$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: iaBmQzoc17DJDALTFZ+XPtx3Y1bNYx3YYeplQs/Au/M= Subject key identifier: 95:8C:6B:75:CE:60:7A:41:C1:CE:8E:99:1D:E6:DD:ED:81:92:EA:88 Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: 6A Signing time: Thu 15 May 2025 06:14:19 +0000 Manifest this update: Thu 15 May 2025 06:14:19 +0000 Manifest next update: Thu 22 May 2025 06:14:19 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: YZwiJsP5DY9YtpQ0g93dp8jlppE/PZ3CA/rjLHy9JgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: May 15 06:14:19 2025 GMT Not After : May 22 06:14:19 2025 GMT Subject: CN=6825863b-130b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b8:49:a5:87:7c:4e:56:44:8f:23:da:75:ee: ea:30:53:ad:8e:7d:6a:21:fb:d4:bf:8b:ed:9e:d7: 81:b6:e7:9f:39:83:aa:b7:01:e5:63:a7:87:a4:96: b0:17:88:39:ad:dd:72:7a:00:a2:43:9c:ba:e3:e3: b6:b1:d4:87:64:94:d3:6e:b3:09:25:ab:6d:f9:8f: ee:98:55:25:5f:0d:8c:c4:5d:d1:2c:41:ea:ed:25: e9:bd:3f:79:39:d2:53:9e:17:d3:18:53:41:a9:62: 41:64:25:12:0a:c7:52:2e:b9:25:e1:28:0a:9e:a8: 5e:60:34:57:87:a6:c3:6a:55:19:64:9c:02:39:83: 5c:b3:3c:6f:4c:e5:96:4a:ad:0d:ea:f6:a4:2a:fb: 68:e0:9e:8b:da:5a:f6:e9:36:0e:03:77:7f:8b:cd: 9c:3a:1c:c0:7d:e9:99:32:36:f4:3d:72:e4:5b:13: 1a:82:06:2f:36:20:96:12:72:67:d9:d8:b7:ff:6d: ea:31:5b:ea:13:f3:0f:6a:d7:cc:7d:c6:b2:61:3b: 62:27:9d:ed:90:d9:a5:fa:16:ad:60:84:4f:e8:05: 8f:05:8a:83:b3:df:0e:13:50:40:be:87:83:d5:15: dc:1c:b7:f4:9f:97:18:2b:f7:92:44:ec:c4:a1:d2: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:6B:75:CE:60:7A:41:C1:CE:8E:99:1D:E6:DD:ED:81:92:EA:88 X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:01:cc:b9:6c:9a:35:57:b3:c3:f4:22:1d:5e:60:89:c9:40: 3a:20:2c:54:76:af:13:c6:47:53:9c:26:df:52:a5:44:10:46: 5c:01:87:13:73:a3:f0:45:6d:96:cb:22:f7:3c:f3:f6:ef:5b: 65:43:fc:0b:88:8c:db:40:74:58:d8:04:98:05:3d:7e:59:ed: 94:93:bb:25:58:e1:5e:26:71:c0:9c:39:f3:53:d3:68:10:cc: 85:2d:42:9a:84:cd:d8:f1:97:f9:a7:c8:df:d1:05:85:0e:08: 81:89:c3:4b:da:9d:81:58:e2:6d:c6:86:d4:bb:8e:1c:2d:a4: 77:1e:23:61:2a:19:34:1b:df:d4:2c:c5:eb:52:9d:5f:95:9a: 4a:c8:22:5c:98:8d:73:87:a4:80:14:7f:de:02:a6:11:1f:30: a8:9a:4a:5f:28:92:84:9b:db:0d:88:4a:c9:1a:0b:ff:e6:48: c4:0b:79:ef:de:85:d0:c2:89:3b:0c:ef:a3:e5:00:f7:69:84: 8c:0d:6e:9e:b8:b7:f1:0e:35:59:ca:82:40:f0:2a:1e:8c:fa: 2a:39:b8:09:b8:1b:c7:e4:45:2f:8c:3b:5d:3f:28:64:07:ec: cd:f8:ec:32:75:b5:50:96:95:a2:d8:a1:02:78:16:e5:7c:cd: 86:ca:70:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUUxQzExMC8GA1UEBRMoQkI4M0YyQTM3M0MwNUE5RkRFQzQwRjcxMkM4MzFGNTdD RjkxOEE1OTAeFw0yNTA1MTUwNjE0MTlaFw0yNTA1MjIwNjE0MTlaMBgxFjAUBgNV BAMTDTY4MjU4NjNiLTEzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDruEmlh3xOVkSPI9p17uowU62OfWoh+9S/i+2e14G25585g6q3AeVjp4eklrAX iDmt3XJ6AKJDnLrj47ax1IdklNNuswklq235j+6YVSVfDYzEXdEsQertJem9P3k5 0lOeF9MYU0GpYkFkJRIKx1IuuSXhKAqeqF5gNFeHpsNqVRlknAI5g1yzPG9M5ZZK rQ3q9qQq+2jgnovaWvbpNg4Dd3+LzZw6HMB96ZkyNvQ9cuRbExqCBi82IJYScmfZ 2Lf/beoxW+oT8w9q18x9xrJhO2Inne2Q2aX6Fq1ghE/oBY8FioOz3w4TUEC+h4PV Fdwct/Sflxgr95JE7MSh0q7/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlYxrdc5g ekHBzo6ZHebd7YGS6ogwHwYDVR0jBBgwFoAUu4Pyo3PAWp/exA9xLIMfV8+Rilkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRTFDLzJEQjUzNUZBOTIw MDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTRQeW8zUEFXcF9leEE5eExJTWZWOC1SaWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RTFDLzJEQjUzNUZBOTIwMDExRUY5RTBDM0Q2QkM0RjlBRTAyL3U0UHlvM1BBV3Bf ZXhBOXhMSU1mVjgtUmlsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEBzLlsmjVXs8P0Ih1eYInJQDogLFR2rxPGR1OcJt9SpUQQRlwBhxNz o/BFbZbLIvc88/bvW2VD/AuIjNtAdFjYBJgFPX5Z7ZSTuyVY4V4mccCcOfNT02gQ zIUtQpqEzdjxl/mnyN/RBYUOCIGJw0vanYFY4m3GhtS7jhwtpHceI2EqGTQb39Qs xetSnV+VmkrIIlyYjXOHpIAUf94CphEfMKiaSl8okoSb2w2ISskaC//mSMQLee/e hdDCiTsM76PlAPdphIwNbp64t/EONVnKgkDwKh6M+io5uAm4G8fkRS+MO10/KGQH 7M347DJ1tVCWlaLYoQJ4FuV8zYbKcFg= -----END CERTIFICATE-----Generated at Thu May 15 12:32:36 2025 by rpki-client