$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: 48Oh/jXg2M6ShnRQeA8sy5yXQSqac5fRgGh24ImVv5g= Subject key identifier: C1:96:89:0D:ED:C3:15:E1:33:C0:84:D4:89:1C:0D:2A:94:4C:68:8F Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 0F Signing time: Fri 09 May 2025 07:05:39 +0000 Manifest this update: Fri 09 May 2025 07:05:39 +0000 Manifest next update: Fri 16 May 2025 07:05:39 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: fGNRzoEuNWASes8MNVCEeMcX9ZSZ3VTrLUbEHu95bh4=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: May 9 07:05:39 2025 GMT Not After : May 16 07:05:39 2025 GMT Subject: CN=681da943-68ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:05:43:ed:c3:53:13:2d:a8:2b:5f:fd:cd: f8:63:ac:ad:03:d4:df:bc:75:60:8b:e6:d3:fd:32: 64:ea:7d:2d:77:c9:65:d3:91:22:c7:b5:b3:31:3f: d9:11:b1:60:b2:6a:74:a7:23:07:a1:d1:45:80:c3: 9c:2f:a5:41:25:19:01:fa:4f:a9:92:08:c9:46:f2: f4:b5:47:4e:fd:94:7a:1a:0c:ca:a6:df:e1:ff:f2: 9e:28:2d:56:a6:c2:80:e1:98:06:b2:3b:ee:70:24: 0d:01:06:b3:4f:32:0f:33:5a:b1:0d:9a:f6:26:af: 69:5e:c6:e9:5a:d1:30:e8:88:e2:19:58:42:13:8e: 35:0d:42:7d:8d:20:63:26:71:70:35:a6:ff:81:39: b4:75:5b:28:53:66:20:ad:e5:e6:95:c1:69:d0:fe: 5d:d5:80:10:04:b8:33:02:f9:20:4a:98:0e:ed:1d: 84:06:4a:63:6d:af:12:ac:ce:f5:c4:2f:17:f4:21: 8f:48:79:a0:a3:06:5f:58:4a:ec:d1:53:2b:ac:cf: 81:90:b6:f4:8d:8e:d6:66:b5:b0:20:14:f8:42:d8: 8e:ae:4a:2f:0e:d5:41:70:e2:11:df:ab:0e:af:8c: bb:e4:d1:04:38:80:92:85:a2:79:f9:ed:c4:f1:f4: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:96:89:0D:ED:C3:15:E1:33:C0:84:D4:89:1C:0D:2A:94:4C:68:8F X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:25:af:54:95:30:f0:b7:0b:7e:2f:1e:2f:2b:9d:03:19:0d: 19:41:f1:0f:f0:45:07:ab:b2:5c:3d:d9:41:97:eb:62:16:21: c0:2d:f9:28:60:3e:80:ff:c5:30:58:52:3d:57:dc:e2:1b:50: fc:bb:95:c6:72:e1:7e:de:65:7b:d0:95:61:55:62:2e:3a:0b: ae:3a:42:f1:b9:d9:ea:39:a9:b4:b3:86:ac:08:0c:2d:08:fc: 1b:49:71:ce:30:9e:f4:c3:81:94:c7:51:cc:07:e6:e7:3f:cc: 26:70:46:b2:9d:3c:60:b6:ba:62:49:cd:9a:42:43:22:7b:6f: 2f:33:32:db:c9:42:11:94:34:ae:c3:cb:46:a5:33:8c:ee:5b: 97:72:eb:70:82:5a:a8:ec:9d:00:79:05:eb:46:60:41:83:8a: 94:e0:f9:dc:42:ec:fa:dd:94:51:75:7c:49:0e:e0:e1:f8:5d: 98:23:93:bf:51:30:b6:93:12:cd:26:c8:a0:6c:e6:b0:52:16: 53:ed:ee:a8:73:a9:f8:a3:4c:20:89:5c:80:41:55:9b:8b:77: 40:25:f8:51:ef:fa:6a:28:1b:84:ef:17:28:a9:d3:06:2b:dd: 2d:f9:23:2d:57:1d:39:93:09:fe:85:27:bd:9d:24:a1:6f:96: 5d:60:f1:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA1MDkwNzA1MzlaFw0yNTA1MTYwNzA1MzlaMBgxFjAUBgNV BAMTDTY4MWRhOTQzLTY4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIagVD7cNTEy2oK1/9zfhjrK0D1N+8dWCL5tP9MmTqfS13yWXTkSLHtbMxP9kR sWCyanSnIweh0UWAw5wvpUElGQH6T6mSCMlG8vS1R079lHoaDMqm3+H/8p4oLVam woDhmAayO+5wJA0BBrNPMg8zWrENmvYmr2lexula0TDoiOIZWEITjjUNQn2NIGMm cXA1pv+BObR1WyhTZiCt5eaVwWnQ/l3VgBAEuDMC+SBKmA7tHYQGSmNtrxKszvXE Lxf0IY9IeaCjBl9YSuzRUyusz4GQtvSNjtZmtbAgFPhC2I6uSi8O1UFw4hHfqw6v jLvk0QQ4gJKFonn57cTx9EJbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwZaJDe3D FeEzwITUiRwNKpRMaI8wHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKolr1SVMPC3C34vHi8rnQMZDRlB8Q/wRQerslw92UGX62IWIcAt+Shg PoD/xTBYUj1X3OIbUPy7lcZy4X7eZXvQlWFVYi46C646QvG52eo5qbSzhqwIDC0I /BtJcc4wnvTDgZTHUcwH5uc/zCZwRrKdPGC2umJJzZpCQyJ7by8zMtvJQhGUNK7D y0alM4zuW5dy63CCWqjsnQB5BetGYEGDipTg+dxC7PrdlFF1fEkO4OH4XZgjk79R MLaTEs0myKBs5rBSFlPt7qhzqfijTCCJXIBBVZuLd0Al+FHv+mooG4TvFyip0wYr 3S35Iy1XHTmTCf6FJ72dJKFvll1g8YU= -----END CERTIFICATE-----Generated at Sat May 10 10:16:56 2025 by rpki-client