$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: 0NvnaE+rXI0fXYeGNgsKfyIrBUIa7laZ23SB3r/96LA= Subject key identifier: 88:B9:87:28:8C:76:2A:A3:2A:D5:E8:3A:26:6A:69:7A:69:98:FE:19 Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 0111 Signing time: Sat 17 May 2025 04:31:27 +0000 Manifest this update: Sat 17 May 2025 04:31:27 +0000 Manifest next update: Sat 24 May 2025 04:31:27 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: Qg4tBaZj2U8ZnXtOGAHZTAHaqwH1D9nBp8M2udaaD1o=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: 3QR/UvKzS+sKKfIIK9uHF2so+MGpUcPtji7e/5xzyuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: May 17 04:31:27 2025 GMT Not After : May 24 04:31:27 2025 GMT Subject: CN=6828111f-c6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:e3:e1:b2:a2:47:60:02:d5:ce:22:a7:3c: 03:76:22:42:eb:cd:f3:49:50:32:cf:52:86:40:62: 94:bc:3e:22:e2:7f:fc:30:f2:0b:98:6a:ab:33:8b: 40:f7:31:7c:3c:1b:39:35:cf:70:fb:9a:d4:2a:f4: 60:e7:ce:15:f8:f1:ff:1f:70:72:dd:d2:81:b7:ac: fc:7b:58:4d:55:be:ff:14:96:56:18:f2:ba:75:be: fd:db:f9:53:1f:ab:d9:ff:b5:29:f6:47:0f:b0:da: 9f:9c:20:4d:a8:c4:11:26:5c:e2:1e:ed:ab:61:66: dd:52:ce:e6:db:99:a1:65:8a:f6:73:4f:07:87:a7: 45:c5:69:0b:90:32:66:3f:c7:64:ef:70:21:98:e9: ba:d2:7c:ed:4d:a0:d2:2d:8b:99:76:7d:d9:16:49: a0:c4:83:31:3a:4a:5a:ac:0b:3f:a6:99:f1:26:84: 2c:a2:6a:54:34:31:16:81:d4:d9:64:17:eb:2b:3f: 09:d2:21:07:14:aa:9b:fb:2a:00:07:60:b5:09:3c: f9:39:ab:58:31:e0:8d:64:91:02:28:8e:53:d8:4a: 38:cb:ac:40:90:22:26:71:84:fc:ed:de:eb:0f:fb: c9:5e:d8:65:a9:cb:96:2f:2c:0e:4a:a0:7c:e7:2d: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B9:87:28:8C:76:2A:A3:2A:D5:E8:3A:26:6A:69:7A:69:98:FE:19 X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:32:82:f8:af:44:b9:d5:3c:2b:ba:8e:a7:50:53:44:04:25: cf:38:ab:2a:ce:74:02:95:db:ca:b7:9b:bc:6a:4a:1a:47:f6: 7e:c1:fe:0d:38:b2:bb:37:77:c1:9f:7e:00:37:12:4a:aa:58: c7:48:bc:bd:6f:70:ea:cb:3b:21:c8:6d:2e:55:ad:d9:3f:f0: 90:c5:36:14:b9:64:e3:8d:ca:c5:33:cb:61:06:c2:67:08:53: 28:02:25:eb:02:4a:a0:ad:4d:99:c4:69:90:01:4a:6a:11:22: 03:3c:27:8b:61:94:c3:45:c4:b4:80:16:f9:cf:0e:d0:d6:a5: c6:e2:53:2f:71:cd:f1:61:e2:c6:39:c3:ef:f9:6f:e3:c0:e5: c9:93:b2:66:56:4d:ea:2c:7d:b7:49:ec:e6:ba:37:2c:61:34: f7:48:6e:99:c7:2a:32:51:2f:15:84:5a:cf:4e:01:7c:78:87: 0f:21:15:e0:17:27:57:76:58:79:f9:63:ff:64:42:7b:12:dc: dd:86:88:06:12:bd:90:fb:4b:df:d6:f4:5d:64:88:2a:52:de: ba:46:99:9e:2d:5c:b2:82:6d:73:9c:e3:bb:9c:6d:d4:e2:ef: e2:79:23:8b:6f:86:60:25:dc:6a:f6:f2:ee:7d:61:e6:30:ce: 70:33:4e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUwNTE3MDQzMTI3WhcNMjUwNTI0MDQzMTI3WjAYMRYwFAYD VQQDEw02ODI4MTExZi1jNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfbj4bKiR2AC1c4ipzwDdiJC683zSVAyz1KGQGKUvD4i4n/8MPILmGqrM4tA 9zF8PBs5Nc9w+5rUKvRg584V+PH/H3By3dKBt6z8e1hNVb7/FJZWGPK6db792/lT H6vZ/7Up9kcPsNqfnCBNqMQRJlziHu2rYWbdUs7m25mhZYr2c08Hh6dFxWkLkDJm P8dk73AhmOm60nztTaDSLYuZdn3ZFkmgxIMxOkparAs/ppnxJoQsompUNDEWgdTZ ZBfrKz8J0iEHFKqb+yoAB2C1CTz5OatYMeCNZJECKI5T2Eo4y6xAkCImcYT87d7r D/vJXthlqcuWLywOSqB85y2dAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIi5hyiM diqjKtXoOiZqaXppmP4ZMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfMoL4r0S51Twruo6nUFNEBCXPOKsqznQCldvKt5u8akoaR/Z+wf4N OLK7N3fBn34ANxJKqljHSLy9b3DqyzshyG0uVa3ZP/CQxTYUuWTjjcrFM8thBsJn CFMoAiXrAkqgrU2ZxGmQAUpqESIDPCeLYZTDRcS0gBb5zw7Q1qXG4lMvcc3xYeLG OcPv+W/jwOXJk7JmVk3qLH23SezmujcsYTT3SG6ZxyoyUS8VhFrPTgF8eIcPIRXg FydXdlh5+WP/ZEJ7EtzdhogGEr2Q+0vf1vRdZIgqUt66RpmeLVyygm1znOO7nG3U 4u/ieSOLb4ZgJdxq9vLufWHmMM5wM07i -----END CERTIFICATE-----Generated at Sat May 17 10:39:33 2025 by rpki-client