$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: 5GdWGZfOSrcum4Rg+OTVP7YuTR9GzLjGU3gy7yqa96Q= Subject key identifier: D4:2B:C8:61:E6:FF:A5:21:A0:82:0E:53:5E:40:15:62:23:93:04:81 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 346D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 346D Signing time: Fri 18 Apr 2025 15:18:45 +0000 Manifest this update: Fri 18 Apr 2025 15:18:44 +0000 Manifest next update: Fri 25 Apr 2025 15:18:44 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: gKPk6q8wCj0chZ6z6dyv5skSjpUW+z3DFPkJEre2lqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 15:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13421 (0x346d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Apr 18 15:18:44 2025 GMT Not After : Apr 25 15:18:44 2025 GMT Subject: CN=68026d55-048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:6a:d2:d3:a9:00:78:dc:76:d1:dd:93:a7: 27:f9:66:42:e6:e5:3c:46:9a:7d:b7:b4:e8:d8:42: 58:95:ec:8e:9a:6f:46:20:7d:30:7a:83:77:7f:9e: 18:37:16:36:41:7c:42:a8:9b:b5:cd:23:ec:85:0c: 6d:89:4c:89:a0:7e:3f:db:63:84:3f:86:d2:0b:fb: b7:a6:68:cd:da:8e:d5:41:cd:e1:66:6c:88:90:7c: c1:5a:66:6a:9f:49:25:e9:11:1f:0b:2d:c0:79:14: 78:3e:71:63:a9:98:c7:57:80:70:c1:85:32:53:d5: 3c:0d:f3:61:cd:7f:84:ad:dd:f7:95:1f:50:36:a3: b5:01:f5:12:19:d1:b6:d0:7a:f7:7f:9e:13:82:40: 37:78:14:ef:f1:b0:58:b8:85:98:d9:58:fa:d4:3e: a1:d0:f3:3a:18:ab:74:a1:8f:bd:cb:db:58:73:27: ba:d1:9f:30:a9:2c:ee:0e:ad:64:26:2b:07:1f:65: 1c:5b:3f:a4:ca:d7:52:01:bf:21:dd:e4:3d:51:18: bd:11:df:a6:a0:40:ca:d6:8c:8a:9c:87:d4:a2:01: 1c:84:66:36:fe:f9:7d:cc:2b:fd:fa:96:27:63:b3: 28:9f:ab:16:53:68:24:f1:aa:71:8e:85:e8:58:7f: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2B:C8:61:E6:FF:A5:21:A0:82:0E:53:5E:40:15:62:23:93:04:81 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:77:05:b5:fc:cb:d4:72:52:38:32:c9:ab:e9:3b:91:8e: de:83:43:48:3d:3b:73:7c:ee:c9:d4:1f:4b:dd:0f:ff:9c:a5: 29:c3:2e:37:3d:ea:6d:89:42:30:d4:71:f0:64:76:6b:d3:6a: 11:f2:3b:33:b3:57:39:42:33:78:dc:c3:e4:3b:7f:f5:88:93: 05:7d:a0:19:79:b1:e4:63:b4:9c:5b:73:38:6c:57:5e:e4:6b: 86:57:a0:59:0f:66:fc:7a:0a:e5:29:1c:77:f6:7e:56:0d:ff: 1b:b5:eb:af:9f:05:22:6b:4b:ea:29:29:78:41:71:d7:6b:ce: c7:8b:2c:4a:4f:d3:14:68:2d:47:e3:da:30:51:c4:84:9a:7e: a7:29:e1:a3:00:a5:df:13:d9:21:66:1e:ad:00:9b:fd:8e:2a: 11:25:77:34:fe:34:6f:8b:67:88:44:b5:15:1d:95:26:fe:f7: 2f:d3:24:5e:79:67:88:f4:f6:b2:75:bd:93:1c:6d:71:f0:97: e9:e1:1b:86:f1:4a:28:ff:d1:95:5b:08:89:7a:89:a0:0f:ff: c6:ab:be:11:82:c4:d2:83:2f:0e:c4:5d:1c:1b:4c:7c:2f:ab: 3f:7b:ed:4a:e4:65:9b:b3:cf:4d:25:85:57:d8:6e:f1:58:29: 65:a8:07:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwNDE4MTUxODQ0WhcNMjUwNDI1MTUxODQ0WjAYMRYwFAYD VQQDEw02ODAyNmQ1NS0wNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEdq0tOpAHjcdtHdk6cn+WZC5uU8Rpp9t7To2EJYleyOmm9GIH0weoN3f54Y NxY2QXxCqJu1zSPshQxtiUyJoH4/22OEP4bSC/u3pmjN2o7VQc3hZmyIkHzBWmZq n0kl6REfCy3AeRR4PnFjqZjHV4BwwYUyU9U8DfNhzX+Erd33lR9QNqO1AfUSGdG2 0Hr3f54TgkA3eBTv8bBYuIWY2Vj61D6h0PM6GKt0oY+9y9tYcye60Z8wqSzuDq1k JisHH2UcWz+kytdSAb8h3eQ9URi9Ed+moEDK1oyKnIfUogEchGY2/vl9zCv9+pYn Y7Mon6sWU2gk8apxjoXoWH9wWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQryGHm /6UhoIIOU15AFWIjkwSBMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7MHcFtfzL1HJSODLJq+k7kY7eg0NIPTtzfO7J1B9L3Q//nKUpwy43 PeptiUIw1HHwZHZr02oR8jszs1c5QjN43MPkO3/1iJMFfaAZebHkY7ScW3M4bFde 5GuGV6BZD2b8egrlKRx39n5WDf8bteuvnwUia0vqKSl4QXHXa87HiyxKT9MUaC1H 49owUcSEmn6nKeGjAKXfE9khZh6tAJv9jioRJXc0/jRvi2eIRLUVHZUm/vcv0yRe eWeI9Paydb2THG1x8Jfp4RuG8Uoo/9GVWwiJeomgD//Gq74RgsTSgy8OxF0cG0x8 L6s/e+1K5GWbs89NJYVX2G7xWCllqAfk -----END CERTIFICATE-----Generated at Sat Apr 19 10:11:36 2025 by rpki-client