$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: spIzrQhsh7A1tGtYrHwHvsYfvUppo8bdXsgNxUgPTds= Subject key identifier: 55:EA:2A:59:E8:E2:67:14:A8:1A:E0:27:0E:37:30:E0:C6:8C:C7:DB Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 87 Signing time: Sat 31 May 2025 06:10:41 +0000 Manifest this update: Sat 31 May 2025 06:10:40 +0000 Manifest next update: Sat 07 Jun 2025 06:10:40 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: gyo21BLPZxMpYlARz3tEpPTeFFfVxkUTsqG+ypfZ3zM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: May 31 06:10:40 2025 GMT Not After : Jun 7 06:10:40 2025 GMT Subject: CN=683a9d61-e776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:38:dd:c5:32:12:fa:89:97:48:a9:1a:b3: 17:e8:4d:dc:40:a6:fc:44:f3:4d:39:6e:d3:f8:18: a6:57:fa:fd:15:1b:85:a9:2d:f6:94:c0:59:cb:5d: 30:06:17:58:db:96:0d:5f:ac:0e:65:89:b9:9c:9f: a7:4a:f6:1d:f0:80:66:93:94:62:63:f1:8a:a2:dd: f9:08:9a:40:f9:e2:04:65:72:b2:de:02:a9:55:0a: b8:83:bc:df:51:8f:49:cc:52:b5:88:67:de:21:9a: 34:df:5b:03:a9:0d:85:67:c4:a5:46:c4:c6:b6:b1: 97:03:b5:ce:29:02:c9:7d:ec:1a:d7:32:5a:ad:cc: 4d:3b:d3:f0:cf:57:b9:27:84:e6:85:6f:14:eb:af: 7a:a0:cd:8b:1b:99:1e:62:8b:dc:39:6c:11:9c:1c: 4c:21:8f:d2:61:ad:61:a7:ef:f9:cf:38:e7:44:82: 99:bb:83:48:41:d9:c9:60:d2:20:e1:b0:28:1c:93: 4f:af:fe:c6:a6:f2:21:f0:7f:04:97:90:ac:cf:06: 99:21:4c:95:c9:51:88:ec:48:a4:ce:3c:f6:ab:b7: f1:e4:00:90:a6:7f:21:4c:03:d3:2b:b7:6a:74:a6: 8d:8f:a4:41:04:5b:3c:02:1c:b0:3a:f7:b4:0e:c5: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EA:2A:59:E8:E2:67:14:A8:1A:E0:27:0E:37:30:E0:C6:8C:C7:DB X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ab:87:3a:53:69:e2:8a:1f:67:f0:a3:78:e6:73:56:44:17: 77:b2:0f:1f:29:d2:98:32:56:95:df:fc:91:33:bb:4e:75:0c: fc:58:09:58:15:59:0c:74:27:5b:27:70:56:2f:97:aa:86:89: 9f:7a:79:25:8e:2c:97:86:b9:32:6e:8a:cd:75:77:52:b7:2f: b1:30:bd:2d:9c:d0:6f:50:c7:f5:64:dc:87:5a:73:9c:73:93: 2d:6c:30:e4:f9:9f:58:e8:de:f2:f5:c3:74:09:67:72:11:2b: c0:d2:b7:5c:98:1b:2f:4b:60:06:54:d0:e8:70:50:f5:d1:c2: f4:b2:77:9d:ae:00:d2:69:20:87:1a:80:c2:44:af:24:b4:de: c8:82:61:a2:18:c5:e9:52:26:51:0e:a9:7c:de:0f:32:74:92: e2:53:ba:37:96:35:e4:e9:1f:6e:c1:40:82:2d:91:33:9c:55: c7:22:fc:f3:0f:01:cd:bd:74:a7:59:99:c7:70:c2:37:94:76: 7e:08:71:b4:d1:1e:72:c2:c5:1b:cf:0c:d6:37:e7:3b:ab:14: 35:64:0c:3f:4d:0a:d8:ce:5b:0a:a9:a5:a3:d8:90:e4:fd:1b: 95:58:45:4b:7f:87:ad:f4:b4:dd:35:43:81:a6:69:8e:3c:4f: b4:79:63:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx MjY5M0M4ODIwHhcNMjUwNTMxMDYxMDQwWhcNMjUwNjA3MDYxMDQwWjAYMRYwFAYD VQQDEw02ODNhOWQ2MS1lNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ak43cUyEvqJl0ipGrMX6E3cQKb8RPNNOW7T+BimV/r9FRuFqS32lMBZy10w BhdY25YNX6wOZYm5nJ+nSvYd8IBmk5RiY/GKot35CJpA+eIEZXKy3gKpVQq4g7zf UY9JzFK1iGfeIZo031sDqQ2FZ8SlRsTGtrGXA7XOKQLJfewa1zJarcxNO9Pwz1e5 J4TmhW8U6696oM2LG5keYovcOWwRnBxMIY/SYa1hp+/5zzjnRIKZu4NIQdnJYNIg 4bAoHJNPr/7GpvIh8H8El5CszwaZIUyVyVGI7Eikzjz2q7fx5ACQpn8hTAPTK7dq dKaNj6RBBFs8AhywOve0DsXCswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXqKlno 4mcUqBrgJw43MODGjMfbMB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzq4c6U2niih9n8KN45nNWRBd3sg8fKdKYMlaV3/yRM7tOdQz8WAlY FVkMdCdbJ3BWL5eqhomfenkljiyXhrkyborNdXdSty+xML0tnNBvUMf1ZNyHWnOc c5MtbDDk+Z9Y6N7y9cN0CWdyESvA0rdcmBsvS2AGVNDocFD10cL0snedrgDSaSCH GoDCRK8ktN7IgmGiGMXpUiZRDql83g8ydJLiU7o3ljXk6R9uwUCCLZEznFXHIvzz DwHNvXSnWZnHcMI3lHZ+CHG00R5ywsUbzwzWN+c7qxQ1ZAw/TQrYzlsKqaWj2JDk /RuVWEVLf4et9LTdNUOBpmmOPE+0eWOx -----END CERTIFICATE-----Generated at Sat May 31 17:31:55 2025 by rpki-client