$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: RXypZVXxj8AywrlwTtCRFH6SLtFRBMUolEFAmcFDYQ4= Subject key identifier: EA:73:59:85:DF:65:6F:65:1E:02:22:DA:E0:DC:A8:64:C7:28:69:E9 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 15:11:31 +0000 Manifest this update: Sat 14 Jun 2025 15:11:31 +0000 Manifest next update: Sat 21 Jun 2025 15:11:31 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: KvL18fcBjhXO/P0HyrxYK14qR4OBlaboeD48b0OxGwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Jun 14 15:11:31 2025 GMT Not After : Jun 21 15:11:31 2025 GMT Subject: CN=684d9123-5b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:0a:f6:8c:a4:36:cc:82:56:82:74:e3:f0: 19:6e:ba:db:5b:e3:66:43:31:00:ea:9c:16:a5:82: 97:e2:47:fe:1f:19:f4:0c:8f:e7:f1:8a:fe:9c:e5: 63:70:d3:72:a3:2c:cd:ba:f0:fe:c6:42:15:6c:b8: fd:d4:bf:b6:2d:84:39:e5:cd:ac:54:55:bc:5a:0a: 76:3a:b2:db:e0:9b:68:0b:be:9d:e7:e1:69:10:2e: 6e:08:7a:88:3f:c5:7e:aa:b1:aa:9a:71:9a:02:63: 7c:a1:d5:a1:e6:72:33:33:c1:32:1e:a7:91:8d:2e: c0:af:75:54:a5:e2:4b:58:4b:a3:c0:dd:cf:d1:b2: bb:7e:02:19:a6:20:ea:84:8b:8a:c8:0c:78:73:95: 8c:5c:0d:cb:31:5e:ab:e1:5f:10:87:62:d1:ba:c4: 4c:ea:ad:71:6e:8d:11:72:bb:f7:20:4d:f4:50:29: 5d:a2:b5:db:06:c8:a0:71:0f:f6:05:e8:49:ae:e9: ee:84:1a:87:71:bc:3e:b3:69:47:67:c5:4e:3d:ec: 32:b2:8a:ed:7d:23:a4:25:bd:14:2a:70:d7:06:53: 45:e3:d8:90:60:ff:dc:3e:c0:cf:e8:f2:03:7c:3b: e3:d5:ac:a1:b2:58:7f:2d:85:8c:09:22:4d:2f:6e: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:73:59:85:DF:65:6F:65:1E:02:22:DA:E0:DC:A8:64:C7:28:69:E9 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:91:e1:54:82:74:3a:c1:5c:10:86:f9:f6:fa:99:b0:87:b4: 84:74:c3:45:11:22:5a:a7:71:1e:96:09:58:38:8f:ed:aa:92: 63:5d:e8:c0:d4:46:c7:35:ce:e4:e8:05:cf:2b:95:76:ff:aa: 72:ab:64:1d:ac:d0:6f:52:44:e1:0a:cf:64:57:a7:56:d1:93: 27:27:af:5b:a3:61:09:1e:f7:50:ff:ea:fa:c6:d9:14:c7:0b: 82:4e:66:e3:6d:99:81:7a:f6:63:9f:79:6a:6d:f2:57:0c:2f: 09:53:9d:c6:ca:99:56:3c:74:19:de:de:21:f9:36:7d:44:a1: dc:d5:e7:d9:4f:65:09:af:24:64:c6:12:93:b7:93:20:7b:9f: 00:c1:9c:5b:64:cb:f1:ac:ca:80:84:a8:1a:09:6f:98:ea:f5: 6b:a1:bd:bb:d9:b1:dd:5c:d9:df:94:1d:1c:e7:49:0c:6f:71: f9:fa:c1:ca:10:12:e8:ad:d8:8b:93:65:58:23:18:eb:22:f7: f3:79:1f:c2:56:d8:a8:66:63:2b:c5:d4:95:9a:ef:9f:62:fd: 2b:98:09:e0:48:95:e1:dd:ac:00:6b:9d:4d:f7:b6:d1:7c:37: 88:92:c6:f5:8e:5c:27:38:47:43:cf:4c:e2:e3:9b:01:b2:f9: e1:07:4b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwNjE0MTUxMTMxWhcNMjUwNjIxMTUxMTMxWjAYMRYwFAYD VQQDEw02ODRkOTEyMy01YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UoK9oykNsyCVoJ04/AZbrrbW+NmQzEA6pwWpYKX4kf+Hxn0DI/n8Yr+nOVj cNNyoyzNuvD+xkIVbLj91L+2LYQ55c2sVFW8Wgp2OrLb4JtoC76d5+FpEC5uCHqI P8V+qrGqmnGaAmN8odWh5nIzM8EyHqeRjS7Ar3VUpeJLWEujwN3P0bK7fgIZpiDq hIuKyAx4c5WMXA3LMV6r4V8Qh2LRusRM6q1xbo0Rcrv3IE30UCldorXbBsigcQ/2 BehJrunuhBqHcbw+s2lHZ8VOPewysortfSOkJb0UKnDXBlNF49iQYP/cPsDP6PID fDvj1ayhslh/LYWMCSJNL27TMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpzWYXf ZW9lHgIi2uDcqGTHKGnpMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgkeFUgnQ6wVwQhvn2+pmwh7SEdMNFESJap3EelglYOI/tqpJjXejA 1EbHNc7k6AXPK5V2/6pyq2QdrNBvUkThCs9kV6dW0ZMnJ69bo2EJHvdQ/+r6xtkU xwuCTmbjbZmBevZjn3lqbfJXDC8JU53GyplWPHQZ3t4h+TZ9RKHc1efZT2UJryRk xhKTt5Mge58AwZxbZMvxrMqAhKgaCW+Y6vVrob272bHdXNnflB0c50kMb3H5+sHK EBLordiLk2VYIxjrIvfzeR/CVtioZmMrxdSVmu+fYv0rmAngSJXh3awAa51N97bR fDeIksb1jlwnOEdDz0zi45sBsvnhB0uB -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:13 2025 by rpki-client