$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: UWvhBLUtn2hf9CQahrG1segmoGIkc8kIdFZzyjc0Flo= Subject key identifier: 5A:50:48:51:9C:C5:AF:10:8C:83:0E:41:7B:D2:5A:2E:8D:51:F1:FB Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: 71 Signing time: Sat 31 May 2025 06:26:00 +0000 Manifest this update: Sat 31 May 2025 06:26:00 +0000 Manifest next update: Sat 07 Jun 2025 06:26:00 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: GSlo0ejbUTAM8TyNUGfmhgaQpGMiNXm2N0bWAOrKNHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: May 31 06:26:00 2025 GMT Not After : Jun 7 06:26:00 2025 GMT Subject: CN=683aa0f8-7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:4f:c0:5a:60:14:e4:15:97:f0:e9:83:c6: 8d:da:ed:09:a6:4c:b9:65:e3:1d:eb:3a:bb:52:64: 45:22:c4:aa:e4:5a:73:0b:af:9b:cb:ec:3d:8d:5b: 27:eb:dc:a1:0c:a8:75:76:2f:57:6c:f6:b7:bf:b3: 69:4b:56:4f:21:bf:86:57:8a:66:cc:91:fe:9a:d0: 1a:39:70:cb:f8:2e:9e:77:9c:d2:65:aa:45:66:bf: bc:2c:14:88:00:5d:2e:44:9c:69:fb:2c:7c:cc:67: 46:c0:5a:d8:78:81:a8:90:23:21:5c:62:24:b3:9d: 38:9e:2d:b0:5c:44:8a:a5:aa:4e:24:2c:ca:2c:14: 1e:8f:ae:fc:23:8b:86:1a:6e:a3:74:db:a4:8a:a8: 29:09:6e:23:5a:c6:da:0e:08:75:6e:96:25:3c:70: 0b:dd:7d:22:45:fd:fe:d5:f3:8a:56:2b:e4:d0:53: 8c:bf:07:e8:5d:a3:8b:11:37:53:87:52:34:6a:07: bc:c2:db:11:17:55:0c:3a:80:5d:af:35:13:6a:e3: 80:2e:cc:8c:0b:6f:92:3d:8a:66:d1:5c:df:53:12: 53:09:d7:c6:c3:60:3e:bd:6c:c4:1d:1d:67:36:8e: 1a:64:7b:91:c4:f3:e0:7e:14:ff:32:ef:8d:7e:6c: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:50:48:51:9C:C5:AF:10:8C:83:0E:41:7B:D2:5A:2E:8D:51:F1:FB X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ac:51:c3:49:d6:14:0b:6b:c3:1e:1b:ab:1d:9d:50:a3:f3: 6a:14:b1:ae:cd:1c:c6:db:6b:d4:22:1e:c6:51:c4:97:5d:b3: bd:e7:ff:76:06:03:99:25:bb:6e:ad:1a:5c:df:92:b3:b6:ef: 93:5f:72:dd:3c:20:60:3a:2f:13:91:8d:63:a4:24:9c:98:84: 32:68:f7:c6:55:a0:d8:66:f7:43:64:e0:36:ff:27:91:d9:f9: fc:74:c3:50:02:f3:e6:3e:c3:8b:07:58:94:47:a3:9a:39:16: 49:82:90:b7:da:f0:6b:cb:35:34:2c:75:bd:b7:39:9e:60:b2: 58:90:92:fd:7a:cf:85:c4:cc:00:59:3f:88:05:ec:e3:af:7c: 51:a2:3f:fb:71:de:03:be:5b:c9:8f:41:13:ca:7d:69:09:76: 36:36:77:51:7c:93:4d:82:c3:86:a4:ac:ca:73:a4:92:ed:e0: 47:36:ba:d5:e7:34:bc:13:09:f3:d1:49:69:cc:b6:06:55:a8: 54:f0:06:88:2e:03:2c:50:9e:ea:86:2a:d1:31:dc:f6:3f:79: 3c:df:70:1f:2b:fc:f0:dc:f3:09:4d:01:48:53:e9:3c:72:b1: 52:58:59:ea:b5:0d:93:52:23:e0:5e:8e:e7:da:98:e3:32:0d: 71:fa:ae:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUUxQzExMC8GA1UEBRMoQkI4M0YyQTM3M0MwNUE5RkRFQzQwRjcxMkM4MzFGNTdD RjkxOEE1OTAeFw0yNTA1MzEwNjI2MDBaFw0yNTA2MDcwNjI2MDBaMBgxFjAUBgNV BAMTDTY4M2FhMGY4LTc2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK4U/AWmAU5BWX8OmDxo3a7QmmTLll4x3rOrtSZEUixKrkWnMLr5vL7D2NWyfr 3KEMqHV2L1ds9re/s2lLVk8hv4ZXimbMkf6a0Bo5cMv4Lp53nNJlqkVmv7wsFIgA XS5EnGn7LHzMZ0bAWth4gaiQIyFcYiSznTieLbBcRIqlqk4kLMosFB6Prvwji4Ya bqN026SKqCkJbiNaxtoOCHVuliU8cAvdfSJF/f7V84pWK+TQU4y/B+hdo4sRN1OH UjRqB7zC2xEXVQw6gF2vNRNq44AuzIwLb5I9imbRXN9TElMJ18bDYD69bMQdHWc2 jhpke5HE8+B+FP8y741+bKELAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWlBIUZzF rxCMgw5Be9JaLo1R8fswHwYDVR0jBBgwFoAUu4Pyo3PAWp/exA9xLIMfV8+Rilkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRTFDLzJEQjUzNUZBOTIw MDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTRQeW8zUEFXcF9leEE5eExJTWZWOC1SaWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RTFDLzJEQjUzNUZBOTIwMDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3Bf ZXhBOXhMSU1mVjgtUmlsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKusUcNJ1hQLa8MeG6sdnVCj82oUsa7NHMbba9QiHsZRxJdds73n/3YG A5klu26tGlzfkrO275Nfct08IGA6LxORjWOkJJyYhDJo98ZVoNhm90Nk4Db/J5HZ +fx0w1AC8+Y+w4sHWJRHo5o5FkmCkLfa8GvLNTQsdb23OZ5gsliQkv16z4XEzABZ P4gF7OOvfFGiP/tx3gO+W8mPQRPKfWkJdjY2d1F8k02Cw4akrMpzpJLt4Ec2utXn NLwTCfPRSWnMtgZVqFTwBoguAyxQnuqGKtEx3PY/eTzfcB8r/PDc8wlNAUhT6Txy sVJYWeq1DZNSI+BejufamOMyDXH6roA= -----END CERTIFICATE-----Generated at Sat May 31 17:28:59 2025 by rpki-client