$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json) Hash identifier: sGMERvamUMJIrTPylHgy4JYSfxva8qM5vLFPEm8VdtA= Subject key identifier: 33:AB:11:F1:EC:0B:13:8F:6C:1A:19:66:F5:5E:4E:77:C7:F1:4B:21 Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft Manifest number: 0103 Signing time: Fri 25 Apr 2025 04:09:49 +0000 Manifest this update: Fri 25 Apr 2025 04:09:49 +0000 Manifest next update: Fri 02 May 2025 04:09:49 +0000 Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: 3mXo//fMqEsOzmXiDjKOX/cv9aJZgReWbK/hsPUiW4k=) 2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: ZWPK2ab0Ef3qAN+iabKfnFGe44+77H2KgSLOA0dY0EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Validity Not Before: Apr 25 04:09:49 2025 GMT Not After : May 2 04:09:49 2025 GMT Subject: CN=680b0b0d-2080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:4a:90:7a:eb:94:66:fd:20:85:91:0c:17: 4d:4c:eb:2c:2b:e7:92:5d:f0:5a:9b:9b:db:3f:48: d4:89:88:74:b6:ae:d9:fa:8c:86:53:c0:31:73:cb: e2:60:9f:0f:3c:8a:46:52:29:83:b1:f0:80:53:46: cb:41:1a:31:3e:18:d0:1d:e5:82:8c:65:57:09:3c: f6:71:d0:54:2c:0c:61:2f:66:ac:72:f0:09:55:8b: 45:25:67:70:41:d5:6f:98:0d:7a:37:6f:d4:db:8d: 19:3b:a6:23:96:2c:a9:51:4b:7c:5d:cf:50:3a:0f: 72:8a:f6:44:5c:b7:28:f1:5f:3f:02:eb:04:86:d8: c8:47:d9:49:a3:d9:d0:1a:b8:8e:4c:28:9b:4c:3f: 7d:1e:64:ac:2c:c0:2f:b3:b9:18:03:2d:2d:fd:75: a6:d1:47:80:69:84:40:13:3b:8c:f7:d6:c8:0c:c1: 7d:b2:29:fc:46:da:5d:33:b8:d0:9a:83:16:22:55: cf:1b:36:0f:e2:ff:a2:64:d1:d0:88:8f:88:7e:b2: dc:52:f6:8b:d1:be:18:f9:6d:5d:ec:e9:36:2a:a3: 19:96:52:69:cf:68:81:b4:e5:69:15:af:a7:01:93: cc:28:13:92:f0:bb:3b:24:b4:27:9a:2f:84:40:8f: 37:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:11:F1:EC:0B:13:8F:6C:1A:19:66:F5:5E:4E:77:C7:F1:4B:21 X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bd:5e:52:3c:d5:59:14:5e:53:3d:56:7a:c9:67:bf:06:9b: 8e:ec:de:8a:43:82:4c:60:66:28:00:da:32:04:89:ad:ae:79: be:8f:fd:af:32:8d:31:e8:ea:20:dd:8c:67:ab:77:6d:11:4e: 7f:0a:51:87:61:3a:15:cb:ae:9d:ae:b7:00:72:58:b3:7a:2a: ad:3a:7d:d5:c9:81:52:6c:eb:b7:41:ca:69:28:32:fc:8a:b6: f1:e9:30:00:1b:3a:09:8c:69:92:1f:96:36:79:b2:70:a2:c9: 67:a8:f5:9f:ac:89:2a:31:9a:bf:13:e8:86:d0:20:31:65:e2: 0e:a1:1a:12:e1:2d:8c:7d:60:21:8b:d5:f7:1e:2a:7f:b6:0f: 31:d2:4c:91:94:3e:c5:1d:0b:c1:4b:68:84:b2:9d:79:bf:be: 13:b2:3a:14:9d:78:0f:08:0d:23:8e:cf:0b:a2:29:86:2e:12: 7a:90:11:f7:4d:08:43:e2:b8:24:10:8f:de:eb:50:ce:c8:fe: f8:44:19:51:8f:e6:38:a7:da:47:54:18:78:78:22:ca:ec:c3: f0:88:7c:d7:10:b9:8e:03:92:dc:cb:a0:6e:ad:5f:21:96:ed: 0d:d9:85:e7:5e:d0:b2:f9:2f:48:c7:50:a0:d2:18:6d:43:df: 98:8a:74:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUwNDI1MDQwOTQ5WhcNMjUwNTAyMDQwOTQ5WjAYMRYwFAYD VQQDEw02ODBiMGIwZC0yMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymtKkHrrlGb9IIWRDBdNTOssK+eSXfBam5vbP0jUiYh0tq7Z+oyGU8Axc8vi YJ8PPIpGUimDsfCAU0bLQRoxPhjQHeWCjGVXCTz2cdBULAxhL2ascvAJVYtFJWdw QdVvmA16N2/U240ZO6YjliypUUt8Xc9QOg9yivZEXLco8V8/AusEhtjIR9lJo9nQ GriOTCibTD99HmSsLMAvs7kYAy0t/XWm0UeAaYRAEzuM99bIDMF9sin8RtpdM7jQ moMWIlXPGzYP4v+iZNHQiI+IfrLcUvaL0b4Y+W1d7Ok2KqMZllJpz2iBtOVpFa+n AZPMKBOS8Ls7JLQnmi+EQI83PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOrEfHs CxOPbBoZZvVeTnfH8UshMB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9vV5SPNVZFF5TPVZ6yWe/BpuO7N6KQ4JMYGYoANoyBImtrnm+j/2v Mo0x6Oog3Yxnq3dtEU5/ClGHYToVy66drrcAclizeiqtOn3VyYFSbOu3QcppKDL8 irbx6TAAGzoJjGmSH5Y2ebJwoslnqPWfrIkqMZq/E+iG0CAxZeIOoRoS4S2MfWAh i9X3Hip/tg8x0kyRlD7FHQvBS2iEsp15v74TsjoUnXgPCA0jjs8LoimGLhJ6kBH3 TQhD4rgkEI/e61DOyP74RBlRj+Y4p9pHVBh4eCLK7MPwiHzXELmOA5Lcy6BurV8h lu0N2YXnXtCy+S9Ix1Cg0hhtQ9+YinRZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:46 2025 by rpki-client