/guRH5V4Tb1r1REVkIAwOcwEV0I9hOpgtl6rzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Validity Not Before: Jun 15 02:25:29 2025 GMT Not After : Jun 22 02:25:29 2025 GMT Subject: CN=684e2f19-7b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:01:50:32:db:e0:2b:cd:ec:58:0f:f4:21: 94:1c:94:17:48:26:60:85:5e:97:e1:24:d6:69:dc: 10:f3:bc:68:de:42:a1:76:3f:06:19:5e:15:b4:6d: cf:5f:53:9c:20:a3:02:51:9a:52:d3:07:ed:4a:63: 43:7b:07:9f:26:f3:51:c0:11:07:cc:46:56:01:2b: 16:e3:98:c0:ac:e1:e0:9a:2d:83:9b:30:32:a1:c4: bb:20:0c:40:06:b3:4d:9a:c3:6a:f2:94:df:c1:a4: 68:6f:42:c5:23:f6:64:38:eb:8e:a3:62:61:96:23: 12:7a:6c:8a:54:c4:4e:9f:86:21:d7:30:19:f0:54: 2e:bf:81:3f:1f:af:5f:f6:34:72:ae:33:3f:e9:00: 31:68:ce:5d:9e:8b:cb:e0:c5:9b:ac:6a:c8:74:f3: 19:d6:33:b9:b9:49:39:8f:97:be:10:60:ae:a4:e2: 53:8b:47:ad:9a:83:37:62:1a:18:61:7c:c8:c3:49: 45:a3:a4:36:ac:88:08:51:60:57:39:c1:ea:c6:68: 09:72:63:27:47:e9:7d:7e:58:35:f8:bd:51:8f:39: 72:60:30:f5:50:30:48:b1:9d:2b:b9:1e:07:b8:4f: 39:73:8e:f8:ec:a0:30:31:fe:94:9f:45:77:83:35: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:8E:50:9E:F2:AE:62:20:2E:6B:32:AB:89:17:C8:BF:F5:B3:B0 X509v3 Authority Key Identifier: keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:76:2f:fc:94:65:94:7e:a6:2f:f6:21:d5:87:6b:01:37:25: 34:cc:e0:56:8e:6b:56:e1:5f:50:dd:2e:cd:0a:48:b0:db:c8: 05:7d:c5:6d:71:3b:8d:12:ef:c2:3b:ce:52:54:12:bf:3f:30: a1:ff:26:88:b6:24:ea:0b:92:eb:0e:36:10:44:50:af:a8:db: 98:93:50:45:88:ae:85:4f:fd:37:c6:1d:8e:a0:57:8f:77:79: 3f:21:bc:50:d8:4a:7e:fa:e3:08:31:b6:87:a3:d0:73:59:cb: f0:45:b4:6d:d0:fb:a4:b4:ea:a7:bd:2d:20:a0:54:04:5f:16: d3:e4:fc:7f:b4:57:b1:20:20:b1:55:d8:32:d5:d8:09:ba:b5: 02:22:06:e7:c4:6e:59:af:06:82:a0:db:8d:c7:63:98:3d:54: bb:d0:98:c2:96:66:4b:e4:45:b3:a9:bd:d1:14:64:de:34:2a: 26:6c:2e:1b:74:2b:e4:85:90:29:6c:4a:48:19:d8:85:da:29: 5d:40:4f:77:ce:c8:40:a9:a7:31:28:03:07:37:7b:c2:92:a5: 25:aa:d7:2c:c5:25:6b:26:53:20:5d:cf:ca:93:ae:c4:65:d2: 64:86:f7:2b:1c:1c:e8:82:6e:f4:c8:a7:7a:e8:f4:dc:d6:6d: cc:13:40:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE RTEyMjJDRUUwHhcNMjUwNjE1MDIyNTI5WhcNMjUwNjIyMDIyNTI5WjAYMRYwFAYD VQQDEw02ODRlMmYxOS03YjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqoBUDLb4CvN7FgP9CGUHJQXSCZghV6X4STWadwQ87xo3kKhdj8GGV4VtG3P X1OcIKMCUZpS0wftSmNDewefJvNRwBEHzEZWASsW45jArOHgmi2DmzAyocS7IAxA BrNNmsNq8pTfwaRob0LFI/ZkOOuOo2JhliMSemyKVMROn4Yh1zAZ8FQuv4E/H69f 9jRyrjM/6QAxaM5dnovL4MWbrGrIdPMZ1jO5uUk5j5e+EGCupOJTi0etmoM3YhoY YXzIw0lFo6Q2rIgIUWBXOcHqxmgJcmMnR+l9flg1+L1RjzlyYDD1UDBIsZ0ruR4H uE85c4747KAwMf6Un0V3gzXadQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFAjlCe 8q5iIC5rMquJF8i/9bOwMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2 ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGdi/8lGWUfqYv9iHVh2sBNyU0zOBWjmtW4V9Q3S7NCkiw28gFfcVt cTuNEu/CO85SVBK/PzCh/yaItiTqC5LrDjYQRFCvqNuYk1BFiK6FT/03xh2OoFeP d3k/IbxQ2Ep++uMIMbaHo9BzWcvwRbRt0PuktOqnvS0goFQEXxbT5Px/tFexICCx Vdgy1dgJurUCIgbnxG5ZrwaCoNuNx2OYPVS70JjClmZL5EWzqb3RFGTeNCombC4b dCvkhZApbEpIGdiF2ildQE93zshAqacxKAMHN3vCkqUlqtcsxSVrJlMgXc/Kk67E ZdJkhvcrHBzogm70yKd66PTc1m3ME0Df -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:31 2025 by rpki-client