$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft File: rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json) Hash identifier: EJ3kgxg4m0zXq7fOOqDQ5tmC8xB1VBA2m/8S2nIJlS0= Subject key identifier: CE:9A:38:21:CB:AB:23:7A:A8:AA:E6:7A:2D:C3:85:3D:B2:EF:97:44 Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 Certificate issuer: /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft Manifest number: B0 Signing time: Sat 31 May 2025 05:40:43 +0000 Manifest this update: Sat 31 May 2025 05:40:43 +0000 Manifest next update: Sat 07 Jun 2025 05:40:43 +0000 Files and hashes: 1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: OHIpfh2/pHxQDZ3aIkHuxlBxh0GiBjPinYQG1TYWwfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BA0, serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Validity Not Before: May 31 05:40:43 2025 GMT Not After : Jun 7 05:40:43 2025 GMT Subject: CN=683a965b-d3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:8a:48:78:ec:dc:5a:86:87:64:b0:08:98: 03:2d:dc:a6:df:63:16:fc:42:91:f7:14:f4:fd:30: 07:53:cc:6e:e0:e0:7f:aa:95:e6:10:41:f4:73:b1: 8f:3d:93:2b:96:c9:95:6e:df:e8:35:32:9c:51:67: 5c:71:ad:be:59:04:2a:37:07:3d:8f:44:ff:a5:b4: d3:bd:95:c5:05:0a:de:6c:81:36:9b:cf:94:e7:41: fa:88:54:8f:c4:35:0f:4e:fd:1b:57:cd:cb:ef:92: 55:37:16:a4:0a:f5:8a:57:a5:eb:dd:3a:e7:d4:46: 0c:43:a5:12:ba:a2:c7:6d:2f:ff:55:04:b1:e7:2f: e7:9f:ba:e7:ab:06:bc:2b:c3:fc:f8:81:da:44:55: 9b:b8:f5:5b:e6:27:9a:2e:a0:f6:30:42:69:26:f7: 6f:bf:9b:ce:1c:c8:ee:c0:61:7a:35:a5:7e:c8:10: f6:21:01:8f:c9:59:0d:4c:a2:3f:76:06:f2:d2:bc: d7:45:52:dd:f9:63:eb:f2:4e:a6:72:fc:d9:36:02: 72:44:23:b9:84:d4:fe:a6:3c:52:ac:4b:9c:3d:b0: 10:35:1a:96:93:5b:39:f0:af:48:32:ec:85:32:14: 34:32:b1:45:61:8d:9a:80:d5:62:53:e3:56:b9:7c: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9A:38:21:CB:AB:23:7A:A8:AA:E6:7A:2D:C3:85:3D:B2:EF:97:44 X509v3 Authority Key Identifier: keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:54:1b:c8:a4:b0:94:ab:2e:3f:09:2a:af:7a:3c:08:58:d1: 9c:e5:46:bd:1a:f0:17:ba:c8:bf:12:44:4e:0e:36:57:38:c2: 81:67:49:17:60:e4:60:f3:44:d9:9a:6e:07:f2:75:f8:0f:1b: 7a:b3:5f:d9:eb:7b:17:f8:0d:11:0b:e9:a8:90:08:f5:30:ac: 8a:22:cd:68:00:4e:5c:15:f5:f7:15:eb:0b:dd:78:9e:97:c7: 2d:36:49:87:1f:dc:ad:9b:bd:0c:a1:ea:7c:47:4e:0e:36:d3: 47:ce:0b:2b:7c:64:a7:ad:d5:c4:3f:08:05:7d:42:c8:7d:76: e9:c5:e3:77:fe:45:5b:d3:26:0b:d1:44:0d:5d:16:06:2d:94: 69:ae:39:47:e7:38:1a:6e:16:6f:9e:f5:d4:f9:1b:2a:c3:42: 84:93:d1:44:a1:e0:9f:26:f2:44:c8:26:60:39:1f:f6:73:96: cf:90:5c:32:0a:e6:87:c0:aa:da:19:65:d4:60:a1:36:f3:f3: 06:d0:5f:55:ed:e0:83:f9:09:3d:29:ff:14:97:9c:4d:aa:fa: c4:8f:0a:e1:cb:94:b4:9f:f4:6f:21:ea:2a:70:80:23:bd:26: ed:55:63:37:f4:73:26:68:d7:a6:3e:f1:b3:55:a4:ec:22:2e: 36:64:3d:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCQTAxMTAvBgNVBAUTKEFDRkNCMzFFMkJFMkFEM0QxMkIxQTc5MTAyRkNCNEZE NThCQjY2ODMwHhcNMjUwNTMxMDU0MDQzWhcNMjUwNjA3MDU0MDQzWjAYMRYwFAYD VQQDEw02ODNhOTY1Yi1kM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZGKSHjs3FqGh2SwCJgDLdym32MW/EKR9xT0/TAHU8xu4OB/qpXmEEH0c7GP PZMrlsmVbt/oNTKcUWdcca2+WQQqNwc9j0T/pbTTvZXFBQrebIE2m8+U50H6iFSP xDUPTv0bV83L75JVNxakCvWKV6Xr3Trn1EYMQ6USuqLHbS//VQSx5y/nn7rnqwa8 K8P8+IHaRFWbuPVb5ieaLqD2MEJpJvdvv5vOHMjuwGF6NaV+yBD2IQGPyVkNTKI/ dgby0rzXRVLd+WPr8k6mcvzZNgJyRCO5hNT+pjxSrEucPbAQNRqWk1s58K9IMuyF MhQ0MrFFYY2agNViU+NWuXwFpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6aOCHL qyN6qKrmei3DhT2y75dEMB8GA1UdIwQYMBaAFKz8sx4r4q09ErGnkQL8tP1Yu2aD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JBMC9GNzM4M0Y4NDM4 RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJUMFNzYWVSQXZ5MF9WaTda b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JBMC9GNzM4M0Y4NDM4RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJU MFNzYWVSQXZ5MF9WaTdab00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFVBvIpLCUqy4/CSqvejwIWNGc5Ua9GvAXusi/EkRODjZXOMKBZ0kX YORg80TZmm4H8nX4Dxt6s1/Z63sX+A0RC+mokAj1MKyKIs1oAE5cFfX3FesL3Xie l8ctNkmHH9ytm70Moep8R04ONtNHzgsrfGSnrdXEPwgFfULIfXbpxeN3/kVb0yYL 0UQNXRYGLZRprjlH5zgabhZvnvXU+Rsqw0KEk9FEoeCfJvJEyCZgOR/2c5bPkFwy CuaHwKraGWXUYKE28/MG0F9V7eCD+Qk9Kf8Ul5xNqvrEjwrhy5S0n/RvIeoqcIAj vSbtVWM39HMmaNemPvGzVaTsIi42ZD3H -----END CERTIFICATE-----Generated at Sat May 31 16:45:47 2025 by rpki-client