$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: mWAhAw5E+uZUUYa57p0zGta269mLedI1zitUnkN97qs= Subject key identifier: 3C:9D:80:1E:1B:CD:10:B2:57:91:5B:2D:81:18:E8:B4:2B:90:BF:CF Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: 3B Signing time: Sat 31 May 2025 07:05:00 +0000 Manifest this update: Sat 31 May 2025 07:05:00 +0000 Manifest next update: Sat 07 Jun 2025 07:05:00 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: PhjOR4qARvZyqMJsgUNofmWXQ9xTaaVh1Rx8z4RJKOY=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: May 31 07:05:00 2025 GMT Not After : Jun 7 07:05:00 2025 GMT Subject: CN=683aaa1c-1e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:66:a6:36:22:39:91:35:26:84:5b:3b:ee: 5a:32:45:19:4d:d4:3c:6b:68:16:9f:15:c5:eb:3c: 36:a3:ee:e6:88:1c:83:49:f4:86:7e:54:82:6f:31: fb:4e:1e:fa:33:45:43:1b:5b:3a:40:a6:8e:fa:a1: 30:69:9b:15:96:25:53:1c:5f:19:f2:0d:da:87:fb: 79:d2:1b:0c:0c:b9:f1:73:9e:4c:e6:87:38:6e:c5: 50:a5:c1:87:ba:aa:76:f4:52:e5:f2:51:dc:3e:6c: 7c:38:d2:94:34:f5:12:04:0f:52:cb:6f:8c:c6:28: 08:33:ea:ae:39:87:c7:54:e2:3c:6c:5e:0e:20:6d: 63:60:bb:25:ea:9a:41:77:ff:66:06:e6:d5:14:d5: 5c:5e:74:21:ef:de:c9:50:af:48:bf:9d:b2:41:d9: 84:e8:82:60:db:87:e1:87:64:f1:92:07:10:30:e6: 8d:34:70:a3:cc:b1:ac:63:41:04:c5:5b:ab:2c:79: 08:95:98:ef:1c:2e:6c:5e:a8:55:4b:f3:66:5d:66: 89:c9:21:91:c4:ae:e4:02:74:c0:c7:aa:45:d3:f4: a6:6a:c3:d2:7e:e7:72:82:65:29:25:bf:44:09:24: ab:38:8a:6a:08:56:ff:ba:46:a4:be:6d:43:81:ef: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:80:1E:1B:CD:10:B2:57:91:5B:2D:81:18:E8:B4:2B:90:BF:CF X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6f:0d:5c:f3:ce:f6:32:f4:a1:67:8c:a4:98:1a:eb:fa:b2: 44:27:a9:23:dc:1e:df:b9:49:66:df:e9:17:a5:21:90:0a:7f: 90:26:19:88:a7:ae:45:04:b0:3f:7a:9c:94:f1:35:ff:32:58: 51:f4:58:1d:9e:59:ee:8b:ef:4f:f9:bc:78:06:0c:a1:86:14: 77:34:71:ba:61:32:6c:22:b3:90:8c:3f:33:e8:16:16:4c:95: 38:d2:22:2f:d1:59:61:70:43:f7:70:fd:f2:7d:24:40:18:69: 68:40:02:44:9b:b9:61:80:78:1e:27:f1:e5:6f:d4:23:fc:33: d5:e8:b9:a1:35:be:25:2f:99:be:d9:17:71:ec:22:84:bb:7a: a8:ca:50:a4:54:3b:f5:7d:ad:e3:c5:48:7b:af:15:d5:9e:09: eb:c2:36:c8:42:00:aa:05:63:51:a0:c8:b9:1d:25:f9:71:62: a9:52:2f:07:c8:3e:9c:58:2e:a5:1d:88:71:36:9b:bc:24:d8: c9:8a:f8:dc:10:75:48:d1:ff:69:d3:a9:c9:e7:76:39:f5:02: 4f:64:28:b7:73:ce:b4:46:d5:b3:ee:c0:a1:83:68:c3:94:fe: 02:03:a3:9e:5c:2f:4b:67:c9:02:44:3c:ce:70:14:d6:63:03: 18:4d:3d:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoNzU4QUMyQkVEQURDQkEzQUQ3MzgxNjlGQjM4OUQ1MDhC NTRENzRCRjAeFw0yNTA1MzEwNzA1MDBaFw0yNTA2MDcwNzA1MDBaMBgxFjAUBgNV BAMTDTY4M2FhYTFjLTFlNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClbWamNiI5kTUmhFs77loyRRlN1DxraBafFcXrPDaj7uaIHINJ9IZ+VIJvMftO HvozRUMbWzpApo76oTBpmxWWJVMcXxnyDdqH+3nSGwwMufFznkzmhzhuxVClwYe6 qnb0UuXyUdw+bHw40pQ09RIED1LLb4zGKAgz6q45h8dU4jxsXg4gbWNguyXqmkF3 /2YG5tUU1VxedCHv3slQr0i/nbJB2YTogmDbh+GHZPGSBxAw5o00cKPMsaxjQQTF W6sseQiVmO8cLmxeqFVL82ZdZonJIZHEruQCdMDHqkXT9KZqw9J+53KCZSklv0QJ JKs4imoIVv+6RqS+bUOB7/NRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPJ2AHhvN ELJXkVstgRjotCuQv88wHwYDVR0jBBgwFoAUdYrCvtrcujrXOBafs4nVCLVNdL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzJFMTBFREIyRTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFlyQ3Z0cmN1anJYT0JhZnM0blZDTFZOZEw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzJFMTBFREIyRTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpy WE9CYWZzNG5WQ0xWTmRMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtvDVzzzvYy9KFnjKSYGuv6skQnqSPcHt+5SWbf6RelIZAKf5AmGYin rkUEsD96nJTxNf8yWFH0WB2eWe6L70/5vHgGDKGGFHc0cbphMmwis5CMPzPoFhZM lTjSIi/RWWFwQ/dw/fJ9JEAYaWhAAkSbuWGAeB4n8eVv1CP8M9XouaE1viUvmb7Z F3HsIoS7eqjKUKRUO/V9rePFSHuvFdWeCevCNshCAKoFY1GgyLkdJflxYqlSLwfI PpxYLqUdiHE2m7wk2MmK+NwQdUjR/2nTqcnndjn1Ak9kKLdzzrRG1bPuwKGDaMOU /gIDo55cL0tnyQJEPM5wFNZjAxhNPSE= -----END CERTIFICATE-----Generated at Sat May 31 17:22:09 2025 by rpki-client