$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: +A1RISxbSwSbwyXJhAlDDJTY4r49wJ+D3nUjHhv+t/I= Subject key identifier: 61:97:D0:5C:F0:54:7D:77:1D:CE:18:A8:FF:0D:5B:59:16:84:B8:E0 Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 012A Signing time: Thu 03 Jul 2025 04:47:02 +0000 Manifest this update: Thu 03 Jul 2025 04:47:01 +0000 Manifest next update: Thu 10 Jul 2025 04:47:01 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: u2qXvj7GL1moYBeB/os4EEjyjn1rcPvSsQcuSZ/QEvA=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: BrMg7LC27FVuPN/a8T84kbw3q38OJLbwQWRqwjiM6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Jul 3 04:47:01 2025 GMT Not After : Jul 10 04:47:01 2025 GMT Subject: CN=68660b45-158c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:0d:f6:a7:1d:0e:b3:c1:ec:13:6e:a3:0d: 76:65:a2:a1:d9:32:88:fa:1a:58:27:c8:0c:18:15: 0e:34:d8:d6:64:0b:53:32:d9:27:a9:3b:72:85:1f: 3a:1c:90:b4:3b:6a:9d:dc:97:a6:3d:1b:01:b9:9d: bc:04:83:85:17:fb:ca:24:15:80:d6:09:b0:d3:bb: e6:37:59:15:54:66:cb:5b:1b:27:13:4d:59:cf:04: b6:6f:05:7c:a1:c1:cd:3f:44:eb:ad:31:d6:35:ba: 9c:43:e2:fd:6c:a6:50:9b:c0:d7:6c:3c:36:71:a0: dc:85:13:24:11:92:95:a2:44:7f:bc:17:71:06:96: 99:06:19:78:a4:04:46:f4:0d:64:35:71:e0:e5:0a: aa:f3:01:59:f8:3b:58:a1:2a:96:1c:a8:e1:54:7f: 8e:1a:fb:23:75:5a:8d:33:69:32:a2:26:3a:61:68: 0b:9b:2c:39:dc:b2:0d:28:a8:d5:4f:5f:74:7d:35: 61:c5:40:7e:00:da:b0:36:07:43:5b:f0:06:8e:6a: e6:eb:d3:7a:0d:5d:8b:1d:f6:46:d2:e7:e3:60:f8: 31:36:79:20:28:b7:3d:2d:ec:d9:11:07:9a:0c:9a: 47:ac:41:34:d9:6d:8f:71:ea:6b:61:d5:16:70:68: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:97:D0:5C:F0:54:7D:77:1D:CE:18:A8:FF:0D:5B:59:16:84:B8:E0 X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:36:39:be:16:09:e2:ea:46:76:b3:01:1f:28:72:b8:c2:c1: 00:4b:6a:c3:f8:c3:82:18:a9:f9:39:f2:96:0c:93:35:24:d3: 15:cb:e2:d2:cb:0e:10:01:0b:bf:bf:c2:30:94:7a:06:09:b9: 82:85:e8:7c:4f:97:6f:0e:b8:80:a0:fa:ab:32:01:57:a8:82: 1e:cc:cd:d2:3b:7b:ac:e9:8f:25:80:be:67:f2:4a:ef:b7:f3: dc:41:fb:c2:d5:aa:16:91:ab:60:43:d8:e5:b9:ee:bd:2c:43: 38:ce:a1:69:42:2f:08:c4:a4:a1:76:84:66:d3:e7:94:cb:cc: 59:c0:fe:4a:6f:c1:3c:76:d9:95:60:1b:8b:bf:78:c0:29:b3: cf:d6:a3:2c:d7:f2:29:f3:2c:26:bd:73:70:59:34:d7:1d:43: c5:d8:10:58:e9:47:82:81:d0:a5:c3:c7:42:ce:a6:4e:ce:06: 95:e6:80:dd:ed:6b:15:6d:b0:0a:81:f6:91:35:27:42:a3:1b: 7c:65:c7:84:8b:a2:f8:cb:02:ae:eb:ba:85:cd:b7:cc:f4:da: 25:47:a4:e8:39:34:92:66:94:91:ab:e3:a7:a5:9e:fc:38:a9: 4e:b7:f1:46:21:ac:65:09:9b:3b:2a:e6:7e:28:a0:6b:ad:c4: 1a:bb:c7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUwNzAzMDQ0NzAxWhcNMjUwNzEwMDQ0NzAxWjAYMRYwFAYD VQQDEw02ODY2MGI0NS0xNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi4N9qcdDrPB7BNuow12ZaKh2TKI+hpYJ8gMGBUONNjWZAtTMtknqTtyhR86 HJC0O2qd3JemPRsBuZ28BIOFF/vKJBWA1gmw07vmN1kVVGbLWxsnE01ZzwS2bwV8 ocHNP0TrrTHWNbqcQ+L9bKZQm8DXbDw2caDchRMkEZKVokR/vBdxBpaZBhl4pARG 9A1kNXHg5Qqq8wFZ+DtYoSqWHKjhVH+OGvsjdVqNM2kyoiY6YWgLmyw53LINKKjV T190fTVhxUB+ANqwNgdDW/AGjmrm69N6DV2LHfZG0ufjYPgxNnkgKLc9LezZEQea DJpHrEE02W2PceprYdUWcGgqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGX0Fzw VH13Hc4YqP8NW1kWhLjgMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtNjm+Fgni6kZ2swEfKHK4wsEAS2rD+MOCGKn5OfKWDJM1JNMVy+LS yw4QAQu/v8IwlHoGCbmCheh8T5dvDriAoPqrMgFXqIIezM3SO3us6Y8lgL5n8krv t/PcQfvC1aoWkatgQ9jlue69LEM4zqFpQi8IxKShdoRm0+eUy8xZwP5Kb8E8dtmV YBuLv3jAKbPP1qMs1/Ip8ywmvXNwWTTXHUPF2BBY6UeCgdClw8dCzqZOzgaV5oDd 7WsVbbAKgfaRNSdCoxt8ZceEi6L4ywKu67qFzbfM9NolR6ToOTSSZpSRq+OnpZ78 OKlOt/FGIaxlCZs7KuZ+KKBrrcQau8eo -----END CERTIFICATE-----Generated at Thu Jul 3 12:17:19 2025 by rpki-client