$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: SCl3BVDTigkrK3rgMxYY1yQLUm7naa4d/5lOZmagqf8= Subject key identifier: 8E:7A:A3:E8:8C:C3:1B:68:34:3C:86:3C:88:27:82:46:91:92:D6:8A Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 5D Signing time: Sun 15 Jun 2025 06:13:48 +0000 Manifest this update: Sun 15 Jun 2025 06:13:48 +0000 Manifest next update: Sun 22 Jun 2025 06:13:48 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: WPK4JYLIQcK4xKk75niEedXMzrpOjL5pKEzCA8XOv6A=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: oBdfX7J4SfTWAha0J5te4TT+MMNp1UK2JxnYA8w+Btw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: Jun 15 06:13:48 2025 GMT Not After : Jun 22 06:13:48 2025 GMT Subject: CN=684e649c-c856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:64:df:ec:63:56:dd:9d:72:f1:a5:c1:fe:a2: 44:ef:4d:39:b9:a0:5d:d3:1d:47:e0:a1:a1:7e:9a: b2:d0:72:35:01:dc:51:0a:bb:4d:3e:d3:00:26:e1: 6a:8b:66:45:54:9f:32:11:ae:bb:43:1c:29:1b:f5: 27:47:9b:cc:eb:ca:47:f1:4d:05:c2:a4:d1:2c:1a: df:2c:a8:a7:48:b5:ab:15:14:38:5d:14:4f:8c:14: 5e:57:3f:5d:3a:c1:72:d1:81:a1:06:b4:1d:73:92: 87:88:9a:34:eb:75:28:22:8c:42:70:a4:ad:e4:4b: b3:fb:01:d1:79:6a:ee:58:43:66:9b:b3:ac:33:91: 62:e6:96:cf:0a:f4:02:7d:8c:98:00:bf:d5:4a:9b: 8a:3e:1f:f1:f4:aa:cd:71:25:94:1b:18:2b:93:d0: 72:81:8e:a1:90:15:1e:63:bd:e3:50:40:8c:d5:e5: 07:a2:fb:2f:58:55:a3:4a:3e:71:91:03:74:a0:25: c8:17:8f:5b:5f:07:a7:58:e5:77:8d:c2:27:e7:c5: bb:71:03:31:e2:ae:bd:5e:54:48:c2:19:95:bb:07: 4d:a5:dc:9f:df:2e:fa:60:ff:61:97:44:a1:1c:a5: 5e:88:4f:ae:ac:c0:ae:8c:cd:37:73:9f:06:06:e8: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:A3:E8:8C:C3:1B:68:34:3C:86:3C:88:27:82:46:91:92:D6:8A X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:77:ae:ce:bd:98:56:26:c7:cd:d2:77:00:71:1d:09:a5:69: 45:9c:d5:e5:29:3f:39:71:8c:8a:fd:3b:e2:61:46:dc:f0:16: 1f:10:96:85:72:48:00:dd:14:5f:b7:51:f9:5e:4f:e7:22:91: 75:eb:2a:fb:af:cb:7e:73:2a:b1:b0:42:29:05:47:e6:ae:74: 90:0e:c7:ae:6a:82:65:31:65:b7:53:e7:67:4f:b2:eb:20:14: e1:e8:bf:c5:90:68:93:4a:be:83:34:82:13:24:30:ab:b5:dc: 60:af:01:81:52:32:7d:5e:42:b3:18:52:ff:6f:e5:52:3f:58: aa:99:45:a1:eb:e1:3b:c6:7d:82:31:6f:19:58:f8:af:28:3f: 79:ce:a9:3c:ee:cd:ee:8f:08:e6:95:38:c6:2e:ec:ff:8c:90: a5:3b:fe:89:29:f9:51:56:33:ca:54:82:7d:8d:81:67:b9:93: fc:cd:ac:d1:58:64:4a:e4:ca:42:17:7e:aa:20:91:8f:23:30: 25:1e:72:ed:3d:3a:8b:05:e7:ec:57:f5:3a:2f:44:81:41:39: 43:a9:0d:e9:2c:99:27:10:17:9a:ea:6d:1c:b2:22:c7:dc:2f: 1d:06:61:31:e5:46:89:fd:8d:09:78:5b:a2:53:f1:90:69:26: 0a:3b:c1:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMkE1NzM5NkRDRTcwRUI1NkMwNzNERTFBNzYwQjYyQTcy MkIwNDc4RTAeFw0yNTA2MTUwNjEzNDhaFw0yNTA2MjIwNjEzNDhaMBgxFjAUBgNV BAMTDTY4NGU2NDljLWM4NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0ZN/sY1bdnXLxpcH+okTvTTm5oF3THUfgoaF+mrLQcjUB3FEKu00+0wAm4WqL ZkVUnzIRrrtDHCkb9SdHm8zrykfxTQXCpNEsGt8sqKdItasVFDhdFE+MFF5XP106 wXLRgaEGtB1zkoeImjTrdSgijEJwpK3kS7P7AdF5au5YQ2abs6wzkWLmls8K9AJ9 jJgAv9VKm4o+H/H0qs1xJZQbGCuT0HKBjqGQFR5jveNQQIzV5Qei+y9YVaNKPnGR A3SgJcgXj1tfB6dY5XeNwifnxbtxAzHirr1eVEjCGZW7B02l3J/fLvpg/2GXRKEc pV6IT66swK6MzTdznwYG6LK7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjnqj6IzD G2g0PIY8iCeCRpGS1oowHwYDVR0jBBgwFoAUKlc5bc5w61bAc94adgtipyKwR44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0FGNDFCRDEwQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2xjNWJjNXc2MWJBYzk0YWRndGlweUt3UjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0FGNDFCRDEwQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFi QWM5NGFkZ3RpcHlLd1I0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACZ3rs69mFYmx83SdwBxHQmlaUWc1eUpPzlxjIr9O+JhRtzwFh8QloVy SADdFF+3UfleT+cikXXrKvuvy35zKrGwQikFR+audJAOx65qgmUxZbdT52dPsusg FOHov8WQaJNKvoM0ghMkMKu13GCvAYFSMn1eQrMYUv9v5VI/WKqZRaHr4TvGfYIx bxlY+K8oP3nOqTzuze6PCOaVOMYu7P+MkKU7/okp+VFWM8pUgn2NgWe5k/zNrNFY ZErkykIXfqogkY8jMCUecu09OosF5+xX9TovRIFBOUOpDeksmScQF5rqbRyyIsfc Lx0GYTHlRon9jQl4W6JT8ZBpJgo7wYU= -----END CERTIFICATE-----Generated at Mon Jun 16 10:37:17 2025 by rpki-client