$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json) Hash identifier: OXluTm64w6f+zxf4Zis6kboOKJ375ZAsCQK/46tSNwo= Subject key identifier: F0:66:C6:DB:EC:EB:BD:FC:0D:05:22:4E:9D:2F:F9:DF:2B:9D:2B:C2 Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft Manifest number: 0151 Signing time: Sun 03 Aug 2025 04:31:32 +0000 Manifest this update: Sun 03 Aug 2025 04:31:31 +0000 Manifest next update: Sun 10 Aug 2025 04:31:31 +0000 Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: wCPP6xc6702XBpPZ6dilyGlqLbjmmgH+y6bjwdnx0Bo=) 2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Validity Not Before: Aug 3 04:31:31 2025 GMT Not After : Aug 10 04:31:31 2025 GMT Subject: CN=688ee623-5b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:bd:64:1d:34:a5:a8:76:11:70:be:4e:66: 3d:b7:1c:da:16:ed:e5:46:88:d0:78:ef:c2:87:93: 58:e2:b4:b6:46:f3:06:89:ed:42:0c:b3:43:20:f8: 7e:dc:26:64:90:f0:bd:07:a1:2f:c8:08:56:51:b9: cd:3f:00:c0:48:63:a4:60:2d:94:39:ec:a9:89:3f: bb:83:1c:0e:e9:8a:b6:ee:33:82:01:7d:6a:fd:22: ab:da:22:d4:45:ac:f5:ea:89:a6:10:c8:e7:20:b3: dc:49:65:4c:d8:0a:8c:f7:e8:ef:97:0e:38:8f:d2: 6d:fb:5b:9f:ca:5a:fa:f4:74:64:5b:82:bf:96:2b: 1e:ae:0c:fd:18:0b:88:69:11:d5:ac:5f:c9:c0:22: f6:72:7c:f9:89:fe:28:f9:ba:a9:c4:d6:43:c4:2f: 7a:42:20:11:78:64:13:3e:91:88:08:e2:2c:2b:9b: 48:8c:d8:0d:d5:ef:dd:60:27:3b:1f:ec:b2:e1:69: ef:00:54:30:02:dc:11:3a:13:41:a3:58:c5:a9:c9: 29:da:2e:29:b6:7f:52:7d:2d:17:44:04:36:e1:55: 7b:1b:de:2e:75:3f:16:9e:23:fc:82:49:ad:ff:a2: f5:b4:08:81:47:14:7a:e3:6e:c1:b5:b2:ec:28:c6: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:C6:DB:EC:EB:BD:FC:0D:05:22:4E:9D:2F:F9:DF:2B:9D:2B:C2 X509v3 Authority Key Identifier: keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:86:25:a6:c4:13:06:d0:4f:cb:61:34:07:e7:dc:8e:0c:9d: 67:a2:30:bd:54:12:5e:04:bb:33:de:f3:20:96:d3:a0:3b:51: 4e:1e:28:27:27:30:e1:b0:69:15:b6:c3:fa:8b:40:4c:da:58: 7c:31:c1:5f:07:ee:37:4f:f0:e5:cb:3b:bf:c3:a0:a0:50:d8: bc:0c:72:98:e6:51:11:10:e7:6b:4a:10:07:01:d2:2e:a1:06: 56:b2:77:49:17:d6:54:e9:65:9d:5d:55:4f:dd:44:c5:b5:27: cd:c4:3a:96:46:cd:17:8f:bc:66:93:91:3d:80:e2:8d:60:80: 49:da:08:5c:18:93:5a:21:c9:42:47:a6:9f:1f:4f:20:3a:7d: 43:df:c2:23:70:c3:be:fb:d9:61:1d:e3:d2:1e:2d:ea:ad:9f: 90:41:e2:6f:b9:89:e6:2a:95:5e:ee:06:e5:e5:fc:7d:2d:c3: ea:7d:f2:87:1c:2d:bb:b5:55:ab:ef:73:cd:89:d8:5d:aa:ce: a0:ba:61:cb:0f:6b:b6:b3:25:a4:7d:33:e5:49:f2:64:ed:68: 0d:38:8d:ef:eb:2d:20:db:36:48:03:c0:2a:fc:d9:d1:53:6e: a8:7c:65:55:0d:af:d5:e5:96:bd:3c:d1:24:dd:47:fb:c7:dd: 47:d5:d1:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURBM0Q5QTU5MkZD QjhBQ0E2MjkwHhcNMjUwODAzMDQzMTMxWhcNMjUwODEwMDQzMTMxWjAYMRYwFAYD VQQDEw02ODhlZTYyMy01YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAot69ZB00pah2EXC+TmY9txzaFu3lRojQeO/Ch5NY4rS2RvMGie1CDLNDIPh+ 3CZkkPC9B6EvyAhWUbnNPwDASGOkYC2UOeypiT+7gxwO6Yq27jOCAX1q/SKr2iLU Raz16ommEMjnILPcSWVM2AqM9+jvlw44j9Jt+1ufylr69HRkW4K/lisergz9GAuI aRHVrF/JwCL2cnz5if4o+bqpxNZDxC96QiAReGQTPpGICOIsK5tIjNgN1e/dYCc7 H+yy4WnvAFQwAtwROhNBo1jFqckp2i4ptn9SfS0XRAQ24VV7G94udT8WniP8gkmt /6L1tAiBRxR6427BtbLsKMbyhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBmxtvs 6738DQUiTp0v+d8rnSvCMB8GA1UdIwQYMBaAFPVE5v7qD+a533sdo9mlkvy4rKYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU1Qi84RjQzNDlDODZE NzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVybmZleDJqMmFXU19MaXNw aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVVG1fdW9QNXJuZmV4MmoyYVdTX0xpc3Bpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVy bmZleDJqMmFXU19MaXNwaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhiWmxBMG0E/LYTQH59yODJ1nojC9VBJeBLsz3vMgltOgO1FOHign JzDhsGkVtsP6i0BM2lh8McFfB+43T/Dlyzu/w6CgUNi8DHKY5lEREOdrShAHAdIu oQZWsndJF9ZU6WWdXVVP3UTFtSfNxDqWRs0Xj7xmk5E9gOKNYIBJ2ghcGJNaIclC R6afH08gOn1D38IjcMO++9lhHePSHi3qrZ+QQeJvuYnmKpVe7gbl5fx9LcPqffKH HC27tVWr73PNidhdqs6gumHLD2u2syWkfTPlSfJk7WgNOI3v6y0g2zZIA8Aq/NnR U26ofGVVDa/V5Za9PNEk3Uf7x91H1dGC -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:02 2025 by rpki-client