$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json) Hash identifier: OUeZo6y1calxcZ7ZM5ohDj40OLWU0ACVgfQb1VGAHhk= Subject key identifier: 53:39:22:25:46:C3:89:21:F5:19:E6:97:E8:F1:92:24:CB:7D:9B:9C Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft Manifest number: F8 Signing time: Thu 03 Apr 2025 04:26:51 +0000 Manifest this update: Thu 03 Apr 2025 04:26:50 +0000 Manifest next update: Thu 10 Apr 2025 04:26:50 +0000 Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: OpvcUECBtEzxKP8dL5Zm1bbYh7KF9xSY47HiXh8OjEg=) 2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: ZWPK2ab0Ef3qAN+iabKfnFGe44+77H2KgSLOA0dY0EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF Validity Not Before: Apr 3 04:26:50 2025 GMT Not After : Apr 10 04:26:50 2025 GMT Subject: CN=67ee0e0b-97b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:12:25:74:0b:d4:a0:b1:df:40:62:44:c2: fd:1e:d9:1e:1a:0c:25:f0:05:a0:b7:0d:ab:ca:e8: da:dc:fa:42:fc:82:d3:ce:bc:b6:f0:6f:78:2f:41: 15:c7:5b:4d:4a:5f:ec:7b:47:01:66:4f:86:4a:74: b8:f7:66:10:5c:8e:3e:4e:d6:1d:a2:e2:17:ab:8d: 62:d9:ac:33:e4:ea:94:47:fe:fa:35:46:aa:fa:2f: 2b:12:0a:93:0e:11:0e:97:d9:a5:97:6f:2c:b6:e2: b6:65:a0:be:24:ec:47:9c:64:bb:d6:45:47:a7:ac: fb:df:bf:13:a9:c1:e6:96:26:b5:17:50:9f:52:1a: b2:98:14:58:9e:e4:7a:45:24:e4:e3:25:63:d3:2a: 09:bb:f4:29:b1:b4:39:64:a9:e9:ad:e0:28:46:50: 5a:91:df:84:87:81:40:db:33:8f:e4:0f:23:fd:b6: 85:b3:e5:ed:c8:28:36:bc:12:5a:c6:b6:bd:36:10: ad:4f:2a:ca:d9:7b:4e:0d:e5:06:29:99:75:b3:4e: 90:25:00:f5:1a:32:b5:bb:05:56:0a:95:7f:80:2e: ad:f4:22:e2:a4:03:62:82:cf:e1:d2:5c:d7:4d:5e: 4a:fa:5e:71:29:82:d0:70:81:5b:65:85:9d:a7:ff: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:22:25:46:C3:89:21:F5:19:E6:97:E8:F1:92:24:CB:7D:9B:9C X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1c:51:d3:3e:f2:94:dd:0d:95:30:2a:3a:62:da:97:66:c4: a9:34:e7:0e:34:d5:eb:b1:f6:94:ce:06:93:63:81:51:d5:1b: fa:8b:d1:99:d5:16:c6:56:45:47:86:c9:2c:c5:79:2a:bb:df: 76:17:37:18:7c:a5:0e:92:bc:89:96:5d:ec:f9:33:5d:de:8d: 62:02:74:1d:bf:2d:48:5b:70:0f:ab:12:99:70:57:bd:3a:3e: 90:e7:79:5e:fc:23:d9:e4:3f:b0:58:a3:2a:04:b8:9e:7e:b9: 05:6b:88:fd:c6:2b:bb:a8:95:41:c4:14:c4:1b:dd:e3:46:d1: 34:a1:78:1e:54:6d:b8:57:e8:1a:6b:9d:3f:a1:18:84:9a:af: be:11:b6:21:d1:bb:73:34:5b:30:4e:3f:fe:b2:4a:63:79:bd: 71:06:df:2f:e7:4f:7d:55:07:d8:38:9a:51:be:a0:5f:ac:f3: 34:22:ed:68:9e:ad:74:87:d6:48:70:6b:c8:1a:ae:f6:43:c7: fc:f1:94:fe:5f:20:36:b8:40:15:94:5d:20:f0:b5:7c:3a:ac: d1:a3:ae:14:77:08:8f:3f:2d:fe:eb:91:75:66:92:c6:7d:88: f1:ed:89:11:c8:1a:06:8a:25:94:d2:3d:f4:30:4e:82:2a:97: 21:ff:4c:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUwNDAzMDQyNjUwWhcNMjUwNDEwMDQyNjUwWjAYMRYwFAYD VQQDEw02N2VlMGUwYi05N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUASJXQL1KCx30BiRML9HtkeGgwl8AWgtw2ryuja3PpC/ILTzry28G94L0EV x1tNSl/se0cBZk+GSnS492YQXI4+TtYdouIXq41i2awz5OqUR/76NUaq+i8rEgqT DhEOl9mll28stuK2ZaC+JOxHnGS71kVHp6z7378TqcHmlia1F1CfUhqymBRYnuR6 RSTk4yVj0yoJu/QpsbQ5ZKnpreAoRlBakd+Eh4FA2zOP5A8j/baFs+XtyCg2vBJa xra9NhCtTyrK2XtODeUGKZl1s06QJQD1GjK1uwVWCpV/gC6t9CLipANigs/h0lzX TV5K+l5xKYLQcIFbZYWdp/92fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM5IiVG w4kh9Rnml+jxkiTLfZucMB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9HFHTPvKU3Q2VMCo6YtqXZsSpNOcONNXrsfaUzgaTY4FR1Rv6i9GZ 1RbGVkVHhsksxXkqu992FzcYfKUOkryJll3s+TNd3o1iAnQdvy1IW3APqxKZcFe9 Oj6Q53le/CPZ5D+wWKMqBLiefrkFa4j9xiu7qJVBxBTEG93jRtE0oXgeVG24V+ga a50/oRiEmq++EbYh0btzNFswTj/+skpjeb1xBt8v5099VQfYOJpRvqBfrPM0Iu1o nq10h9ZIcGvIGq72Q8f88ZT+XyA2uEAVlF0g8LV8OqzRo64UdwiPPy3+65F1ZpLG fYjx7YkRyBoGiiWU0j30ME6CKpch/0yV -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:32 2025 by rpki-client