$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: ckz9Ptc9yuawN2uzKW20A28VOmhJNlbqBIBYmYCPNuM= Subject key identifier: 32:17:4E:A3:0A:E0:0E:62:1A:09:73:45:86:E3:1C:86:94:E6:0E:A5 Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: 79 Signing time: Sun 15 Jun 2025 05:52:17 +0000 Manifest this update: Sun 15 Jun 2025 05:52:17 +0000 Manifest next update: Sun 22 Jun 2025 05:52:17 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: hJRBg6I2WmB+0jrhliMso0U4BEdIuFCVcXcWyDpxDgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: Jun 15 05:52:17 2025 GMT Not After : Jun 22 05:52:17 2025 GMT Subject: CN=684e5f91-7fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:1d:a7:30:0d:11:2a:0b:68:a3:11:a8:9d: 20:09:65:5f:8e:fe:a9:08:7e:54:de:82:61:75:60: 74:5a:dd:98:26:cb:af:2f:29:ca:22:a5:fd:b1:90: f6:49:28:8f:a6:a4:7d:d9:76:34:11:e4:1f:6b:9a: 04:c2:cb:ec:e0:7a:a7:37:e2:6d:ba:f4:45:60:fe: c4:f9:e5:a1:39:83:24:c4:4e:3c:8b:e7:79:94:af: 61:b4:6a:bd:d6:ad:41:2f:ca:8a:31:9f:27:f6:2d: e0:78:79:3f:b6:de:72:c1:6a:eb:77:8e:d4:a7:be: 5a:c1:a6:7c:28:53:1f:45:3b:58:0b:24:61:00:25: f3:01:74:35:42:c8:e2:4f:cd:3e:85:35:6c:ae:69: a7:76:38:cb:e9:0b:a5:ed:97:4f:f5:33:17:82:fa: ec:88:fb:b3:61:c5:ff:85:6c:52:b4:ff:cb:f7:0c: 00:fb:22:5d:97:04:16:b8:6b:f3:78:88:7b:63:31: ad:ae:7f:fe:9f:22:4a:94:26:18:53:1c:78:26:f8: 44:a0:bb:1f:33:b6:c0:0b:aa:68:5a:b6:87:ff:29: d0:f9:9f:8a:a1:55:7c:e5:52:46:6b:81:19:30:5c: 68:42:54:26:d4:0e:d1:aa:25:2d:7e:c9:71:b3:5b: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:17:4E:A3:0A:E0:0E:62:1A:09:73:45:86:E3:1C:86:94:E6:0E:A5 X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:c3:74:65:13:29:dc:75:3c:c7:92:29:c8:75:34:20:75: e9:e4:f3:69:73:ab:ab:2c:9e:b1:b9:4b:3a:ff:a1:52:ad:17: 75:f5:fb:c6:ba:45:06:c7:f0:ee:b0:ca:f5:21:a2:1a:82:20: 0d:34:eb:e4:c4:66:73:73:1b:ca:80:dd:4e:f4:9b:36:2b:1e: bb:e7:01:6f:eb:1b:41:f6:49:99:14:c2:2b:76:d9:3a:11:89: f6:96:7a:b0:1b:fc:2c:6a:8c:1e:10:ff:51:6a:fd:41:28:85: e0:75:2f:55:1f:b5:c4:0a:c9:04:f3:5d:4c:04:f1:41:70:2b: 9d:03:15:b4:db:2f:98:15:3e:2a:0c:b2:7a:7b:e3:82:59:ff: 34:c4:f4:ad:62:d2:fb:4c:f0:bd:6b:cf:aa:ef:c3:c3:72:b9: fa:aa:e4:11:f2:b1:f8:09:69:fb:0f:81:c5:18:42:d0:77:83: 5f:d1:ca:f1:f3:47:da:cd:79:fc:45:39:c6:6e:c4:93:d0:2f: 09:4a:b0:fa:94:7f:33:41:6c:cb:7d:9f:10:57:e2:2a:94:69: ff:4f:93:22:e3:76:db:01:68:c0:29:87:88:11:7b:ea:55:82: 11:54:43:23:1d:b5:4a:73:fc:4a:3e:07:ca:5c:9d:64:4e:6a: 02:b8:e4:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUUxQzExMC8GA1UEBRMoQkI4M0YyQTM3M0MwNUE5RkRFQzQwRjcxMkM4MzFGNTdD RjkxOEE1OTAeFw0yNTA2MTUwNTUyMTdaFw0yNTA2MjIwNTUyMTdaMBgxFjAUBgNV BAMTDTY4NGU1ZjkxLTdmZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtOR2nMA0RKgtooxGonSAJZV+O/qkIflTegmF1YHRa3Zgmy68vKcoipf2xkPZJ KI+mpH3ZdjQR5B9rmgTCy+zgeqc34m269EVg/sT55aE5gyTETjyL53mUr2G0ar3W rUEvyooxnyf2LeB4eT+23nLBaut3jtSnvlrBpnwoUx9FO1gLJGEAJfMBdDVCyOJP zT6FNWyuaad2OMvpC6Xtl0/1MxeC+uyI+7Nhxf+FbFK0/8v3DAD7Il2XBBa4a/N4 iHtjMa2uf/6fIkqUJhhTHHgm+ESgux8ztsALqmhatof/KdD5n4qhVXzlUkZrgRkw XGhCVCbUDtGqJS1+yXGzW4XtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMhdOowrg DmIaCXNFhuMchpTmDqUwHwYDVR0jBBgwFoAUu4Pyo3PAWp/exA9xLIMfV8+Rilkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRTFDLzJEQjUzNUZBOTIw MDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTRQeW8zUEFXcF9leEE5eExJTWZWOC1SaWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RTFDLzJEQjUzNUZBOTIwMDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3Bf ZXhBOXhMSU1mVjgtUmlsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJi8w3RlEyncdTzHkinIdTQgdenk82lzq6ssnrG5Szr/oVKtF3X1+8a6 RQbH8O6wyvUhohqCIA006+TEZnNzG8qA3U70mzYrHrvnAW/rG0H2SZkUwit22ToR ifaWerAb/CxqjB4Q/1Fq/UEoheB1L1UftcQKyQTzXUwE8UFwK50DFbTbL5gVPioM snp744JZ/zTE9K1i0vtM8L1rz6rvw8Nyufqq5BHysfgJafsPgcUYQtB3g1/RyvHz R9rNefxFOcZuxJPQLwlKsPqUfzNBbMt9nxBX4iqUaf9PkyLjdtsBaMAph4gRe+pV ghFUQyMdtUpz/Eo+B8pcnWROagK45FA= -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:29 2025 by rpki-client