$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json) Hash identifier: KS7Z6b9fOzWxzina43HHVqEc6v4c4wJD+HNSCFerAw4= Subject key identifier: 2F:65:9D:35:5F:5A:57:D4:C9:3C:A7:08:C3:6D:6B:F6:99:3D:D3:3C Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft Manifest number: 024C Signing time: Tue 01 Jul 2025 02:32:15 +0000 Manifest this update: Tue 01 Jul 2025 02:32:15 +0000 Manifest next update: Tue 08 Jul 2025 02:32:15 +0000 Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: 75//W4Rby/mmYlGQBhVffoqr7ImG5Rsg0qUfhT7mMTg=) 2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: 6xgX7RCx1jR+s1bDY/KUKo4N6DkkwUVmskiN+xXDBfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Validity Not Before: Jul 1 02:32:15 2025 GMT Not After : Jul 8 02:32:15 2025 GMT Subject: CN=686348af-13ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:dd:43:31:dd:80:d5:ed:8e:90:d7:15:b2: ef:fb:f2:15:0e:8e:81:5c:28:e0:3f:63:52:44:f2: 96:71:6c:06:0d:c1:df:dd:96:c7:3c:6f:9e:0f:84: b6:cb:58:a4:53:40:b7:c1:bb:9c:78:fb:61:1e:b7: f4:5a:8d:d3:9e:87:9b:33:71:11:27:fd:9c:07:4a: bd:60:95:02:37:72:20:8d:cd:90:32:64:04:bc:16: 03:0f:76:16:3e:ef:5a:c8:d8:f2:69:a0:0e:39:b5: 68:03:34:9a:c1:2a:0d:b7:ad:39:8d:5a:17:d3:fe: b9:28:3c:25:2e:4c:7b:dd:6d:45:f8:5d:49:4b:dc: 83:f8:e0:cc:b4:72:b3:e2:dc:40:47:7a:db:b3:b9: 2b:61:50:41:1e:f2:42:a5:1a:2f:aa:23:a1:b5:78: 77:45:c0:26:db:e9:7c:a8:3c:08:52:87:96:67:4c: b1:0b:b5:b2:ee:77:4a:ed:e5:8a:12:19:df:d9:a8: e7:e8:05:3c:eb:ba:d7:4d:b1:17:46:f0:e8:20:33: e5:c0:5a:ab:88:77:41:f6:f9:0b:d3:f3:7b:b0:af: b4:75:ab:03:bc:95:75:01:0d:d4:d2:cf:6c:73:5e: 00:b9:a0:bc:07:8c:5b:11:52:e9:0f:91:75:ed:18: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:9D:35:5F:5A:57:D4:C9:3C:A7:08:C3:6D:6B:F6:99:3D:D3:3C X509v3 Authority Key Identifier: keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:73:3f:96:b6:88:27:61:bc:bb:95:6e:9b:52:e7:3a:3c:bc: 90:a7:8d:0d:c8:d9:42:70:0c:8c:c8:c5:e7:23:eb:2a:d9:0b: 07:4d:74:df:ab:1e:cf:83:41:74:cd:11:47:bf:6b:e1:ce:12: 00:ff:ef:f1:5d:3f:6f:e2:f7:83:0e:b5:ac:cb:03:a4:d8:02: 17:d4:7b:b9:c0:98:a8:44:d1:5e:6d:03:74:b9:43:5f:36:20: 50:19:c2:aa:f2:c0:71:ba:89:ad:ef:69:24:f9:3c:53:5a:08: d2:3e:fc:a8:c2:39:19:83:92:b7:79:20:27:f5:0e:bb:3f:c8: 97:7f:fa:0f:c6:d5:82:d1:24:c4:bf:fc:90:9b:39:f0:70:a0: bf:02:04:e4:72:66:5c:1b:83:db:a1:24:0c:40:6c:61:37:b1: 6c:6b:6e:cb:af:49:70:92:d0:a9:7e:03:1f:74:35:a8:0d:cf: a9:3c:66:87:e3:8f:b5:16:60:db:89:cb:27:54:dc:c0:da:62: e2:cb:ba:ba:a3:93:72:8c:52:b4:27:96:21:1d:ea:88:89:2a: 31:70:68:0c:22:c1:26:9d:2d:f3:bd:c1:c6:06:fa:c5:f5:05: 06:45:f1:09:ac:e3:06:35:9c:c6:8c:e2:ad:30:cf:f7:96:b1: c0:2f:fb:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1 ODJDQzJGQUUwHhcNMjUwNzAxMDIzMjE1WhcNMjUwNzA4MDIzMjE1WjAYMRYwFAYD VQQDEw02ODYzNDhhZi0xM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBTdQzHdgNXtjpDXFbLv+/IVDo6BXCjgP2NSRPKWcWwGDcHf3ZbHPG+eD4S2 y1ikU0C3wbucePthHrf0Wo3TnoebM3ERJ/2cB0q9YJUCN3Igjc2QMmQEvBYDD3YW Pu9ayNjyaaAOObVoAzSawSoNt605jVoX0/65KDwlLkx73W1F+F1JS9yD+ODMtHKz 4txAR3rbs7krYVBBHvJCpRovqiOhtXh3RcAm2+l8qDwIUoeWZ0yxC7Wy7ndK7eWK Ehnf2ajn6AU867rXTbEXRvDoIDPlwFqriHdB9vkL0/N7sK+0dasDvJV1AQ3U0s9s c14AuaC8B4xbEVLpD5F17Rgj4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9lnTVf WlfUyTynCMNta/aZPdM8MB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0 NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt Y3NCc0xmYm92aEZZTE1MNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArcz+WtognYby7lW6bUuc6PLyQp40NyNlCcAyMyMXnI+sq2QsHTXTf qx7Pg0F0zRFHv2vhzhIA/+/xXT9v4veDDrWsywOk2AIX1Hu5wJioRNFebQN0uUNf NiBQGcKq8sBxuomt72kk+TxTWgjSPvyowjkZg5K3eSAn9Q67P8iXf/oPxtWC0STE v/yQmznwcKC/AgTkcmZcG4PboSQMQGxhN7Fsa27Lr0lwktCpfgMfdDWoDc+pPGaH 44+1FmDbicsnVNzA2mLiy7q6o5NyjFK0J5YhHeqIiSoxcGgMIsEmnS3zvcHGBvrF 9QUGRfEJrOMGNZzGjOKtMM/3lrHAL/vZ -----END CERTIFICATE-----Generated at Wed Jul 2 06:12:51 2025 by rpki-client