$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: 8AYN2jNhBV4/eeWykUj00yTvZIbOtFOgiGa83AIX7ek= Subject key identifier: 88:07:73:30:AD:CF:61:D5:1F:A8:E9:66:4B:F2:B3:42:BE:E4:DB:38 Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 0157 Signing time: Mon 21 Apr 2025 03:21:08 +0000 Manifest this update: Mon 21 Apr 2025 03:21:07 +0000 Manifest next update: Mon 28 Apr 2025 03:21:07 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: BKhk+h2VvUEr6WHKQRjT0NRhheKUgaVsROGYQi7hFDM=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: n+UG6V5XV7UFganlBH1N62nTVgBD1jdXRIOHq8v8JMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Apr 21 03:21:07 2025 GMT Not After : Apr 28 03:21:07 2025 GMT Subject: CN=6805b9a3-f4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:eb:76:98:02:f3:b0:b0:0b:5f:1a:dd:7e: 94:9e:95:e5:84:76:5b:0f:5a:63:82:b1:71:2b:01: 3f:44:ff:e3:40:4e:49:b3:ab:f1:9e:0f:0e:06:33: 4e:7f:1e:e9:df:bc:df:71:9d:50:04:76:8c:0e:a4: 4f:18:d9:f4:5a:8e:16:18:3e:6c:1e:d4:1f:aa:86: fc:74:12:9d:d1:1c:72:5c:59:93:f8:77:a1:5f:b9: c1:c1:f4:0c:9d:12:09:33:0d:79:29:2d:92:37:9f: 13:f2:06:b5:50:85:5f:90:dd:e3:26:3e:52:15:37: 9e:25:95:e3:b3:2c:f9:1c:1a:a9:b9:82:91:60:4f: 70:fa:9b:51:3e:84:e5:9a:1d:c9:9e:d2:e1:ba:74: 6a:c1:94:f0:e7:6a:5f:38:9a:95:51:79:08:6b:be: a2:a6:b9:6e:ec:32:70:a5:56:a9:a0:be:29:12:e9: 03:f3:56:f1:74:ac:46:09:15:d4:8d:69:88:ed:fb: dd:63:98:bd:ea:1c:37:be:72:4b:fc:39:3c:9d:a5: 1f:df:c7:d4:76:52:3e:b1:2e:ad:1d:24:0a:19:a2: 9c:23:99:fe:85:1f:dd:44:bd:ca:46:c8:42:8e:6f: 03:2f:fa:93:65:75:04:8a:63:4e:01:b4:03:44:0a: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:73:30:AD:CF:61:D5:1F:A8:E9:66:4B:F2:B3:42:BE:E4:DB:38 X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c9:26:27:7f:e9:cf:35:33:59:df:d7:11:e4:16:c7:8f:86: 6c:06:d4:59:92:50:8a:fa:70:fa:f7:af:f4:df:14:da:4d:ae: 1f:25:74:b5:d2:9f:6a:76:44:bb:54:3b:cb:1a:b6:5f:ce:d8: 1f:0b:38:d4:e0:00:f6:80:46:24:36:2f:b4:38:61:e6:c2:8e: 26:d0:44:3d:dc:22:4d:ce:d5:f9:52:93:e0:fc:34:d8:58:94: 71:30:7b:7f:b0:fb:ac:42:d2:25:7f:6a:15:fb:40:ce:4e:26: 66:f0:4d:3c:6a:7e:d2:7b:04:50:31:ca:ed:85:08:bb:d6:7a: bc:27:cf:63:37:80:c1:b3:cb:7b:ba:8a:69:37:06:8d:50:00: 14:a0:f7:18:44:7a:c2:20:1c:95:7e:07:d7:c7:92:52:23:7e: 4b:d9:53:48:cc:56:3b:4f:42:66:f1:86:7c:db:ba:7f:c8:fa: 80:4b:c3:80:1a:94:c9:bc:db:a7:1e:35:f8:d2:38:d9:aa:10: 51:97:10:05:47:1a:45:e9:70:09:a2:52:cf:80:6d:74:91:a8: 66:79:11:83:d4:29:fa:6b:39:55:7f:91:ad:50:c6:c1:de:d2: 07:85:aa:92:ab:e9:ea:90:58:97:f7:9a:65:0a:35:bd:a8:92: df:86:47:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwNDIxMDMyMTA3WhcNMjUwNDI4MDMyMTA3WjAYMRYwFAYD VQQDEw02ODA1YjlhMy1mNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEjrdpgC87CwC18a3X6UnpXlhHZbD1pjgrFxKwE/RP/jQE5Js6vxng8OBjNO fx7p37zfcZ1QBHaMDqRPGNn0Wo4WGD5sHtQfqob8dBKd0RxyXFmT+HehX7nBwfQM nRIJMw15KS2SN58T8ga1UIVfkN3jJj5SFTeeJZXjsyz5HBqpuYKRYE9w+ptRPoTl mh3JntLhunRqwZTw52pfOJqVUXkIa76iprlu7DJwpVapoL4pEukD81bxdKxGCRXU jWmI7fvdY5i96hw3vnJL/Dk8naUf38fUdlI+sS6tHSQKGaKcI5n+hR/dRL3KRshC jm8DL/qTZXUEimNOAbQDRApdnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgHczCt z2HVH6jpZkvys0K+5Ns4MB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ySYnf+nPNTNZ39cR5BbHj4ZsBtRZklCK+nD696/03xTaTa4fJXS1 0p9qdkS7VDvLGrZfztgfCzjU4AD2gEYkNi+0OGHmwo4m0EQ93CJNztX5UpPg/DTY WJRxMHt/sPusQtIlf2oV+0DOTiZm8E08an7SewRQMcrthQi71nq8J89jN4DBs8t7 uoppNwaNUAAUoPcYRHrCIByVfgfXx5JSI35L2VNIzFY7T0Jm8YZ827p/yPqAS8OA GpTJvNunHjX40jjZqhBRlxAFRxpF6XAJolLPgG10kahmeRGD1Cn6azlVf5GtUMbB 3tIHhaqSq+nqkFiX95plCjW9qJLfhkcC -----END CERTIFICATE-----Generated at Mon Apr 21 07:00:14 2025 by rpki-client