$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: rJ1U6KgfOSyxaDb2+v4UBScoIW5q2nw+2vGw7n+RO9A= Subject key identifier: FF:04:75:D5:85:FE:69:D6:35:C5:53:DF:B6:D4:68:4E:51:92:35:29 Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: 9C Signing time: Sat 23 Aug 2025 06:34:10 +0000 Manifest this update: Sat 23 Aug 2025 06:34:10 +0000 Manifest next update: Sat 30 Aug 2025 06:34:10 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: qaKn0KyM2uO1vQV5lOFZObUUQj9fp9YmGV+nDw6e3To=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: Aug 23 06:34:10 2025 GMT Not After : Aug 30 06:34:10 2025 GMT Subject: CN=68a960e2-04a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:c2:f9:80:b8:58:f3:34:42:1f:ec:0e:27: 73:d0:4c:95:5b:ac:fb:f5:d5:0e:1d:11:95:e2:bd: e1:d7:5c:a8:c0:fe:76:09:fe:9f:3b:19:ed:e9:68: 87:f4:38:27:80:ad:9c:ab:8a:1a:7d:24:1f:0e:e2: f7:d8:e3:39:1b:04:2b:8c:20:6e:12:f9:e7:00:8c: b1:e0:96:31:bd:49:4a:52:47:f4:ae:11:01:2d:e7: ac:35:3c:e3:3b:b0:86:e8:31:df:57:46:eb:44:50: 9a:ca:dc:f0:b9:32:ba:d1:35:52:76:f8:fd:b5:a3: 88:b2:b3:e3:eb:26:6d:b2:1b:05:85:07:e8:c6:0a: 94:d6:2e:cf:95:94:bf:de:da:68:b7:4b:99:c8:0e: 23:4d:f6:54:c5:16:bf:87:13:76:92:fa:72:9b:c6: ab:bd:f4:86:b5:65:1d:08:4e:f4:d8:52:72:48:be: 13:ea:5a:be:c9:16:dc:d0:d2:9f:26:dc:f2:1e:37: c3:42:96:0f:14:5b:7d:cb:d7:24:4b:b2:09:c4:eb: 99:c0:1f:d8:11:a2:6f:8d:03:ab:ba:1c:e9:ee:61: 27:c3:06:18:06:ce:14:88:cb:e4:44:a4:c5:c1:ea: 7f:82:4e:29:06:1f:1d:7e:34:2b:ad:06:f3:9c:ca: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:04:75:D5:85:FE:69:D6:35:C5:53:DF:B6:D4:68:4E:51:92:35:29 X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d6:57:8b:ba:b1:c2:df:8f:9b:29:3f:1f:95:c3:f3:f1:a2: 9c:fa:c7:de:97:2c:19:bf:6f:03:21:2f:09:be:a4:60:93:31: bd:88:11:04:46:ab:0e:89:27:a3:3e:76:7e:49:ed:c3:a5:3b: e7:7a:35:f6:91:9b:26:5c:21:e1:86:57:8a:8c:31:33:fb:60: 21:af:18:1e:04:cb:10:fc:7a:9a:82:22:5a:f2:65:b4:87:71: 73:13:a6:bb:6d:fe:fe:69:01:41:b8:8f:5d:0c:45:a5:cb:0c: 93:7d:56:20:b4:49:4e:af:30:98:60:f4:d4:3f:bc:0c:50:71: bc:80:a6:51:3c:1c:6d:39:d0:7d:1d:fa:69:bd:bf:b3:e4:7c: af:e1:7e:0c:ac:f6:fc:b5:96:b6:81:2c:73:a8:9c:91:5b:a4: 17:42:4d:40:0a:bf:2b:25:cf:43:89:f7:aa:38:d2:23:35:0e: e8:de:3e:d6:12:94:32:9b:9a:43:1a:74:b4:6a:59:a5:bf:09: 7e:b8:04:ed:c3:1a:d3:fb:ee:ae:95:b9:2b:b0:7b:46:97:0c: 23:a4:59:93:9c:ec:3b:2d:17:ce:3e:c6:13:98:cb:64:27:c8: f3:9d:4a:ed:73:c2:a7:fe:60:eb:6f:a7:ec:f7:f8:ca:3f:fb: fb:95:13:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEJCODNGMkEzNzNDMDVBOUZERUM0MEY3MTJDODMxRjU3 Q0Y5MThBNTkwHhcNMjUwODIzMDYzNDEwWhcNMjUwODMwMDYzNDEwWjAYMRYwFAYD VQQDEw02OGE5NjBlMi0wNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCDC+YC4WPM0Qh/sDidz0EyVW6z79dUOHRGV4r3h11yowP52Cf6fOxnt6WiH 9DgngK2cq4oafSQfDuL32OM5GwQrjCBuEvnnAIyx4JYxvUlKUkf0rhEBLeesNTzj O7CG6DHfV0brRFCaytzwuTK60TVSdvj9taOIsrPj6yZtshsFhQfoxgqU1i7PlZS/ 3tpot0uZyA4jTfZUxRa/hxN2kvpym8arvfSGtWUdCE702FJySL4T6lq+yRbc0NKf JtzyHjfDQpYPFFt9y9ckS7IJxOuZwB/YEaJvjQOruhzp7mEnwwYYBs4UiMvkRKTF wep/gk4pBh8dfjQrrQbznMoS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8EddWF /mnWNcVT37bUaE5RkjUpMB8GA1UdIwQYMBaAFLuD8qNzwFqf3sQPcSyDH1fPkYpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yREI1MzVGQTky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi91NFB5bzNQQVdwX2V4QTl4TElNZlY4LVJp bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yREI1MzVGQTkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi91NFB5bzNQQVdw X2V4QTl4TElNZlY4LVJpbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE1leLurHC34+bKT8flcPz8aKc+sfelywZv28DIS8JvqRgkzG9iBEE RqsOiSejPnZ+Se3DpTvnejX2kZsmXCHhhleKjDEz+2AhrxgeBMsQ/HqagiJa8mW0 h3FzE6a7bf7+aQFBuI9dDEWlywyTfVYgtElOrzCYYPTUP7wMUHG8gKZRPBxtOdB9 Hfppvb+z5Hyv4X4MrPb8tZa2gSxzqJyRW6QXQk1ACr8rJc9DifeqONIjNQ7o3j7W EpQym5pDGnS0almlvwl+uATtwxrT++6ulbkrsHtGlwwjpFmTnOw7LRfOPsYTmMtk J8jznUrtc8Kn/mDrb6fs9/jKP/v7lRPj -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:00 2025 by rpki-client