$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: XLscvJPIl1TVxBOt0lpqViepNjfjBssbXaV1qnL0760= Subject key identifier: 21:3C:E7:E6:39:45:50:9D:49:91:19:B5:BD:59:85:5E:67:0C:9B:59 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 43 Signing time: Sat 23 Aug 2025 07:40:22 +0000 Manifest this update: Sat 23 Aug 2025 07:40:22 +0000 Manifest next update: Sat 30 Aug 2025 07:40:22 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: 0uWaxtm5d8BeuVHN1lcHqW0ztxQD3JKMLg3nbUHBlSQ=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Aug 23 07:40:22 2025 GMT Not After : Aug 30 07:40:22 2025 GMT Subject: CN=68a97066-1622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:f5:44:3c:83:96:31:d1:4f:7e:3c:62:22: 18:5c:a3:6d:3f:4a:ad:b4:e9:7a:b0:c3:30:6a:ee: e0:de:3d:52:67:4f:67:10:1d:07:37:bf:40:15:f4: a4:64:fe:6c:89:19:bd:c9:c8:8d:3a:a4:d3:17:37: 9d:47:67:0e:62:d2:94:3f:ac:2b:23:b0:e7:c3:e6: ab:4a:6f:93:b6:32:87:a8:32:14:06:6d:92:66:6b: f0:fe:bb:4a:b5:a7:05:bb:bc:dd:bc:c5:0c:ec:0c: 2c:a1:e3:17:bf:48:11:b1:e1:ce:73:5e:67:8c:17: f6:77:39:4d:15:9e:14:5b:57:db:dc:dd:60:be:bf: 9e:5c:e6:30:b8:b9:25:05:0e:73:0d:32:fd:08:70: d6:2f:46:62:09:90:bd:a8:0f:f9:dc:09:5b:5a:b2: 50:4e:56:1a:2c:7f:18:9c:32:e1:5f:e4:78:e1:a2: 18:58:39:d5:e3:95:e9:ac:dc:a2:45:e3:b7:2d:dc: a5:a4:a6:8b:ae:e1:e1:86:36:81:6d:c2:b1:41:f8: 36:67:aa:0d:24:4d:71:38:5a:93:fa:12:fb:9f:5c: 66:74:d9:d2:ed:c7:49:21:e2:94:8e:01:4a:af:65: c5:58:27:b2:2b:8f:5e:12:f6:9b:5d:df:6f:9b:b2: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3C:E7:E6:39:45:50:9D:49:91:19:B5:BD:59:85:5E:67:0C:9B:59 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d4:4a:be:f6:c2:31:5a:fc:11:2e:67:c9:41:4d:71:f8:a1: 60:80:7f:19:44:b0:4e:e1:17:1a:8a:c6:8b:96:6d:16:86:9f: 24:75:ec:b7:4c:39:8e:c6:a7:57:d2:63:74:06:89:9a:69:8d: 83:18:ec:a2:78:b3:fe:fe:f9:33:76:61:b4:4f:a8:11:cb:1b: 4f:16:8f:3c:7b:96:49:e2:d8:6e:51:74:1c:a0:46:bc:43:1b: 02:77:01:95:5e:5d:94:d1:fe:0b:91:e5:68:00:9e:0c:7c:2e: ba:a4:06:8b:2c:cc:9c:67:b0:89:48:a2:fd:be:76:a3:d9:b8: 04:ac:0c:e2:68:f3:84:db:89:5d:e6:1a:44:92:5b:73:34:72: 34:ac:b2:7c:49:01:9f:8a:d0:cd:d1:aa:4d:05:60:39:50:85: 6e:5e:cb:e3:b4:05:40:e7:f3:b8:ce:3e:00:5e:86:57:3b:ec: 03:77:b8:45:31:06:07:1c:50:ab:2f:1a:f3:10:1a:e0:0b:6c: e8:d9:59:1d:37:6f:d9:06:18:37:8e:ca:bc:53:7f:74:a6:5a: d6:6b:53:96:d4:93:cf:02:8a:59:3b:15:a6:fe:da:f4:63:f4: 6a:3e:b2:76:98:4c:52:bc:c9:fb:6f:f7:0c:a7:73:37:1a:0d: 4a:ff:7d:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA4MjMwNzQwMjJaFw0yNTA4MzAwNzQwMjJaMBgxFjAUBgNV BAMTDTY4YTk3MDY2LTE2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdnPVEPIOWMdFPfjxiIhhco20/Sq206XqwwzBq7uDePVJnT2cQHQc3v0AV9KRk /myJGb3JyI06pNMXN51HZw5i0pQ/rCsjsOfD5qtKb5O2MoeoMhQGbZJma/D+u0q1 pwW7vN28xQzsDCyh4xe/SBGx4c5zXmeMF/Z3OU0VnhRbV9vc3WC+v55c5jC4uSUF DnMNMv0IcNYvRmIJkL2oD/ncCVtaslBOVhosfxicMuFf5HjhohhYOdXjlems3KJF 47ct3KWkpouu4eGGNoFtwrFB+DZnqg0kTXE4WpP6EvufXGZ02dLtx0kh4pSOAUqv ZcVYJ7Irj14S9ptd32+bsoODAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUITzn5jlF UJ1JkRm1vVmFXmcMm1kwHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAInUSr72wjFa/BEuZ8lBTXH4oWCAfxlEsE7hFxqKxouWbRaGnyR17LdM OY7Gp1fSY3QGiZppjYMY7KJ4s/7++TN2YbRPqBHLG08Wjzx7lkni2G5RdBygRrxD GwJ3AZVeXZTR/guR5WgAngx8LrqkBosszJxnsIlIov2+dqPZuASsDOJo84TbiV3m GkSSW3M0cjSssnxJAZ+K0M3Rqk0FYDlQhW5ey+O0BUDn87jOPgBehlc77AN3uEUx BgccUKsvGvMQGuALbOjZWR03b9kGGDeOyrxTf3SmWtZrU5bUk88Cilk7Fab+2vRj 9Go+snaYTFK8yftv9wynczcaDUr/fYs= -----END CERTIFICATE-----Generated at Sun Aug 24 01:24:42 2025 by rpki-client