$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: oLb6ak09z3SLoDAwJT0SU2Sd8fKDzJJRs56ThtHLn+8= Subject key identifier: C8:B9:4A:D7:7A:82:89:E5:1B:BD:3E:DE:DD:0D:51:C8:FB:49:41:30 Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1DA1 Signing time: Fri 30 May 2025 16:18:16 +0000 Manifest this update: Fri 30 May 2025 16:18:15 +0000 Manifest next update: Fri 06 Jun 2025 16:18:15 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: kg7J8cZiH3ipKhvLrdo7pTMst6V+/lB0tn7WlProdFk=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7610 (0x1dba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: May 30 16:18:15 2025 GMT Not After : Jun 6 16:18:15 2025 GMT Subject: CN=6839da47-d252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:46:05:d2:e0:54:aa:57:1b:ed:81:f2:88: 52:b2:f5:81:c4:b8:5e:e3:e9:f3:81:09:a6:d8:55: 7b:15:b6:38:b7:f2:6d:3f:b1:92:8b:6a:12:52:45: e9:28:a7:a5:f0:36:ef:53:f1:0e:52:06:fc:4a:94: 92:73:4a:d5:fd:0b:0c:27:66:5c:f1:0b:d9:5f:e7: 14:6d:6f:63:7a:13:3d:80:aa:21:81:a2:f8:b7:b1: d2:e7:49:b2:e3:80:cc:97:4d:43:08:62:70:53:c9: 7e:cc:c3:ea:65:11:7e:75:49:13:bf:40:98:7b:d4: e0:ae:a7:f1:7b:85:5f:33:86:84:18:68:50:d9:22: dc:02:39:45:9a:34:87:34:58:90:d6:79:ae:37:5b: e9:eb:4e:03:55:d7:42:0e:90:cb:b9:52:da:fd:d1: 9b:02:70:f1:56:88:b8:2d:3c:a9:6f:7e:c2:84:51: 91:6d:fe:f6:d4:6d:93:fb:ec:08:b7:d0:fd:6b:f8: a7:97:b8:23:3a:bc:d8:27:7d:9a:f8:60:49:e8:10: 43:88:fe:4a:6d:c9:8a:c7:4b:b5:1c:5c:44:b1:14: 75:62:91:b4:fb:09:64:ab:b0:b3:a9:b6:42:76:3d: 09:32:06:8b:6a:1b:3c:18:e3:6b:f8:66:9a:63:57: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B9:4A:D7:7A:82:89:E5:1B:BD:3E:DE:DD:0D:51:C8:FB:49:41:30 X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:27:84:9a:7c:a9:d2:fc:a4:4b:aa:f3:19:5f:0a:d6:bf: 9c:6b:03:a3:91:c7:d8:95:2d:ac:e2:fd:b2:78:35:b8:2a:b5: 4a:c9:a1:91:08:ea:05:ca:2a:b3:03:b6:ef:db:b1:6b:18:43: e5:f3:db:3d:3c:25:ad:a4:74:ce:13:48:26:05:83:ec:51:8f: 19:4c:a9:14:8b:63:38:f7:03:a5:bc:c1:71:2e:97:a6:2f:56: 64:2e:f9:e9:ee:55:80:3d:91:0e:36:99:96:28:37:45:90:cd: 72:50:1d:86:0b:8b:aa:62:92:ac:aa:e5:54:15:20:97:fa:8a: 44:71:8c:5b:ab:af:79:1e:7a:52:e3:f2:07:fb:69:47:68:12: 6b:3b:26:8b:3d:97:11:42:36:58:3a:ce:2a:32:7f:db:43:09: a2:52:56:51:0d:3d:dd:4f:11:04:d2:0e:02:85:c2:11:ee:3c: 38:de:c6:ef:ee:ee:d0:9b:fe:18:4d:3b:10:69:96:8d:6c:a3: 4a:12:14:5c:46:85:d3:71:e5:cc:ca:a4:66:95:fc:c4:96:cd: a4:c3:07:de:e5:41:43:fd:80:01:4d:51:69:c9:5d:62:1a:57: 41:81:4f:d1:32:fe:53:bc:57:d4:c8:6a:33:58:99:9f:9a:f6: f9:dd:c6:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjUwNTMwMTYxODE1WhcNMjUwNjA2MTYxODE1WjAYMRYwFAYD VQQDEw02ODM5ZGE0Ny1kMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnllGBdLgVKpXG+2B8ohSsvWBxLhe4+nzgQmm2FV7FbY4t/JtP7GSi2oSUkXp KKel8DbvU/EOUgb8SpSSc0rV/QsMJ2Zc8QvZX+cUbW9jehM9gKohgaL4t7HS50my 44DMl01DCGJwU8l+zMPqZRF+dUkTv0CYe9Tgrqfxe4VfM4aEGGhQ2SLcAjlFmjSH NFiQ1nmuN1vp604DVddCDpDLuVLa/dGbAnDxVoi4LTypb37ChFGRbf721G2T++wI t9D9a/inl7gjOrzYJ32a+GBJ6BBDiP5KbcmKx0u1HFxEsRR1YpG0+wlkq7CzqbZC dj0JMgaLahs8GONr+GaaY1dtuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi5Std6 gonlG70+3t0NUcj7SUEwMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlVyeEmnyp0vykS6rzGV8K1r+cawOjkcfYlS2s4v2yeDW4KrVKyaGR COoFyiqzA7bv27FrGEPl89s9PCWtpHTOE0gmBYPsUY8ZTKkUi2M49wOlvMFxLpem L1ZkLvnp7lWAPZEONpmWKDdFkM1yUB2GC4uqYpKsquVUFSCX+opEcYxbq695HnpS 4/IH+2lHaBJrOyaLPZcRQjZYOs4qMn/bQwmiUlZRDT3dTxEE0g4ChcIR7jw43sbv 7u7Qm/4YTTsQaZaNbKNKEhRcRoXTceXMyqRmlfzEls2kwwfe5UFD/YABTVFpyV1i GldBgU/RMv5TvFfUyGozWJmfmvb53cYj -----END CERTIFICATE-----Generated at Sat May 31 16:46:58 2025 by rpki-client