$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: g89NFqulmESAzfcZkingAeIx/4bf2SnWfG2R1usGRUA= Subject key identifier: C8:85:71:19:48:C7:F8:F2:81:BA:8E:42:1C:FA:17:00:DE:ED:68:18 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 35 Signing time: Fri 13 Jun 2025 06:33:19 +0000 Manifest this update: Fri 13 Jun 2025 06:33:18 +0000 Manifest next update: Fri 20 Jun 2025 06:33:18 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: CspeLaSQD2JuJvHfeubcebl/OxWVC4t0Ju9TovxyljQ=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Jun 13 06:33:18 2025 GMT Not After : Jun 20 06:33:18 2025 GMT Subject: CN=684bc62f-418d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:62:54:6b:55:42:f4:ec:b8:30:ee:61:8c: 62:21:5e:d8:91:5d:72:93:73:3e:c6:74:9d:ce:05: 92:a0:ec:b7:8b:25:56:9d:df:a0:d2:b3:cc:20:c2: d4:b7:c4:c9:b9:e6:b0:95:f9:dc:cb:ea:8d:82:70: 3d:3a:19:f8:2b:de:02:03:ec:b3:07:c6:68:17:0a: 1a:1d:82:3e:09:ce:1c:21:63:0a:b9:5c:6b:76:62: 44:9e:8f:61:a7:b0:f3:8c:fb:71:db:3a:53:da:da: 9d:90:9c:69:5e:3b:97:8e:55:e7:9d:9d:c5:0f:a6: 19:20:cf:dc:03:68:38:22:57:36:99:ef:18:e8:7a: 13:09:e0:48:c7:45:c0:ad:fb:3b:be:bd:83:be:46: 5f:35:b9:fd:7b:bc:0a:49:30:28:91:74:ec:e6:9c: 49:65:da:26:d2:45:70:ae:82:d1:01:ca:bf:53:b4: 0f:90:7d:32:c7:f2:df:6e:68:c1:c0:89:db:a8:b1: bc:ef:df:31:19:fa:7f:97:7c:ca:32:bc:d2:a3:b4: c1:4c:91:f3:0d:2a:46:79:d0:a8:b5:18:ab:1d:a0: e1:db:25:ed:a5:c5:28:24:e3:02:37:a1:98:ce:43: 2e:6d:cb:a8:10:88:f7:2c:80:25:f5:97:d7:88:9a: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:85:71:19:48:C7:F8:F2:81:BA:8E:42:1C:FA:17:00:DE:ED:68:18 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:5f:56:36:fd:1a:5a:93:53:a2:98:cc:f5:a3:1b:7f:ba: 35:96:2a:83:6a:6c:ca:d6:8c:aa:70:d2:46:42:1e:ea:4c:d2: 7b:f8:60:74:01:f2:15:a6:47:13:42:a9:4e:cb:93:ae:f8:67: b7:d4:51:54:c1:2e:79:83:5f:f6:c3:de:0c:de:2d:8c:16:61: a5:e2:f0:23:8d:60:94:fe:bd:ee:3f:a4:41:b9:c9:a8:2b:ea: 66:01:8a:eb:80:51:f2:c6:94:60:9e:2d:65:8d:0f:f5:f9:08: be:5d:09:f7:2f:85:f6:00:9c:bf:2b:5c:47:63:e0:80:b1:c5: b0:bb:d9:82:86:05:58:08:a1:a5:cd:d4:c1:d0:3e:9a:2b:d0: 1a:b0:fc:00:2a:52:9c:bd:b3:f3:cb:ab:06:18:34:11:30:3c: 97:e7:99:1b:a0:72:44:b6:d1:48:71:f6:e9:0f:09:c3:69:81: 71:90:4b:76:62:8e:b1:60:45:c8:65:74:ce:81:4d:45:d7:e8: cd:bc:7b:9f:0b:d0:a8:53:49:28:2b:3a:d8:f4:69:f3:7f:48: 83:20:c7:4c:f5:8e:ea:74:48:f6:29:97:89:06:27:83:fa:8d: a6:e7:4e:80:8f:9c:03:89:5c:60:b5:d5:cc:75:3d:e0:de:b4: 29:d1:40:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA2MTMwNjMzMThaFw0yNTA2MjAwNjMzMThaMBgxFjAUBgNV BAMTDTY4NGJjNjJmLTQxOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDomWJUa1VC9Oy4MO5hjGIhXtiRXXKTcz7GdJ3OBZKg7LeLJVad36DSs8wgwtS3 xMm55rCV+dzL6o2CcD06Gfgr3gID7LMHxmgXChodgj4JzhwhYwq5XGt2YkSej2Gn sPOM+3HbOlPa2p2QnGleO5eOVeedncUPphkgz9wDaDgiVzaZ7xjoehMJ4EjHRcCt +zu+vYO+Rl81uf17vApJMCiRdOzmnEll2ibSRXCugtEByr9TtA+QfTLH8t9uaMHA iduosbzv3zEZ+n+XfMoyvNKjtMFMkfMNKkZ50Ki1GKsdoOHbJe2lxSgk4wI3oZjO Qy5ty6gQiPcsgCX1l9eImjk9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyIVxGUjH +PKBuo5CHPoXAN7taBgwHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWdX1Y2/Rpak1OimMz1oxt/ujWWKoNqbMrWjKpw0kZCHupM0nv4YHQB 8hWmRxNCqU7Lk674Z7fUUVTBLnmDX/bD3gzeLYwWYaXi8CONYJT+ve4/pEG5yagr 6mYBiuuAUfLGlGCeLWWND/X5CL5dCfcvhfYAnL8rXEdj4ICxxbC72YKGBVgIoaXN 1MHQPpor0Bqw/AAqUpy9s/PLqwYYNBEwPJfnmRugckS20Uhx9ukPCcNpgXGQS3Zi jrFgRchldM6BTUXX6M28e58L0KhTSSgrOtj0afN/SIMgx0z1jup0SPYpl4kGJ4P6 jabnToCPnAOJXGC11cx1PeDetCnRQJI= -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:23 2025 by rpki-client