$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft File: rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json) Hash identifier: tP+ij8LnVY07CssZJe2gZjowHIC5SW1jtVnVNKiTpnM= Subject key identifier: 5B:81:F6:A3:12:20:53:F9:19:F7:DC:FE:A8:B4:1B:40:58:49:D3:CF Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 Certificate issuer: /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft Manifest number: C0 Signing time: Tue 01 Jul 2025 06:33:22 +0000 Manifest this update: Tue 01 Jul 2025 06:33:21 +0000 Manifest next update: Tue 08 Jul 2025 06:33:21 +0000 Files and hashes: 1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: 4ZTgXCR3gX6mFnV6aR4kAZr1M9f3oZIueY5Iwi4lPV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BA0, serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Validity Not Before: Jul 1 06:33:21 2025 GMT Not After : Jul 8 06:33:21 2025 GMT Subject: CN=68638131-e032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:81:c1:38:5e:e2:10:27:a9:e4:3b:35:bf: da:0d:1a:8d:f3:d7:ee:fb:81:07:7b:08:55:23:99: ce:09:59:f5:0a:d7:24:9b:b7:c5:98:a8:af:6f:63: 60:d7:0e:ea:0b:3d:61:d6:9f:45:72:cc:20:c2:b3: 4a:20:86:be:77:9b:4f:15:20:bf:fd:b4:0e:aa:4d: fe:e0:17:1f:e0:0f:65:70:c0:52:26:2d:06:eb:f1: 6c:c7:5d:09:2f:34:a5:08:fc:1e:ce:08:5a:8f:b8: ca:f8:31:fc:89:57:48:b9:46:81:77:76:77:cd:e6: 0d:17:c9:b3:8e:61:b3:54:5e:36:f9:33:ee:8c:c5: d4:8f:fb:ce:71:68:fa:13:ab:09:bc:09:b3:79:26: b4:9b:b4:11:31:10:37:e2:bc:c2:40:8d:0f:74:80: cc:19:a3:c6:47:89:8f:8e:be:be:b8:b2:25:c3:2a: 3a:8f:f8:47:3c:2b:d4:80:5b:24:5f:05:36:dc:68: 61:ac:c9:0c:86:9c:ce:e1:32:bf:d5:09:22:3f:54: 2f:26:10:34:d8:de:30:f1:8f:4f:4f:ae:da:9c:7a: 5c:a3:a5:3f:85:76:c2:39:90:b9:56:fb:d6:cc:2e: 67:76:9d:36:0a:f6:e2:f2:36:d7:f3:b1:6f:94:ee: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:F6:A3:12:20:53:F9:19:F7:DC:FE:A8:B4:1B:40:58:49:D3:CF X509v3 Authority Key Identifier: keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2f:56:ba:d0:81:a9:54:dc:7d:94:77:e5:1d:a0:75:9f:e6: 34:45:fd:06:d1:ff:f9:e9:36:08:5b:81:1a:63:e9:51:2e:78: 7f:df:6f:72:82:e1:6e:0f:34:f7:91:89:4b:15:83:86:9a:d0: 58:d5:c5:b8:9e:1c:99:dd:be:4e:8a:8a:dc:37:26:94:8e:a4: 7b:59:7f:ba:30:d8:a5:a4:b6:61:49:84:81:ef:01:28:76:46: 4f:01:4b:a6:52:e6:e6:20:9e:be:ad:d3:36:4e:05:25:a4:00: 39:c2:b6:cc:51:2c:1e:15:c0:32:1a:36:d9:bf:9f:02:1d:5b: fa:de:7f:56:90:49:15:96:57:38:21:16:0f:72:50:ec:64:d8: fd:8b:8d:d3:8d:39:80:e0:84:e8:87:43:4e:5f:0f:84:de:23: ab:09:4e:de:8c:cf:35:71:ab:03:6b:8d:30:b4:cb:7f:1a:aa: 0c:21:f0:be:48:a3:03:0f:9e:30:28:7d:3b:12:ea:2c:d7:ad: f8:2f:59:8a:c7:8a:df:eb:44:61:f6:19:e1:22:7a:58:fa:1e: 85:fe:22:0e:7a:da:15:31:a7:b1:2e:5f:d7:c9:f1:3f:24:e3: 1d:c8:cc:f2:c9:c3:4d:21:05:a8:be:7e:c2:e6:4f:f8:bf:53: 44:84:45:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCQTAxMTAvBgNVBAUTKEFDRkNCMzFFMkJFMkFEM0QxMkIxQTc5MTAyRkNCNEZE NThCQjY2ODMwHhcNMjUwNzAxMDYzMzIxWhcNMjUwNzA4MDYzMzIxWjAYMRYwFAYD VQQDEw02ODYzODEzMS1lMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQGBwThe4hAnqeQ7Nb/aDRqN89fu+4EHewhVI5nOCVn1Ctckm7fFmKivb2Ng 1w7qCz1h1p9FcswgwrNKIIa+d5tPFSC//bQOqk3+4Bcf4A9lcMBSJi0G6/Fsx10J LzSlCPwezghaj7jK+DH8iVdIuUaBd3Z3zeYNF8mzjmGzVF42+TPujMXUj/vOcWj6 E6sJvAmzeSa0m7QRMRA34rzCQI0PdIDMGaPGR4mPjr6+uLIlwyo6j/hHPCvUgFsk XwU23GhhrMkMhpzO4TK/1QkiP1QvJhA02N4w8Y9PT67anHpco6U/hXbCOZC5VvvW zC5ndp02Cvbi8jbX87FvlO4bzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuB9qMS IFP5Gffc/qi0G0BYSdPPMB8GA1UdIwQYMBaAFKz8sx4r4q09ErGnkQL8tP1Yu2aD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JBMC9GNzM4M0Y4NDM4 RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJUMFNzYWVSQXZ5MF9WaTda b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JBMC9GNzM4M0Y4NDM4RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJU MFNzYWVSQXZ5MF9WaTdab00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiL1a60IGpVNx9lHflHaB1n+Y0Rf0G0f/56TYIW4EaY+lRLnh/329y guFuDzT3kYlLFYOGmtBY1cW4nhyZ3b5OiorcNyaUjqR7WX+6MNilpLZhSYSB7wEo dkZPAUumUubmIJ6+rdM2TgUlpAA5wrbMUSweFcAyGjbZv58CHVv63n9WkEkVllc4 IRYPclDsZNj9i43TjTmA4IToh0NOXw+E3iOrCU7ejM81casDa40wtMt/GqoMIfC+ SKMDD54wKH07Euos1634L1mKx4rf60Rh9hnhInpY+h6F/iIOetoVMaexLl/XyfE/ JOMdyMzyycNNIQWovn7C5k/4v1NEhEUT -----END CERTIFICATE-----Generated at Wed Jul 2 12:17:25 2025 by rpki-client