$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json) Hash identifier: RSd+wBE0d5/55JBwHx8RIcXNRECs0ABMzcI6shXRDmA= Subject key identifier: D8:5F:2B:08:02:9A:A5:3A:AC:CC:56:91:8A:42:9A:C3:1C:5D:59:49 Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft Manifest number: 014A Signing time: Mon 21 Jul 2025 04:19:36 +0000 Manifest this update: Mon 21 Jul 2025 04:19:36 +0000 Manifest next update: Mon 28 Jul 2025 04:19:36 +0000 Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: Ga9Q92vpneSmduYcRUxxzKNneIMPEQvpzsvd5Y0fVZY=) 2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Validity Not Before: Jul 21 04:19:36 2025 GMT Not After : Jul 28 04:19:36 2025 GMT Subject: CN=687dbfd8-67ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:50:b7:b4:c9:0b:68:cd:fb:7b:9a:e1:7d: 53:75:bb:4a:83:95:63:56:a5:ca:6b:00:27:ba:da: 6a:53:45:4d:95:a4:66:33:49:54:91:ab:eb:48:76: 84:f4:b4:82:b4:54:ae:86:0e:62:15:d1:63:25:c6: 03:8d:bf:30:91:30:89:b3:03:ac:17:da:df:14:41: 8a:df:88:a2:a9:b6:e3:8d:a0:95:a5:a9:bd:87:75: 2f:36:fb:31:e0:5a:5d:44:a6:2a:d5:c4:99:d5:41: 7b:f2:1c:70:5d:9a:73:e7:03:10:42:a1:b2:46:24: 98:00:7c:84:23:ca:b8:6a:51:41:e4:66:8d:57:09: 26:f0:7a:e6:fa:64:6b:ee:e5:92:a0:6e:a5:1d:16: 0b:ad:95:93:4f:3b:54:4e:d2:20:ec:96:b5:4f:f2: 2b:d1:24:dd:d6:15:5c:75:08:68:b7:56:cc:49:5f: 72:f1:1b:86:6b:a6:25:cc:88:93:f7:33:cc:f0:e3: 3b:56:91:fd:c0:fc:b0:7f:d1:8e:5e:00:7e:8b:af: ac:d2:cf:1d:62:e9:09:1c:e9:50:96:53:a6:02:06: 01:95:67:43:c6:b7:a4:cc:9b:68:23:b6:b4:7c:0d: 8c:d7:ac:d7:c2:b6:ef:7c:a7:02:3c:db:db:d0:7a: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:2B:08:02:9A:A5:3A:AC:CC:56:91:8A:42:9A:C3:1C:5D:59:49 X509v3 Authority Key Identifier: keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:3d:96:ea:72:c4:42:17:59:08:4e:f1:17:17:55:47:f1:95: 67:5c:23:4d:99:25:81:15:24:d8:80:73:0b:4c:16:4b:e0:95: c6:f6:f1:a9:84:19:05:b2:4f:9d:17:07:24:81:ca:a1:6d:a3: f0:d4:9e:cd:7e:5c:9b:3c:3e:4f:5b:a8:8d:d6:a9:3b:62:93: 54:62:05:97:ce:90:4d:c9:91:06:e4:6e:d6:4b:98:13:6c:fd: 36:a3:89:a7:95:88:f0:82:69:2e:a6:ef:cf:ab:a6:19:cb:96: 62:6f:99:98:a0:4b:59:ae:1a:82:8b:e7:17:8b:18:d9:01:b6: 17:b8:98:f8:03:9c:6b:cf:8c:7d:88:75:46:c3:9c:c4:0b:c9: 54:7e:70:94:cc:9f:fe:c0:8d:ee:38:1f:27:f9:22:2d:e9:7c: d7:ef:c4:e5:2d:83:1e:79:1a:a9:65:43:a4:b2:25:4b:0c:48: 25:ac:4b:a6:23:6a:27:5c:a9:34:e5:12:25:75:bb:f9:b3:fd: fc:55:52:57:53:be:82:d1:99:0b:b5:50:de:87:23:89:82:5c: d5:19:ad:29:7e:7e:bd:ae:ea:6f:2c:cd:9f:e1:e9:b2:d2:e9: 3d:f5:72:70:3c:8a:42:72:93:0f:9e:d2:2f:62:7c:c5:e9:66: a9:1f:53:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURBM0Q5QTU5MkZD QjhBQ0E2MjkwHhcNMjUwNzIxMDQxOTM2WhcNMjUwNzI4MDQxOTM2WjAYMRYwFAYD VQQDEw02ODdkYmZkOC02N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUlQt7TJC2jN+3ua4X1TdbtKg5VjVqXKawAnutpqU0VNlaRmM0lUkavrSHaE 9LSCtFSuhg5iFdFjJcYDjb8wkTCJswOsF9rfFEGK34iiqbbjjaCVpam9h3UvNvsx 4FpdRKYq1cSZ1UF78hxwXZpz5wMQQqGyRiSYAHyEI8q4alFB5GaNVwkm8Hrm+mRr 7uWSoG6lHRYLrZWTTztUTtIg7Ja1T/Ir0STd1hVcdQhot1bMSV9y8RuGa6YlzIiT 9zPM8OM7VpH9wPywf9GOXgB+i6+s0s8dYukJHOlQllOmAgYBlWdDxrekzJtoI7a0 fA2M16zXwrbvfKcCPNvb0HoLRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhfKwgC mqU6rMxWkYpCmsMcXVlJMB8GA1UdIwQYMBaAFPVE5v7qD+a533sdo9mlkvy4rKYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU1Qi84RjQzNDlDODZE NzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVybmZleDJqMmFXU19MaXNw aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVVG1fdW9QNXJuZmV4MmoyYVdTX0xpc3Bpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVy bmZleDJqMmFXU19MaXNwaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmPZbqcsRCF1kITvEXF1VH8ZVnXCNNmSWBFSTYgHMLTBZL4JXG9vGp hBkFsk+dFwckgcqhbaPw1J7NflybPD5PW6iN1qk7YpNUYgWXzpBNyZEG5G7WS5gT bP02o4mnlYjwgmkupu/Pq6YZy5Zib5mYoEtZrhqCi+cXixjZAbYXuJj4A5xrz4x9 iHVGw5zEC8lUfnCUzJ/+wI3uOB8n+SIt6XzX78TlLYMeeRqpZUOksiVLDEglrEum I2onXKk05RIldbv5s/38VVJXU76C0ZkLtVDehyOJglzVGa0pfn69rupvLM2f4emy 0uk99XJwPIpCcpMPntIvYnzF6WapH1Nu -----END CERTIFICATE-----Generated at Mon Jul 21 07:09:58 2025 by rpki-client