$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: HWPg/KBrqEPico/0GMrntSdYWYR+g4xCW4gtFHAlfMg= Subject key identifier: 45:16:82:F6:12:83:71:F4:13:10:50:2B:CD:3A:74:28:14:55:39:7B Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 011C Signing time: Tue 17 Jun 2025 03:51:11 +0000 Manifest this update: Tue 17 Jun 2025 03:51:11 +0000 Manifest next update: Tue 24 Jun 2025 03:51:11 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: jRCgyG7iHkT3/pu+g2qyqOmF+LmXzQjVrH9VoD/F/Lk=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Jun 17 03:51:11 2025 GMT Not After : Jun 24 03:51:11 2025 GMT Subject: CN=6850e62f-5b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:8c:2b:95:2d:80:b3:03:b0:68:13:79:b0: 97:77:8c:fd:7e:f3:42:02:d4:11:e5:a9:70:78:2f: be:58:e6:ae:f5:1c:2d:8c:b6:fc:88:24:66:e5:ad: b0:0a:34:93:48:35:5f:00:a7:99:f7:c5:bd:7a:ea: c0:39:18:1b:45:96:2b:c2:54:fa:60:cc:d0:d5:59: 9d:ef:13:c0:fd:36:6f:01:90:ef:9e:cb:73:e9:96: bb:3d:e8:d9:48:fc:fb:d4:76:5d:1b:8c:2e:d1:fe: 51:d5:33:b1:43:08:ff:a5:02:a9:60:bf:f3:56:4f: 8c:22:4b:a3:75:d7:6f:d1:a5:77:99:6e:29:56:e3: e1:21:d8:44:a7:4b:dd:c5:d9:5a:db:35:a3:7b:76: 55:04:96:20:4d:3d:df:0f:ed:c3:04:5f:fe:80:d7: 20:c7:bf:22:ff:09:6f:6b:96:5f:c8:11:cb:25:a0: a5:a6:63:44:d5:f6:90:0c:69:77:e4:aa:01:29:4a: 27:5a:eb:7d:a4:e7:b1:42:7b:7b:74:3f:e4:33:dc: 67:51:4e:70:d1:9a:fb:99:34:6a:40:70:2b:07:cd: a9:87:e3:95:8e:ae:0f:b9:c1:dd:66:de:02:9c:32: 55:db:e9:d8:0f:94:6b:ec:42:47:40:9f:70:e7:e5: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:16:82:F6:12:83:71:F4:13:10:50:2B:CD:3A:74:28:14:55:39:7B X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:b3:c8:5c:1a:22:84:14:5a:b0:ee:0e:20:8f:ea:7b:86: 47:54:e9:c5:85:7c:00:9c:97:17:59:3c:07:d7:af:81:14:9f: 37:f6:80:7e:48:9f:6b:46:d6:a9:ec:fe:af:82:36:83:39:d3: 17:0e:b0:56:ad:fc:ba:df:29:c9:34:05:89:f8:2a:94:61:3c: 70:eb:54:eb:d7:a6:42:4c:37:05:49:45:a1:39:eb:7d:14:3e: f0:f0:cf:99:46:de:24:92:9b:0a:58:4a:a8:61:2a:97:3d:e3: 9a:bd:1a:11:ea:a7:e7:ab:24:33:07:a6:2f:08:a1:26:da:89: 80:f7:05:20:09:cc:23:f1:a9:a0:83:ba:e7:df:b8:a2:de:b2: cc:bf:f9:97:f8:4d:04:4b:14:2b:d0:95:54:b8:ca:6d:30:38: 42:61:90:41:54:17:9a:5f:74:53:47:84:f8:13:f2:95:12:75: 0a:a0:11:71:d7:bd:01:6d:53:fb:c2:52:17:86:82:a0:c5:8b: 6a:7e:77:ca:eb:26:b5:58:6e:64:0b:b7:79:40:69:00:95:2f: c2:f5:21:3d:51:93:12:24:06:05:02:88:d6:fa:6a:c0:d2:fe: 56:04:20:06:a8:c7:77:73:68:85:d2:b5:bc:bb:24:c3:d3:6b: 94:33:e0:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUwNjE3MDM1MTExWhcNMjUwNjI0MDM1MTExWjAYMRYwFAYD VQQDEw02ODUwZTYyZi01YjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunOMK5UtgLMDsGgTebCXd4z9fvNCAtQR5alweC++WOau9RwtjLb8iCRm5a2w CjSTSDVfAKeZ98W9eurAORgbRZYrwlT6YMzQ1Vmd7xPA/TZvAZDvnstz6Za7PejZ SPz71HZdG4wu0f5R1TOxQwj/pQKpYL/zVk+MIkujdddv0aV3mW4pVuPhIdhEp0vd xdla2zWje3ZVBJYgTT3fD+3DBF/+gNcgx78i/wlva5ZfyBHLJaClpmNE1faQDGl3 5KoBKUonWut9pOexQnt7dD/kM9xnUU5w0Zr7mTRqQHArB82ph+OVjq4PucHdZt4C nDJV2+nYD5Rr7EJHQJ9w5+WQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUWgvYS g3H0ExBQK806dCgUVTl7MB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALsbPIXBoihBRasO4OII/qe4ZHVOnFhXwAnJcXWTwH16+BFJ839oB+ SJ9rRtap7P6vgjaDOdMXDrBWrfy63ynJNAWJ+CqUYTxw61Tr16ZCTDcFSUWhOet9 FD7w8M+ZRt4kkpsKWEqoYSqXPeOavRoR6qfnqyQzB6YvCKEm2omA9wUgCcwj8amg g7rn37ii3rLMv/mX+E0ESxQr0JVUuMptMDhCYZBBVBeaX3RTR4T4E/KVEnUKoBFx 170BbVP7wlIXhoKgxYtqfnfK6ya1WG5kC7d5QGkAlS/C9SE9UZMSJAYFAojW+mrA 0v5WBCAGqMd3c2iF0rW8uyTD02uUM+CP -----END CERTIFICATE-----Generated at Thu Jun 19 04:38:07 2025 by rpki-client