$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: IBjH2X8VbG3z87vUtsTqEhJ1p2fLEGnW7U/Sgt7DMrI= Subject key identifier: 4A:33:B3:8A:D1:E6:D6:5B:36:8E:CC:C9:47:B1:23:08:90:B5:39:3D Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09DD Signing time: Sat 14 Jun 2025 19:43:52 +0000 Manifest this update: Sat 14 Jun 2025 19:43:51 +0000 Manifest next update: Sat 21 Jun 2025 19:43:51 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: v6Timd1TqpB+YyQZemrcJj84qj7Ty5/w8NykDIqVzTc=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Jun 14 19:43:51 2025 GMT Not After : Jun 21 19:43:51 2025 GMT Subject: CN=684dd0f8-8097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:22:ba:44:ed:f2:d7:3f:d6:1d:0d:75:43: 58:7f:16:d7:71:5e:15:2c:97:0a:03:2f:36:c4:d3: a3:44:5f:a1:d3:30:0c:c0:cf:af:dd:ba:3b:5b:27: 3a:c5:f8:68:67:81:b3:9d:d0:28:ae:ad:12:3d:45: 07:3c:80:e6:06:84:2b:13:90:07:9e:24:f0:56:a4: 7c:43:df:77:d4:48:ba:88:4e:a5:8f:08:5d:e0:3b: 82:ba:87:db:49:38:51:79:4e:c0:50:c1:3e:ac:a0: 35:0d:0c:17:79:17:7c:9e:e9:a3:09:93:43:4e:d5: 57:00:2b:07:ce:e5:16:bc:b4:b8:5b:e4:60:ea:fd: a0:b4:40:49:07:9c:16:00:46:a2:1c:0f:af:b7:a2: 44:7f:5f:46:6c:51:c6:14:84:81:81:89:a3:de:d0: 59:38:6c:2a:34:4d:7d:68:54:19:5d:c2:ad:65:9d: e2:29:b9:e3:25:d4:9b:31:d7:26:d9:58:ee:94:28: 1b:b3:31:e9:db:e5:7f:b7:f9:64:4e:e6:61:cb:c6: 91:fb:7d:8e:71:ca:c0:fa:41:2a:ed:45:24:96:d4: e4:e6:dd:71:12:e3:3a:21:27:bd:44:59:53:f4:97: 94:09:29:c7:6d:6f:2c:f4:d7:55:3c:fe:cf:83:46: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:B3:8A:D1:E6:D6:5B:36:8E:CC:C9:47:B1:23:08:90:B5:39:3D X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3d:90:25:2d:ee:a8:c2:0f:ec:01:64:14:11:55:c9:4a:9f: 31:f7:2f:4d:b4:eb:b4:b1:a9:80:78:ad:91:6b:e8:dd:a3:27: 92:28:5c:77:65:d7:c9:1b:f5:b0:d0:80:15:b0:74:e9:60:ab: 12:21:dc:92:3c:53:f2:08:12:e5:67:8e:8b:c3:1d:6d:4c:4c: 40:b2:f9:24:35:42:01:5b:55:2d:d2:ff:74:94:ca:a5:d2:f9: d9:d3:c6:87:20:1f:db:1f:b1:47:08:84:c3:f3:fa:b7:4b:d9: 0b:02:f7:48:f6:86:8f:a3:72:3d:f6:14:3e:e3:64:af:f4:ce: dd:42:bb:8e:3d:a0:03:0a:7a:60:0a:f7:bb:63:94:84:6d:bf: c9:e1:23:a1:5d:8b:4d:13:1e:77:3d:ba:6a:95:4c:ca:08:32: 5f:1b:8c:02:36:b5:e4:3a:80:65:86:77:a1:6b:7b:7f:2b:7b: c9:19:d6:c2:d4:be:85:6c:d1:fd:e0:1f:b1:2e:4e:cf:40:09: 41:f5:63:57:fe:37:73:39:b1:6a:0f:fd:95:f0:d4:f8:0f:38: fc:30:b8:49:99:9b:09:2f:31:a0:1c:ff:d0:d0:81:fc:1a:a7: e7:b6:3d:94:7b:44:57:5b:a6:3f:70:29:ac:75:45:1b:2f:f4: 19:9c:22:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwNjE0MTk0MzUxWhcNMjUwNjIxMTk0MzUxWjAYMRYwFAYD VQQDEw02ODRkZDBmOC04MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1siukTt8tc/1h0NdUNYfxbXcV4VLJcKAy82xNOjRF+h0zAMwM+v3bo7Wyc6 xfhoZ4GzndAorq0SPUUHPIDmBoQrE5AHniTwVqR8Q9931Ei6iE6ljwhd4DuCuofb SThReU7AUME+rKA1DQwXeRd8numjCZNDTtVXACsHzuUWvLS4W+Rg6v2gtEBJB5wW AEaiHA+vt6JEf19GbFHGFISBgYmj3tBZOGwqNE19aFQZXcKtZZ3iKbnjJdSbMdcm 2VjulCgbszHp2+V/t/lkTuZhy8aR+32OccrA+kEq7UUkltTk5t1xEuM6ISe9RFlT 9JeUCSnHbW8s9NdVPP7Pg0b0LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEozs4rR 5tZbNo7MyUexIwiQtTk9MB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaPZAlLe6owg/sAWQUEVXJSp8x9y9NtOu0samAeK2Ra+jdoyeSKFx3 ZdfJG/Ww0IAVsHTpYKsSIdySPFPyCBLlZ46Lwx1tTExAsvkkNUIBW1Ut0v90lMql 0vnZ08aHIB/bH7FHCITD8/q3S9kLAvdI9oaPo3I99hQ+42Sv9M7dQruOPaADCnpg Cve7Y5SEbb/J4SOhXYtNEx53PbpqlUzKCDJfG4wCNrXkOoBlhneha3t/K3vJGdbC 1L6FbNH94B+xLk7PQAlB9WNX/jdzObFqD/2V8NT4Dzj8MLhJmZsJLzGgHP/Q0IH8 Gqfntj2Ue0RXW6Y/cCmsdUUbL/QZnCI5 -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:34 2025 by rpki-client