$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: gYCufzMldfD12N2CBcqNfG6jyuutWhgtobJo42WPMA4= Subject key identifier: D4:26:E7:1A:0F:4D:3E:7A:33:F1:D8:E5:05:37:CF:9F:CD:3F:21:8E Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1DA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1D8F Signing time: Thu 24 Apr 2025 16:08:21 +0000 Manifest this update: Thu 24 Apr 2025 16:08:20 +0000 Manifest next update: Thu 01 May 2025 16:08:20 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: 65j4Y17O7dkYgkbFB71DA/8+f2Sf1UrD3laGaoHteLU=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7592 (0x1da8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: Apr 24 16:08:20 2025 GMT Not After : May 1 16:08:20 2025 GMT Subject: CN=680a61f4-8044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f9:60:2a:4d:57:45:29:5b:f9:99:7d:70:9b: 68:5f:ad:d1:07:ed:c9:dc:57:d4:d9:4d:78:71:82: c0:6b:a0:43:ee:47:a8:d0:99:0e:f2:2d:47:c6:0b: de:c7:f8:c7:5a:3a:2d:ff:85:cb:0c:ec:2d:21:26: 4a:34:16:57:8b:82:ae:53:b6:de:21:bd:47:3c:d4: 5d:05:01:5a:ef:54:b8:6d:ae:7e:46:1c:eb:8f:b5: 1c:5c:5a:52:9c:2b:91:62:0d:44:dd:2b:2e:46:6a: d9:5f:b8:54:d0:d8:2c:6f:b6:32:e8:51:cc:cd:3b: 95:89:48:35:8f:0b:ad:78:79:1a:79:2d:64:c1:2f: da:44:2c:cb:28:4f:fd:53:11:6e:40:fc:83:b5:36: f5:72:c7:50:68:1d:eb:0f:86:08:3c:f1:1b:91:86: 96:fb:27:32:01:d7:3b:21:62:12:48:56:7c:9a:d8: 2f:db:09:26:93:e4:4e:1e:01:d3:bf:0d:6d:63:93: 20:1e:7b:b1:69:0f:ab:a5:1a:12:99:62:08:8c:bd: 03:ed:90:7a:09:6a:9e:8f:78:d3:14:f0:5f:f7:8b: 6d:c6:8c:ff:73:fe:2d:bc:bb:2f:72:8d:8e:39:63: 8b:aa:7c:7f:1d:69:c4:50:67:9e:32:5a:4c:ac:28: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:26:E7:1A:0F:4D:3E:7A:33:F1:D8:E5:05:37:CF:9F:CD:3F:21:8E X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c9:ab:31:f3:88:d9:20:e0:dd:00:48:51:79:39:ce:fe:41: 86:a1:f0:f0:f7:da:14:96:c2:bd:75:f2:90:53:01:25:8a:71: f6:bd:7a:16:55:4e:49:79:9d:ea:11:07:f2:1b:c4:93:b8:9d: 56:88:1e:15:7e:a6:1b:9e:e9:1c:24:8c:f2:85:49:f0:d7:8f: 1d:b8:e4:05:49:c1:29:d2:a6:49:bd:ad:63:ae:46:4a:76:08: f3:7b:25:eb:68:1e:6f:9c:31:cc:66:9f:2b:bf:79:ee:b9:8b: 6c:be:d1:e2:9a:82:68:8d:e9:05:96:3b:02:d0:a0:4c:8e:5e: aa:d8:5d:2e:c5:06:09:c0:b6:85:a2:0d:be:93:a6:3a:e2:0d: cf:18:39:28:ca:b6:44:ca:6c:b2:26:dc:01:20:bd:c6:83:d1: fe:b2:6b:6a:c8:93:a8:bc:f7:11:e8:48:9f:9c:92:3a:8e:79: 58:b1:d9:13:c5:f1:a4:a4:3a:67:df:00:04:dd:b6:7b:b6:be: 42:ed:96:04:0c:8d:18:f9:f7:01:33:7d:db:cb:03:cc:2a:f9: d8:5c:ca:5d:90:df:c9:e1:b0:72:35:93:ac:e1:46:6b:43:76: 92:ad:da:13:2b:6f:4f:b4:fc:27:01:d8:e8:2b:bd:f5:82:dc: e1:87:cc:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjUwNDI0MTYwODIwWhcNMjUwNTAxMTYwODIwWjAYMRYwFAYD VQQDEw02ODBhNjFmNC04MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/lgKk1XRSlb+Zl9cJtoX63RB+3J3FfU2U14cYLAa6BD7keo0JkO8i1Hxgve x/jHWjot/4XLDOwtISZKNBZXi4KuU7beIb1HPNRdBQFa71S4ba5+Rhzrj7UcXFpS nCuRYg1E3SsuRmrZX7hU0Ngsb7Yy6FHMzTuViUg1jwuteHkaeS1kwS/aRCzLKE/9 UxFuQPyDtTb1csdQaB3rD4YIPPEbkYaW+ycyAdc7IWISSFZ8mtgv2wkmk+ROHgHT vw1tY5MgHnuxaQ+rpRoSmWIIjL0D7ZB6CWqej3jTFPBf94ttxoz/c/4tvLsvco2O OWOLqnx/HWnEUGeeMlpMrCiTVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQm5xoP TT56M/HY5QU3z5/NPyGOMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXyasx84jZIODdAEhReTnO/kGGofDw99oUlsK9dfKQUwElinH2vXoW VU5JeZ3qEQfyG8STuJ1WiB4VfqYbnukcJIzyhUnw148duOQFScEp0qZJva1jrkZK dgjzeyXraB5vnDHMZp8rv3nuuYtsvtHimoJojekFljsC0KBMjl6q2F0uxQYJwLaF og2+k6Y64g3PGDkoyrZEymyyJtwBIL3Gg9H+smtqyJOovPcR6EifnJI6jnlYsdkT xfGkpDpn3wAE3bZ7tr5C7ZYEDI0Y+fcBM33bywPMKvnYXMpdkN/J4bByNZOs4UZr Q3aSrdoTK29PtPwnAdjoK731gtzhh8x5 -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:15 2025 by rpki-client