$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: s0gXYXZGO6NMHE0xAGYk5MQ8F6SioG9yV+QqfvxltXI= Subject key identifier: F5:FC:39:57:0C:AC:E3:C6:D7:08:41:42:81:79:4B:E4:4F:40:B5:64 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 3A Signing time: Tue 05 Aug 2025 08:11:24 +0000 Manifest this update: Tue 05 Aug 2025 08:11:23 +0000 Manifest next update: Tue 12 Aug 2025 08:11:23 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: ulkSGt18wfnTtO6zB+BzHvsUecMtMWjYdyKEWhPRwjI=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Aug 5 08:11:23 2025 GMT Not After : Aug 12 08:11:23 2025 GMT Subject: CN=6891bcab-6ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:4f:2a:97:7f:16:fc:39:d2:e3:02:40:aa: 5c:8e:00:ef:9d:fa:d7:e1:26:71:e9:bc:cc:92:8e: 41:b7:e5:4e:38:3e:dd:a8:a2:81:73:02:f2:1e:eb: 0f:93:61:b9:77:98:51:a6:38:69:7e:84:b1:d4:87: 96:d8:be:a1:99:6b:47:da:c8:61:d6:f9:a8:e8:05: a6:2b:ff:72:85:04:54:47:0e:7c:fc:57:4e:cb:ca: 63:a4:fe:f4:91:01:e1:9f:57:54:56:79:8c:f3:6a: 8b:fa:40:08:52:58:1c:8d:db:dd:74:67:6d:fa:a5: 83:5f:ad:e4:65:cb:d1:42:07:dc:9c:18:49:fa:84: a9:ef:80:af:b7:fa:2c:b1:16:9f:c6:20:12:42:77: 08:4e:ee:e4:2a:0d:1d:19:a5:91:92:1c:36:6f:98: d7:42:54:42:04:7d:86:40:91:b9:98:b1:be:9d:43: cd:dc:d9:20:0f:2a:f5:0b:30:5e:96:4d:bf:e8:4a: ed:e4:ea:7b:04:9d:b2:a3:af:6f:eb:cd:d3:f5:05: 0d:3c:ef:b4:43:cd:92:fd:51:c1:02:38:e0:4f:c0: d1:98:42:14:fb:1a:1b:ef:af:fb:50:bf:29:c9:c6: 91:bd:30:31:e2:23:35:18:2e:e1:5f:75:e6:cb:09: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FC:39:57:0C:AC:E3:C6:D7:08:41:42:81:79:4B:E4:4F:40:B5:64 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:78:ff:92:1c:c4:97:15:f6:56:f9:19:fb:c2:fe:49:3b:1a: 0e:37:e5:67:e6:e6:cb:24:10:5a:62:26:6a:ef:6f:82:8b:f9: ce:d2:91:12:51:46:ad:db:4b:a6:15:63:c8:a6:82:c1:3e:76: 8d:68:80:af:2a:57:97:7b:dc:69:fa:32:fd:f0:ec:ed:e7:0f: 14:e7:80:cf:c7:53:f7:d6:c8:33:51:f5:54:0d:32:02:79:f4: a8:d5:c5:9c:7c:9e:4a:41:dc:1a:d8:b6:92:32:f7:a0:48:78: 42:01:6b:0c:f3:e7:73:e2:55:02:7b:e9:d6:fb:2e:15:ae:4f: da:95:4d:27:dd:e6:73:89:b4:d8:8c:b6:56:36:4f:40:97:53: 9f:90:ea:fe:f5:3b:c9:f7:c2:07:03:2e:e1:05:18:63:05:7c: 45:f4:73:e8:bd:d1:35:b5:02:11:0f:ed:68:c0:f2:28:aa:65: 3f:7a:e0:af:e3:ba:4b:67:26:86:47:d8:3f:c1:ca:bb:3b:f9: 31:0a:f8:52:8e:6e:8c:0d:16:de:2c:ac:8d:44:56:15:d1:42: 51:0a:c8:64:44:f8:74:05:74:ae:ed:c1:70:95:85:8f:81:86: 2d:18:ef:a6:75:ea:2a:09:1b:b5:ab:05:6e:48:6b:be:75:98: c1:68:f8:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA4MDUwODExMjNaFw0yNTA4MTIwODExMjNaMBgxFjAUBgNV BAMTDTY4OTFiY2FiLTZjZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSfE8ql38W/DnS4wJAqlyOAO+d+tfhJnHpvMySjkG35U44Pt2oooFzAvIe6w+T Ybl3mFGmOGl+hLHUh5bYvqGZa0fayGHW+ajoBaYr/3KFBFRHDnz8V07LymOk/vSR AeGfV1RWeYzzaov6QAhSWByN2910Z236pYNfreRly9FCB9ycGEn6hKnvgK+3+iyx Fp/GIBJCdwhO7uQqDR0ZpZGSHDZvmNdCVEIEfYZAkbmYsb6dQ83c2SAPKvULMF6W Tb/oSu3k6nsEnbKjr2/rzdP1BQ0877RDzZL9UcECOOBPwNGYQhT7Ghvvr/tQvynJ xpG9MDHiIzUYLuFfdebLCYTFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9fw5Vwys 48bXCEFCgXlL5E9AtWQwHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFR4/5IcxJcV9lb5GfvC/kk7Gg435Wfm5sskEFpiJmrvb4KL+c7SkRJR Rq3bS6YVY8imgsE+do1ogK8qV5d73Gn6Mv3w7O3nDxTngM/HU/fWyDNR9VQNMgJ5 9KjVxZx8nkpB3BrYtpIy96BIeEIBawzz53PiVQJ76db7LhWuT9qVTSfd5nOJtNiM tlY2T0CXU5+Q6v71O8n3wgcDLuEFGGMFfEX0c+i90TW1AhEP7WjA8iiqZT964K/j uktnJoZH2D/Byrs7+TEK+FKObowNFt4srI1EVhXRQlEKyGRE+HQFdK7twXCVhY+B hi0Y76Z16ioJG7WrBW5Ia751mMFo+CQ= -----END CERTIFICATE-----Generated at Thu Aug 7 02:01:33 2025 by rpki-client