$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json) Hash identifier: PGF6a1b1nA5XHjwdHmqWk1nA7KbrYJfhOBNNVb9MDaA= Subject key identifier: 74:FA:B0:1F:AC:D6:E4:A2:40:BB:9F:93:6B:C1:17:F2:BD:A2:B1:9C Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft Manifest number: 0137 Signing time: Fri 13 Jun 2025 03:25:05 +0000 Manifest this update: Fri 13 Jun 2025 03:25:05 +0000 Manifest next update: Fri 20 Jun 2025 03:25:05 +0000 Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: N/lplVbluK1IagdQxtwF49iFSkav0ghnQoWBZ29c04o=) 2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Validity Not Before: Jun 13 03:25:05 2025 GMT Not After : Jun 20 03:25:05 2025 GMT Subject: CN=684b9a11-9425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:f9:a6:16:9d:34:a7:13:c4:9c:7d:60:83: b3:69:8e:5e:f9:ea:a8:85:ad:11:62:5a:4d:c7:df: cc:12:e0:00:7e:65:9d:4f:47:a0:ce:bd:51:c9:04: dc:0f:56:be:1c:56:ef:eb:58:25:0c:e0:7c:81:b1: 7f:24:db:4a:b9:79:3e:a3:3f:ee:5e:fa:ea:66:87: 8e:98:2a:31:61:a1:b3:e1:b1:6b:ca:f5:78:28:ca: 81:06:17:57:ff:dd:fd:15:8d:53:d5:da:37:63:16: 38:f9:1c:8c:71:e7:86:f6:83:93:d8:14:1b:5d:00: 5d:e4:34:f4:08:07:42:54:7a:67:12:88:ea:7e:20: 2c:31:4e:3a:d7:16:ff:54:3d:c7:df:36:a4:91:d4: 69:53:89:ee:8f:7e:94:32:e4:e4:22:bd:b1:dc:c2: d4:ed:77:a7:c0:28:4c:22:a2:bc:5e:d9:0d:d3:1f: a5:11:e1:39:d3:67:58:a6:4f:50:b6:1d:83:1e:c6: d3:9d:dc:75:56:13:ca:b7:2f:01:fc:15:b6:37:01: 3d:ae:73:88:82:42:90:dd:53:a8:b4:fe:a7:77:70: 0b:89:c3:0c:68:3f:02:d7:f0:5d:76:a3:7a:47:b7: 0d:d5:73:03:cb:bc:d0:5b:72:8d:a5:a3:d7:15:ff: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FA:B0:1F:AC:D6:E4:A2:40:BB:9F:93:6B:C1:17:F2:BD:A2:B1:9C X509v3 Authority Key Identifier: keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9f:f7:47:9d:7a:dc:95:d9:ae:76:03:bd:f5:27:17:0f:0a: db:b0:97:0c:81:df:93:34:30:78:55:ff:f6:c3:84:fc:54:3f: 61:26:04:b7:68:a8:de:03:1c:fb:b2:ca:9c:f8:31:20:04:03: 4f:15:64:b7:65:9c:0d:d0:27:14:f2:6c:6c:bc:3c:db:65:2d: fb:50:90:fa:d3:be:cd:fe:66:ec:54:96:3c:57:f1:ec:16:a8: 72:cf:65:cd:c5:65:ca:45:4c:c7:36:66:2a:b9:60:8a:d3:be: b2:63:f0:63:7b:99:ed:50:c0:ea:0c:ec:40:0d:30:92:29:57: 98:0d:1a:72:98:c5:c0:e7:79:bb:1c:c7:61:d2:a5:50:f1:2b: 22:63:ef:51:d9:09:36:79:68:78:dc:d3:1c:c4:27:e0:b1:34: f8:8c:d9:c4:20:38:a7:94:d2:94:66:fc:41:19:77:b3:08:26: ef:f7:52:d3:e3:d1:1e:20:8c:39:49:f7:44:c5:af:0b:99:6a: f5:48:06:0d:33:9f:3f:8d:f7:2b:7a:73:ca:76:3a:56:c0:fb: 61:a5:6e:bd:a1:25:1e:9f:e2:a7:f6:6a:09:e9:d6:1b:46:37: ba:40:28:16:b6:ba:2d:c7:1d:cd:7b:69:b3:8e:83:61:fc:35: 66:3e:64:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURBM0Q5QTU5MkZD QjhBQ0E2MjkwHhcNMjUwNjEzMDMyNTA1WhcNMjUwNjIwMDMyNTA1WjAYMRYwFAYD VQQDEw02ODRiOWExMS05NDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0v5phadNKcTxJx9YIOzaY5e+eqoha0RYlpNx9/MEuAAfmWdT0egzr1RyQTc D1a+HFbv61glDOB8gbF/JNtKuXk+oz/uXvrqZoeOmCoxYaGz4bFryvV4KMqBBhdX /939FY1T1do3YxY4+RyMceeG9oOT2BQbXQBd5DT0CAdCVHpnEojqfiAsMU461xb/ VD3H3zakkdRpU4nuj36UMuTkIr2x3MLU7XenwChMIqK8XtkN0x+lEeE502dYpk9Q th2DHsbTndx1VhPKty8B/BW2NwE9rnOIgkKQ3VOotP6nd3ALicMMaD8C1/BddqN6 R7cN1XMDy7zQW3KNpaPXFf+FdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT6sB+s 1uSiQLufk2vBF/K9orGcMB8GA1UdIwQYMBaAFPVE5v7qD+a533sdo9mlkvy4rKYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU1Qi84RjQzNDlDODZE NzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVybmZleDJqMmFXU19MaXNw aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVVG1fdW9QNXJuZmV4MmoyYVdTX0xpc3Bpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVy bmZleDJqMmFXU19MaXNwaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOn/dHnXrcldmudgO99ScXDwrbsJcMgd+TNDB4Vf/2w4T8VD9hJgS3 aKjeAxz7ssqc+DEgBANPFWS3ZZwN0CcU8mxsvDzbZS37UJD6077N/mbsVJY8V/Hs Fqhyz2XNxWXKRUzHNmYquWCK076yY/Bje5ntUMDqDOxADTCSKVeYDRpymMXA53m7 HMdh0qVQ8SsiY+9R2Qk2eWh43NMcxCfgsTT4jNnEIDinlNKUZvxBGXezCCbv91LT 49EeIIw5SfdExa8LmWr1SAYNM58/jfcrenPKdjpWwPthpW69oSUen+Kn9moJ6dYb Rje6QCgWtrotxx3Ne2mzjoNh/DVmPmRW -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:21 2025 by rpki-client