$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: FXS6tEVe09giwaSykhq5wBZYwtSlRgQkeHpPJjNudSA= Subject key identifier: 12:18:28:E9:D9:10:4C:B2:AD:58:CE:7E:91:3A:35:89:CB:05:95:77 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 3470 Signing time: Thu 24 Apr 2025 15:12:48 +0000 Manifest this update: Thu 24 Apr 2025 15:12:47 +0000 Manifest next update: Thu 01 May 2025 15:12:47 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: HJ6zLwL6ttbk9ojkfDSMDITAe47HL9GWrlG5Ze41kD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Apr 24 15:12:47 2025 GMT Not After : May 1 15:12:47 2025 GMT Subject: CN=680a54ef-22de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:f2:8a:b5:52:7c:3e:af:8f:ea:81:23:9d: 81:e8:bb:d3:8c:59:ca:d7:7d:8a:6c:ef:ea:56:ec: 50:aa:50:fd:db:d6:51:c0:a9:d4:4f:c6:a5:17:54: 12:9a:1d:a1:57:ab:f7:e9:90:ee:fd:81:d2:60:aa: aa:55:e9:25:18:e3:50:d6:00:57:2f:83:35:da:d9: dd:61:a2:52:62:36:28:a1:22:e9:fb:90:53:e5:5f: 48:48:a1:94:cf:63:25:4a:80:35:0e:8b:9e:39:98: c8:be:c8:5b:2c:42:36:42:31:7f:51:20:ec:b5:25: 87:57:9d:5f:28:ff:9a:91:70:31:ba:ec:7b:51:0a: 60:04:60:fc:00:8d:86:ff:39:27:65:dd:2a:48:71: a6:6c:5d:89:87:5c:81:0c:df:1c:74:37:dd:41:79: 21:18:e8:af:71:52:f5:4c:97:4d:8c:16:d0:5c:8d: 5d:44:8e:cb:72:b1:2b:97:43:be:c0:ab:9e:ca:d5: 08:5b:2b:7b:b9:dc:2e:87:a2:d1:8a:1b:e0:e5:3d: 53:92:2b:eb:ad:81:b3:38:7e:4f:60:ea:e5:e7:32: ba:73:1e:43:8b:c5:f9:19:34:6f:c7:57:ea:16:5f: 5a:d0:2c:c5:36:7d:cb:32:06:47:11:48:3d:78:31: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:28:E9:D9:10:4C:B2:AD:58:CE:7E:91:3A:35:89:CB:05:95:77 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:62:00:55:7c:d0:d7:9f:44:87:dd:5f:29:58:ee:01:7c:61: 3a:bd:fe:a4:c8:3b:78:dc:1e:c8:38:31:42:01:b2:91:70:60: 18:04:7e:7b:0d:75:e5:70:e0:f4:bd:78:0a:6d:aa:c9:d8:a2: a1:09:8a:b2:89:bb:85:a7:00:9c:86:61:ec:25:eb:e9:c6:6a: 37:ce:55:5d:a6:dd:2b:31:a5:d3:f4:6e:e2:be:78:86:4d:1e: 90:57:ee:fb:43:97:02:2b:56:1e:b4:cf:3f:47:95:ba:b8:d8: ee:bd:33:71:44:48:67:e8:38:73:93:1a:25:a6:ec:4b:0e:4b: 2e:30:c6:6e:ea:05:46:53:80:e7:e8:ba:af:af:93:d1:27:d8: dd:92:66:13:1b:28:34:4c:14:3e:9a:4f:11:36:ec:3a:fe:5c: a8:34:ae:fe:8c:fb:9b:e7:1a:17:db:6b:8c:8a:71:a2:e6:1f: b7:c7:98:a1:2a:c2:ef:0c:4a:d6:98:b6:2a:b0:fe:2b:e6:8f: 57:05:f3:0d:7b:44:f2:16:44:f5:04:6c:5a:c9:27:e5:4e:81: 01:b2:e8:7b:65:5c:41:65:42:51:34:b6:26:20:2d:c7:99:2a: de:be:24:45:8d:ab:ab:f8:29:ea:d9:cd:d3:c5:1d:87:d2:6e: 7f:e5:59:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwNDI0MTUxMjQ3WhcNMjUwNTAxMTUxMjQ3WjAYMRYwFAYD VQQDEw02ODBhNTRlZi0yMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoPyirVSfD6vj+qBI52B6LvTjFnK132KbO/qVuxQqlD929ZRwKnUT8alF1QS mh2hV6v36ZDu/YHSYKqqVeklGONQ1gBXL4M12tndYaJSYjYooSLp+5BT5V9ISKGU z2MlSoA1DoueOZjIvshbLEI2QjF/USDstSWHV51fKP+akXAxuux7UQpgBGD8AI2G /zknZd0qSHGmbF2Jh1yBDN8cdDfdQXkhGOivcVL1TJdNjBbQXI1dRI7LcrErl0O+ wKueytUIWyt7udwuh6LRihvg5T1TkivrrYGzOH5PYOrl5zK6cx5Di8X5GTRvx1fq Fl9a0CzFNn3LMgZHEUg9eDFN/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIYKOnZ EEyyrVjOfpE6NYnLBZV3MB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsYgBVfNDXn0SH3V8pWO4BfGE6vf6kyDt43B7IODFCAbKRcGAYBH57 DXXlcOD0vXgKbarJ2KKhCYqyibuFpwCchmHsJevpxmo3zlVdpt0rMaXT9G7ivniG TR6QV+77Q5cCK1YetM8/R5W6uNjuvTNxREhn6DhzkxolpuxLDksuMMZu6gVGU4Dn 6Lqvr5PRJ9jdkmYTGyg0TBQ+mk8RNuw6/lyoNK7+jPub5xoX22uMinGi5h+3x5ih KsLvDErWmLYqsP4r5o9XBfMNe0TyFkT1BGxaySflToEBsuh7ZVxBZUJRNLYmIC3H mSreviRFjaur+Cnq2c3TxR2H0m5/5Vke -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:19 2025 by rpki-client