$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: w+XpJWBcbh7DtYK6/f9gy6Knehrdmu5U6tvrupZxIaY= Subject key identifier: 86:F1:E0:F7:A2:B6:AE:27:00:A3:72:80:F8:9F:36:D2:C4:D5:53:2D Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 053C Signing time: Sat 14 Jun 2025 23:23:24 +0000 Manifest this update: Sat 14 Jun 2025 23:23:23 +0000 Manifest next update: Sat 21 Jun 2025 23:23:23 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: z9YxW/GYb81le3FxD13j8LYEmJfRMn4vA+qtoPLuk0A=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: M+wNfsm6YQmLCJcAzey1G7TcdY1od2Gihz4uSm0Idd0=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: XeS+UNfddkVQ+DW6xIplHBmjPx6deLGv6cSwFbKYRAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Jun 14 23:23:23 2025 GMT Not After : Jun 21 23:23:23 2025 GMT Subject: CN=684e046c-62a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:42:e9:8a:02:ea:83:0a:26:3b:56:24:ae: fc:de:3d:b0:8a:ea:cc:6d:c5:b6:d9:08:4c:7f:c5: a9:e8:52:07:10:04:48:e1:1c:be:91:bf:5d:59:2a: 80:79:32:3c:49:d6:e0:3f:0b:84:9b:be:93:a0:53: e8:4e:93:d3:b4:46:54:c4:5d:7a:e9:5e:83:e9:b5: 7b:2e:16:1e:2d:66:5e:86:2c:a5:f7:d5:e1:4f:a2: 4e:b1:b4:65:93:a9:57:90:04:96:69:ad:6f:30:c5: b6:67:36:82:4d:58:98:74:cd:fc:99:c6:de:f7:8f: 9d:5d:b9:9b:82:25:00:18:d2:b3:54:a0:2b:7b:f5: 37:6c:e5:89:cc:18:2e:20:cc:ae:a6:28:31:b7:f4: 27:f7:bf:a6:2a:77:a1:71:55:b9:ee:d8:8c:0b:00: 3f:72:88:c3:4d:f9:09:5a:a7:75:60:9f:fd:88:e6: 29:81:ae:36:26:ef:94:d2:78:e2:e1:18:6c:78:e7: 5f:9a:5c:47:91:55:37:34:3d:3f:b3:9e:be:00:57: 41:da:e1:34:e2:af:e1:83:d0:33:64:8a:67:6a:f4: 29:f6:52:dd:fd:10:27:5d:fe:04:93:8e:29:82:76: 75:b7:81:f1:bc:fe:4a:67:af:90:c7:8a:1a:65:b9: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:E0:F7:A2:B6:AE:27:00:A3:72:80:F8:9F:36:D2:C4:D5:53:2D X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ec:93:44:52:ab:cc:f7:90:52:5c:85:80:b6:18:92:8a:a4: 9f:93:1e:00:28:a1:3d:d1:c4:16:67:b6:93:1e:08:01:39:53: 89:a6:8a:1b:89:12:4b:08:08:ba:79:d5:ee:55:11:c0:1b:2f: 89:e7:dd:47:dd:89:7e:d0:f4:4a:d6:64:72:86:d3:a3:df:96: 47:e9:ca:fb:7a:c5:10:c6:30:59:7c:11:c4:ca:92:3e:9c:dc: 6c:13:4d:2c:c4:25:ba:a5:a4:af:77:50:f3:2a:45:4d:83:b1: a6:8f:da:4a:92:46:46:e3:1f:4e:45:cb:e5:60:2c:bd:e9:81: 04:7d:5c:26:73:28:b7:9b:59:69:98:1b:50:18:2a:44:15:86: 9d:ab:a4:6a:1a:d2:8e:ce:63:9a:74:34:e0:1b:ee:df:f6:5b: 20:51:b1:8b:8e:a8:af:29:ef:c2:d0:33:3f:4a:f1:ac:a9:e9: 2f:9d:ac:16:22:bf:e0:f9:a0:04:9a:0c:e7:e7:d4:3a:33:22: 41:c8:b1:5a:30:2e:48:03:7f:7e:3d:ac:64:3b:66:59:59:38: c3:e3:4b:f2:ec:c9:20:d9:cc:ab:30:42:6f:ae:67:cf:18:48: b4:59:be:66:87:50:b9:18:89:30:e7:fa:81:72:b6:8e:4d:86: 95:26:87:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjUwNjE0MjMyMzIzWhcNMjUwNjIxMjMyMzIzWjAYMRYwFAYD VQQDEw02ODRlMDQ2Yy02MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/FC6YoC6oMKJjtWJK783j2wiurMbcW22QhMf8Wp6FIHEARI4Ry+kb9dWSqA eTI8SdbgPwuEm76ToFPoTpPTtEZUxF166V6D6bV7LhYeLWZehiyl99XhT6JOsbRl k6lXkASWaa1vMMW2ZzaCTViYdM38mcbe94+dXbmbgiUAGNKzVKAre/U3bOWJzBgu IMyupigxt/Qn97+mKnehcVW57tiMCwA/cojDTfkJWqd1YJ/9iOYpga42Ju+U0nji 4RhseOdfmlxHkVU3ND0/s56+AFdB2uE04q/hg9AzZIpnavQp9lLd/RAnXf4Ek44p gnZ1t4HxvP5KZ6+Qx4oaZbleqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbx4Pei tq4nAKNygPifNtLE1VMtMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC07JNEUqvM95BSXIWAthiSiqSfkx4AKKE90cQWZ7aTHggBOVOJpoob iRJLCAi6edXuVRHAGy+J591H3Yl+0PRK1mRyhtOj35ZH6cr7esUQxjBZfBHEypI+ nNxsE00sxCW6paSvd1DzKkVNg7Gmj9pKkkZG4x9ORcvlYCy96YEEfVwmcyi3m1lp mBtQGCpEFYadq6RqGtKOzmOadDTgG+7f9lsgUbGLjqivKe/C0DM/SvGsqekvnawW Ir/g+aAEmgzn59Q6MyJByLFaMC5IA39+PaxkO2ZZWTjD40vy7Mkg2cyrMEJvrmfP GEi0Wb5mh1C5GIkw5/qBcraOTYaVJoeu -----END CERTIFICATE-----Generated at Mon Jun 16 14:44:53 2025 by rpki-client