$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: wORGeR+bUJQEVMqcWNAguhEz7ZJAtVcylyi8rvJkMBs= Subject key identifier: B8:6C:15:8C:F5:11:0D:9A:80:16:C2:9D:93:59:6C:61:23:EE:19:23 Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: 60 Signing time: Fri 25 Apr 2025 06:04:27 +0000 Manifest this update: Fri 25 Apr 2025 06:04:26 +0000 Manifest next update: Fri 02 May 2025 06:04:26 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: V2s6tuRhQvgZmcrZk1CKipnw/eVH9Hwdxgkldii2DwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: Apr 25 06:04:26 2025 GMT Not After : May 2 06:04:26 2025 GMT Subject: CN=680b25ea-cf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:65:28:e1:28:e4:ec:05:92:e8:91:4e:db: a0:d6:1e:70:58:61:f1:02:cf:ec:19:fe:7d:b1:5f: d5:b8:9f:fe:59:61:b5:fd:b5:26:ea:d1:8d:20:44: 23:16:31:ff:a1:ba:23:aa:33:25:3d:08:4e:67:a3: d1:1f:98:46:05:06:c4:52:94:16:63:a7:80:9b:f0: 03:75:70:c8:19:11:01:4a:19:24:57:9e:4a:e2:75: 13:7d:d4:d5:83:9a:97:ea:59:d4:22:eb:79:64:b7: be:e3:d1:3d:01:67:26:44:23:1d:13:ba:17:b7:ad: 18:ae:4a:f1:6f:bb:4d:55:f8:e0:29:6c:30:97:84: b4:e0:ed:38:52:34:55:7f:c2:39:d4:9b:b1:e5:a8: 37:a3:8e:53:40:da:39:fc:5b:fe:bf:f2:54:ba:59: 51:4d:56:c1:6f:a3:a1:75:51:2c:ed:a2:56:78:00: 72:fb:e1:f4:0c:22:8b:77:9a:8b:74:8e:e7:85:14: fc:e3:ad:f5:f0:95:70:59:e5:fd:05:a8:5d:93:3f: 9e:51:db:f0:cc:dc:c7:c2:48:82:5b:79:7f:95:a9: 92:05:86:1c:65:5b:4a:2b:b3:60:eb:3e:d6:20:91: ed:5d:e4:3f:e7:5a:b9:b1:f3:45:fa:99:97:cc:4b: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6C:15:8C:F5:11:0D:9A:80:16:C2:9D:93:59:6C:61:23:EE:19:23 X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:53:79:31:f7:c7:07:bc:09:53:6b:30:b0:04:a1:d1:c0:b5: 3c:dd:06:b5:50:7c:b7:7c:15:b7:4c:ad:b8:bd:42:2d:fa:f7: 54:5e:68:c2:7d:b6:8c:3f:44:24:f6:7d:af:92:b8:23:07:62: 50:26:d9:12:27:14:d2:8f:a6:31:c2:d0:14:d4:ac:88:8f:0f: db:a6:59:a5:24:e7:3d:fc:9b:9a:76:9a:a7:d0:17:3d:34:51: 73:b5:92:d0:02:dc:68:fd:60:dc:76:36:47:4d:0d:15:c2:02: ae:8c:3f:34:9d:9f:8f:6c:85:66:b3:45:8e:a0:e5:19:be:98: dd:aa:a0:8c:b2:0d:9b:b1:25:03:d5:00:30:38:ce:a6:44:63: c4:74:d8:81:d8:3e:ff:55:bb:62:b6:e5:e1:08:9c:94:29:97: 2b:b9:a1:31:61:39:da:d2:bf:24:1d:06:1b:12:9e:01:75:9a: 57:67:f6:c3:70:19:e0:69:30:10:d3:08:1f:15:26:f3:a1:75: 57:82:d6:1e:4e:9a:ea:d7:c5:0a:b7:23:8d:54:aa:cc:7c:0e: 37:cd:1d:43:e8:46:26:3d:21:a4:45:8a:4d:6e:f0:53:04:00: 5a:ba:f9:14:6e:8c:db:dd:6b:29:29:04:aa:92:df:bc:63:bb: 75:8b:27:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUUxQzExMC8GA1UEBRMoQkI4M0YyQTM3M0MwNUE5RkRFQzQwRjcxMkM4MzFGNTdD RjkxOEE1OTAeFw0yNTA0MjUwNjA0MjZaFw0yNTA1MDIwNjA0MjZaMBgxFjAUBgNV BAMTDTY4MGIyNWVhLWNmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ3WUo4Sjk7AWS6JFO26DWHnBYYfECz+wZ/n2xX9W4n/5ZYbX9tSbq0Y0gRCMW Mf+huiOqMyU9CE5no9EfmEYFBsRSlBZjp4Cb8AN1cMgZEQFKGSRXnkridRN91NWD mpfqWdQi63lkt77j0T0BZyZEIx0Tuhe3rRiuSvFvu01V+OApbDCXhLTg7ThSNFV/ wjnUm7HlqDejjlNA2jn8W/6/8lS6WVFNVsFvo6F1USztolZ4AHL74fQMIot3mot0 jueFFPzjrfXwlXBZ5f0FqF2TP55R2/DM3MfCSIJbeX+VqZIFhhxlW0ors2DrPtYg ke1d5D/nWrmx80X6mZfMS/4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuGwVjPUR DZqAFsKdk1lsYSPuGSMwHwYDVR0jBBgwFoAUu4Pyo3PAWp/exA9xLIMfV8+Rilkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRTFDLzJEQjUzNUZBOTIw MDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTRQeW8zUEFXcF9leEE5eExJTWZWOC1SaWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RTFDLzJEQjUzNUZBOTIwMDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3Bf ZXhBOXhMSU1mVjgtUmlsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHtTeTH3xwe8CVNrMLAEodHAtTzdBrVQfLd8FbdMrbi9Qi3691ReaMJ9 tow/RCT2fa+SuCMHYlAm2RInFNKPpjHC0BTUrIiPD9umWaUk5z38m5p2mqfQFz00 UXO1ktAC3Gj9YNx2NkdNDRXCAq6MPzSdn49shWazRY6g5Rm+mN2qoIyyDZuxJQPV ADA4zqZEY8R02IHYPv9Vu2K25eEInJQplyu5oTFhOdrSvyQdBhsSngF1mldn9sNw GeBpMBDTCB8VJvOhdVeC1h5OmurXxQq3I41Uqsx8DjfNHUPoRiY9IaRFik1u8FME AFq6+RRujNvdaykpBKqS37xju3WLJ98= -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:35 2025 by rpki-client