$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: L3IF+VxvnJe7EEB2AC9fokfETetpST6sSC1H0CNjoSY= Subject key identifier: 72:B3:F0:1B:01:98:8E:DC:BD:48:DE:3C:BA:49:E0:FA:D6:4F:E3:BA Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 08 Signing time: Fri 25 Apr 2025 07:09:08 +0000 Manifest this update: Fri 25 Apr 2025 07:09:07 +0000 Manifest next update: Fri 02 May 2025 07:09:07 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: WQl/e+u6SoL+W+Q6Z5znuATVfW9xcwN1V0U/NhGRO/Y=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Apr 25 07:09:07 2025 GMT Not After : May 2 07:09:07 2025 GMT Subject: CN=680b3513-a450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:08:35:39:27:1f:5a:6d:8b:c9:74:1d:d9: 28:68:91:78:fd:f0:f0:38:b2:c3:2d:1d:5c:7a:56: 7a:f0:d4:36:f3:7d:2f:fe:a7:07:b8:4a:35:12:76: 64:bf:ac:81:c1:8b:ff:a3:21:25:f4:fd:03:b1:0d: 5c:f9:3d:a7:d8:af:ad:58:9c:69:95:bc:2e:44:e7: 1d:3a:f8:61:4b:fc:0f:cb:b5:29:7f:25:90:9d:18: 66:5f:03:15:ab:d2:54:85:75:73:83:a2:a1:56:ce: 87:6f:3e:4c:14:42:e2:ac:b6:cc:84:eb:5d:de:7e: bb:b0:06:55:80:27:10:6b:df:fe:95:e7:11:b1:c6: 64:07:68:a8:f3:89:eb:55:c1:36:47:fc:da:d9:a6: 51:56:2c:59:9a:61:f5:99:69:5d:bb:0a:58:a9:78: 96:39:40:51:2f:0e:50:0a:6e:2e:78:7b:21:9f:28: a1:4b:62:27:06:b3:5c:16:29:45:8b:35:3f:de:d9: d8:07:bc:84:7b:b1:e5:bf:40:9b:ac:33:ff:81:63: 0a:ac:0b:9a:1c:a2:25:64:e8:0b:53:5a:94:f0:7c: ac:70:87:87:62:03:96:ec:62:03:8b:f0:3b:c8:94: 64:2e:2e:6d:c1:13:ef:6a:d3:23:c0:6c:0f:f8:f0: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B3:F0:1B:01:98:8E:DC:BD:48:DE:3C:BA:49:E0:FA:D6:4F:E3:BA X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:30:ca:a9:88:6e:a8:f2:ee:84:1e:18:bd:39:01:34:f4:23: fa:6e:67:85:3b:43:91:52:ff:63:43:59:07:3e:6c:c3:ec:cf: d1:7f:62:1b:4d:79:06:4d:07:00:5d:fb:11:ca:5b:2b:b9:fc: 86:5f:9b:04:61:b4:2d:94:ee:fe:61:d7:39:9e:2d:a7:bc:ff: ff:e9:6f:79:d7:31:0b:4e:a9:b2:e4:5f:d9:1e:29:de:84:a1: f9:35:a3:b7:f4:3c:d5:f7:71:27:6f:64:76:0e:26:c6:40:0f: 9b:28:d1:8d:4f:ac:46:4a:b3:87:45:1c:5b:2c:36:63:d1:75: 3b:3c:07:54:9f:da:9c:52:8d:67:a0:7b:b3:c2:1b:63:90:e3: 5c:2d:93:bc:e4:37:54:86:3e:df:5e:85:ec:74:dd:78:0e:3b: 42:52:9a:e4:b5:12:11:a0:63:53:c5:da:79:7d:ad:4a:a7:e0: b1:f0:bf:89:b1:60:16:ee:68:23:3b:28:40:21:19:66:74:57: 13:a9:38:00:43:8e:32:1d:11:4d:7e:2b:dd:40:29:c3:84:5b: 9e:25:4d:ac:26:2a:1c:ed:c4:c2:ed:3b:b1:d3:a4:b3:7e:4c: 7b:b2:d6:e7:26:1d:c0:12:c7:44:5e:b6:20:df:ea:94:68:5b: 48:38:69:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA0MjUwNzA5MDdaFw0yNTA1MDIwNzA5MDdaMBgxFjAUBgNV BAMTDTY4MGIzNTEzLWE0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7rQg1OScfWm2LyXQd2ShokXj98PA4ssMtHVx6Vnrw1DbzfS/+pwe4SjUSdmS/ rIHBi/+jISX0/QOxDVz5PafYr61YnGmVvC5E5x06+GFL/A/LtSl/JZCdGGZfAxWr 0lSFdXODoqFWzodvPkwUQuKstsyE613efruwBlWAJxBr3/6V5xGxxmQHaKjzietV wTZH/NrZplFWLFmaYfWZaV27ClipeJY5QFEvDlAKbi54eyGfKKFLYicGs1wWKUWL NT/e2dgHvIR7seW/QJusM/+BYwqsC5ocoiVk6AtTWpTwfKxwh4diA5bsYgOL8DvI lGQuLm3BE+9q0yPAbA/48BYjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcrPwGwGY jty9SN48ukng+tZP47owHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0wyqmIbqjy7oQeGL05ATT0I/puZ4U7Q5FS/2NDWQc+bMPsz9F/YhtN eQZNBwBd+xHKWyu5/IZfmwRhtC2U7v5h1zmeLae8///pb3nXMQtOqbLkX9keKd6E ofk1o7f0PNX3cSdvZHYOJsZAD5so0Y1PrEZKs4dFHFssNmPRdTs8B1Sf2pxSjWeg e7PCG2OQ41wtk7zkN1SGPt9ehex03XgOO0JSmuS1EhGgY1PF2nl9rUqn4LHwv4mx YBbuaCM7KEAhGWZ0VxOpOABDjjIdEU1+K91AKcOEW54lTawmKhztxMLtO7HTpLN+ THuy1ucmHcASx0RetiDf6pRoW0g4adc= -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:12 2025 by rpki-client