$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: CgbraKbvgmHHtgVPOhD6o1y70sNNS5qOZZJ5W+0CcSI= Subject key identifier: D3:F1:88:3C:66:E4:F7:55:F5:03:9F:38:1B:23:D4:B2:4B:90:CB:57 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 27 Signing time: Sun 29 Jun 2025 06:47:48 +0000 Manifest this update: Sun 29 Jun 2025 06:47:48 +0000 Manifest next update: Sun 06 Jul 2025 06:47:48 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: XHiBl+Oh8A9KskTJ4fEGaCyP7SMP+FijqUJaleu7AYc=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Jun 29 06:47:48 2025 GMT Not After : Jul 6 06:47:48 2025 GMT Subject: CN=6860e194-6639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:b7:7c:19:a4:08:58:f7:d3:40:ac:33:72: 5c:d6:bc:76:2b:47:cb:c7:79:96:be:55:5f:c3:c5: 41:86:01:2a:85:8f:e8:5c:37:d2:1a:d4:cc:cb:b9: 1e:29:34:e7:53:b3:4f:13:8b:03:89:34:76:9e:09: e8:57:87:d6:ec:78:87:ea:be:53:1c:c8:bb:0f:19: dc:31:3e:4d:3e:cd:31:8b:f6:bb:3e:6f:30:fa:33: 66:3d:b1:83:a1:6b:6b:8e:9e:c6:08:e4:aa:34:f9: f0:cf:d3:4d:10:23:1e:0d:cf:f9:d7:70:47:61:fa: 8a:77:46:97:ea:d7:b7:8e:94:96:d0:1c:98:a4:04: 49:bf:9a:45:7a:4b:0e:f5:70:a3:2f:fb:bf:80:c4: 83:90:83:ad:41:67:4a:2c:f0:c6:7c:49:43:b6:f1: 09:9f:7b:c5:26:08:3c:07:76:db:03:2f:05:ea:72: 5b:55:77:6b:f4:5d:51:20:66:a5:40:de:0f:dd:5f: 71:36:35:f3:da:c7:a1:c3:f9:c5:82:45:c8:3d:74: 37:37:bd:04:97:39:65:38:b2:50:53:bb:ed:52:36: 00:c1:fe:2e:5e:62:f0:b5:f0:41:54:c3:2f:96:70: bf:bc:9c:f1:14:de:5b:c8:ce:48:3f:94:02:83:4f: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:88:3C:66:E4:F7:55:F5:03:9F:38:1B:23:D4:B2:4B:90:CB:57 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:18:a9:f3:ce:34:4a:ce:b5:9f:32:a8:f7:fc:2f:7a:50:6b: 15:e7:f7:24:54:c1:22:7d:18:d8:35:b4:e3:68:06:06:9d:ef: 57:d7:73:94:66:15:65:0b:3d:97:0a:db:08:ec:54:bd:f0:b2: 38:22:c0:93:4a:11:83:cc:5a:20:66:75:a5:6e:d6:38:93:85: ea:d3:e0:aa:cb:62:43:4a:ac:e7:d3:2b:21:3f:83:6e:a3:1b: bc:fb:6e:b2:41:b2:4a:17:ca:69:95:e8:0e:fa:5a:c0:22:e2: ee:26:5f:39:bc:cf:98:92:e9:6e:ea:6e:af:13:ac:28:69:f2: 4f:21:49:88:f9:21:2e:48:1c:68:1a:da:de:3b:55:18:8c:c0: 1c:2a:64:1a:8e:a0:1b:93:3f:92:37:c7:13:3e:0f:8a:f0:2d: 9d:87:53:37:4c:f8:27:f7:d6:d9:aa:7a:1f:1d:ba:4f:51:15: 6f:ca:0a:da:0a:fd:7c:72:85:ac:64:03:48:fe:41:a8:ec:86: 35:f3:8f:4c:f8:3f:ad:9b:d7:61:3f:58:79:e3:e4:f7:4c:09: 93:55:f6:41:39:3d:04:e0:d0:45:6b:62:77:39:ea:f8:3f:9e: 9c:57:e6:28:00:bf:71:c9:f5:67:a1:a1:93:f4:b5:eb:28:4c: 31:4c:d9:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA2MjkwNjQ3NDhaFw0yNTA3MDYwNjQ3NDhaMBgxFjAUBgNV BAMTDTY4NjBlMTk0LTY2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSFbd8GaQIWPfTQKwzclzWvHYrR8vHeZa+VV/DxUGGASqFj+hcN9Ia1MzLuR4p NOdTs08TiwOJNHaeCehXh9bseIfqvlMcyLsPGdwxPk0+zTGL9rs+bzD6M2Y9sYOh a2uOnsYI5Ko0+fDP000QIx4Nz/nXcEdh+op3Rpfq17eOlJbQHJikBEm/mkV6Sw71 cKMv+7+AxIOQg61BZ0os8MZ8SUO28Qmfe8UmCDwHdtsDLwXqcltVd2v0XVEgZqVA 3g/dX3E2NfPax6HD+cWCRcg9dDc3vQSXOWU4slBTu+1SNgDB/i5eYvC18EFUwy+W cL+8nPEU3lvIzkg/lAKDT05dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0/GIPGbk 91X1A584GyPUskuQy1cwHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEYqfPONErOtZ8yqPf8L3pQaxXn9yRUwSJ9GNg1tONoBgad71fXc5Rm FWULPZcK2wjsVL3wsjgiwJNKEYPMWiBmdaVu1jiTherT4KrLYkNKrOfTKyE/g26j G7z7brJBskoXymmV6A76WsAi4u4mXzm8z5iS6W7qbq8TrChp8k8hSYj5IS5IHGga 2t47VRiMwBwqZBqOoBuTP5I3xxM+D4rwLZ2HUzdM+Cf31tmqeh8duk9RFW/KCtoK /XxyhaxkA0j+QajshjXzj0z4P62b12E/WHnj5PdMCZNV9kE5PQTg0EVrYnc56vg/ npxX5igAv3HJ9WehoZP0tesoTDFM2ag= -----END CERTIFICATE-----Generated at Mon Jun 30 15:17:32 2025 by rpki-client