$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: uFz3Pmwy5T/X+Bd1VnLROQ3vx23bKSubMSV1KfHasXo= Subject key identifier: 67:02:70:16:0C:89:FE:52:00:58:EF:D6:94:64:51:06:0F:35:AB:9C Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 53 Signing time: Mon 11 Aug 2025 07:32:46 +0000 Manifest this update: Mon 11 Aug 2025 07:32:45 +0000 Manifest next update: Mon 18 Aug 2025 07:32:45 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: cfD7R2Cs9KKO3RXXMhXVucYS2nnIW/C6C4wBywgcIh8=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Aug 11 07:32:45 2025 GMT Not After : Aug 18 07:32:45 2025 GMT Subject: CN=68999c9d-7a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:6d:c0:f0:08:a6:b4:c2:1d:ae:f9:29:30: 0c:f2:37:0b:24:e7:e6:e9:f3:b2:29:39:22:05:2a: 44:c9:0f:b9:93:84:14:3c:ae:5e:23:c0:01:b4:58: 83:af:5f:9b:d1:fb:b6:79:93:17:37:19:21:d5:c5: 3d:89:2f:48:ac:f1:46:f5:d0:6e:5c:27:85:51:21: ad:6d:51:97:fa:09:eb:4a:c2:da:66:50:ea:0e:7a: c1:0c:0d:89:0e:9a:94:d2:04:78:32:9a:fa:7a:24: 20:e4:a4:3c:87:4e:75:7e:df:f6:1e:b6:64:88:d5: 1a:db:92:39:a7:68:b4:79:33:c8:80:01:5a:1b:b9: e0:5c:d3:b7:ca:cb:3f:41:29:c5:26:a2:fd:11:b5: bd:81:70:d9:90:a3:69:e8:76:7a:cb:72:1c:29:b7: 27:d3:45:64:6f:43:b4:e8:1b:de:f1:e5:6e:56:ff: cd:e8:3c:ef:f8:70:e6:16:a0:e1:a4:94:14:26:04: 92:4c:a5:93:58:88:70:f8:5b:7b:26:38:41:86:ae: 8e:47:5a:1b:f5:95:85:1e:cf:ed:6a:c9:a6:e5:e3: 95:c0:ba:dc:e5:9c:4b:8e:6d:87:9c:45:01:fa:6e: 75:3c:1b:4c:4b:85:e2:98:0c:a5:04:cd:c4:6c:92: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:02:70:16:0C:89:FE:52:00:58:EF:D6:94:64:51:06:0F:35:AB:9C X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b1:1f:ec:38:8a:55:0d:fd:e2:6d:00:e3:ba:db:db:7a:3c: 3c:49:ef:9f:a8:36:ab:00:c3:9a:f3:e4:00:ca:9b:66:5d:46: 8b:b9:b2:01:b2:ff:58:83:76:75:0b:eb:03:d5:ce:b4:d0:8a: 26:88:0f:21:af:50:ff:60:cd:bc:ea:15:05:ed:5e:63:c8:67: 0e:4f:63:4e:c9:30:e0:69:11:23:5c:c6:00:c5:50:97:c3:a0: cf:62:25:70:49:7a:7f:e9:b2:6b:e8:65:8e:99:6f:7b:53:d6: 8d:cd:22:2b:79:6c:2f:59:0d:ef:9f:64:8f:73:48:f3:b9:06: e7:34:f9:8d:c3:85:17:e2:7d:05:aa:37:11:95:8c:67:99:a7: 20:3e:47:1b:c4:55:b6:0f:2f:4b:84:e7:74:6f:77:0a:ca:e1: a0:5a:61:3e:0a:0d:b6:3d:30:32:39:c0:42:92:4e:6b:24:7d: ee:28:0e:4d:e4:cd:c4:bf:62:73:02:67:00:3e:9f:c3:82:0e: aa:10:c0:94:56:fd:83:bf:87:54:2a:ff:b2:88:55:78:02:25: 1d:b1:25:44:f7:e1:99:90:03:3c:ef:54:74:20:1c:79:c6:40: 84:14:d0:4e:6b:c6:62:43:2d:e2:0f:f2:69:64:75:76:d7:ed: a6:8a:6b:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA4MTEwNzMyNDVaFw0yNTA4MTgwNzMyNDVaMBgxFjAUBgNV BAMTDTY4OTk5YzlkLTdhNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCucG3A8AimtMIdrvkpMAzyNwsk5+bp87IpOSIFKkTJD7mThBQ8rl4jwAG0WIOv X5vR+7Z5kxc3GSHVxT2JL0is8Ub10G5cJ4VRIa1tUZf6CetKwtpmUOoOesEMDYkO mpTSBHgymvp6JCDkpDyHTnV+3/YetmSI1RrbkjmnaLR5M8iAAVobueBc07fKyz9B KcUmov0Rtb2BcNmQo2nodnrLchwptyfTRWRvQ7ToG97x5W5W/83oPO/4cOYWoOGk lBQmBJJMpZNYiHD4W3smOEGGro5HWhv1lYUez+1qyabl45XAutzlnEuObYecRQH6 bnU8G0xLheKYDKUEzcRskhZzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZwJwFgyJ /lIAWO/WlGRRBg81q5wwHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6xH+w4ilUN/eJtAOO629t6PDxJ75+oNqsAw5rz5ADKm2ZdRou5sgGy /1iDdnUL6wPVzrTQiiaIDyGvUP9gzbzqFQXtXmPIZw5PY07JMOBpESNcxgDFUJfD oM9iJXBJen/psmvoZY6Zb3tT1o3NIit5bC9ZDe+fZI9zSPO5Buc0+Y3DhRfifQWq NxGVjGeZpyA+RxvEVbYPL0uE53RvdwrK4aBaYT4KDbY9MDI5wEKSTmskfe4oDk3k zcS/YnMCZwA+n8OCDqoQwJRW/YO/h1Qq/7KIVXgCJR2xJUT34ZmQAzzvVHQgHHnG QIQU0E5rxmJDLeIP8mlkdXbX7aaKa3c= -----END CERTIFICATE-----Generated at Tue Aug 12 13:55:10 2025 by rpki-client