$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: f4dqveOpsnlqvCJq59QVXub9JCZcGaLQjqwvaZXWeK4= Subject key identifier: 2A:9C:92:6F:9B:95:53:C1:76:41:C1:36:97:C7:73:5F:B7:69:F9:79 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 3F Signing time: Thu 03 Jul 2025 07:46:08 +0000 Manifest this update: Thu 03 Jul 2025 07:46:07 +0000 Manifest next update: Thu 10 Jul 2025 07:46:07 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: StcwJn/Es4sumioRCBkBmrHy6pMx74S2DWzlwBRhvf4=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Jul 3 07:46:07 2025 GMT Not After : Jul 10 07:46:07 2025 GMT Subject: CN=6866353f-297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:64:21:63:c2:df:39:c1:70:48:73:1c:c7: c6:8b:17:bd:cd:15:0f:2c:07:18:8b:77:d4:6c:2f: 4e:88:38:b2:c9:b6:33:a3:d4:11:57:83:44:b7:58: 10:3b:df:ce:e7:d8:18:b4:94:b5:2a:d2:7b:5b:48: 43:8b:fd:74:31:d1:62:fe:89:a7:76:9f:a4:eb:4a: a2:b6:34:69:f8:77:2e:c7:9b:4e:fb:16:23:4e:48: de:ba:e5:d2:90:f1:cd:fb:5b:44:0a:63:86:7d:f5: 43:3e:c1:55:56:6b:d2:21:40:56:c7:d4:ff:ba:bc: 52:3a:33:8f:8e:cf:3d:f4:ec:07:07:54:62:0d:3b: 26:39:1d:f4:17:9f:bf:47:f2:12:35:80:e8:9a:43: 48:e1:ba:91:32:83:d5:eb:ad:89:b8:6d:c8:3f:42: 55:48:a5:67:9e:23:ea:33:f6:d3:13:ba:77:c8:01: 68:18:76:a7:0d:06:d0:1b:16:10:66:37:92:dd:85: ca:e0:30:73:ab:ef:22:0b:61:7b:6f:d0:f0:58:40: 4e:91:0e:71:8e:f8:c0:47:0f:c0:ad:fb:da:c4:0a: 18:23:3b:12:41:af:82:46:24:3e:65:29:4c:8f:b2: f2:af:a6:16:1b:48:d7:e4:3e:ff:37:c4:8b:e7:e1: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:92:6F:9B:95:53:C1:76:41:C1:36:97:C7:73:5F:B7:69:F9:79 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:c5:35:ba:ba:98:0b:83:cc:65:94:51:df:ca:49:46:46: 2f:2a:58:a4:39:03:88:cf:e9:b0:9d:d2:e8:77:6a:d5:75:c3: 22:45:0b:f7:0d:2e:bc:b1:03:04:a6:71:e9:27:cf:f1:c0:ca: 09:da:12:22:e0:7d:6d:ee:c5:8c:9e:13:67:f3:4c:30:70:10: d2:c8:09:64:e8:c6:d3:db:61:30:f5:48:0f:c0:0d:a1:7a:f3: d8:da:c7:22:47:c0:18:86:71:6b:c7:84:8b:0d:cd:e4:03:23: b4:73:8a:0e:05:2c:da:ed:c5:81:6c:6d:bc:93:88:0e:bb:32: 4e:54:93:d2:f7:c7:5a:d5:b0:86:49:16:49:9b:48:6d:ae:70: e6:94:b8:86:e3:f3:7f:dc:7e:d3:de:1e:a1:0f:8d:81:76:8c: bc:ca:10:a6:c6:79:78:ff:3f:ab:a4:9f:3c:cd:21:23:e5:ec: ef:00:ac:3e:7b:cb:b8:1a:7b:d0:b2:65:cf:84:95:44:f4:a9: ef:8a:92:62:05:f1:4a:b7:de:1d:ef:a9:e8:56:3f:dc:64:d8: bd:ea:d5:d8:8a:4c:57:d3:0c:34:aa:a7:5c:ce:d8:4c:97:9d: 20:51:76:40:6f:8b:c4:00:7d:bc:92:5a:91:eb:ca:10:df:d0: 5d:4d:15:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA3MDMwNzQ2MDdaFw0yNTA3MTAwNzQ2MDdaMBgxFjAUBgNV BAMTDTY4NjYzNTNmLTI5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHcGQhY8LfOcFwSHMcx8aLF73NFQ8sBxiLd9RsL06IOLLJtjOj1BFXg0S3WBA7 387n2Bi0lLUq0ntbSEOL/XQx0WL+iad2n6TrSqK2NGn4dy7Hm077FiNOSN665dKQ 8c37W0QKY4Z99UM+wVVWa9IhQFbH1P+6vFI6M4+Ozz307AcHVGINOyY5HfQXn79H 8hI1gOiaQ0jhupEyg9XrrYm4bcg/QlVIpWeeI+oz9tMTunfIAWgYdqcNBtAbFhBm N5LdhcrgMHOr7yILYXtv0PBYQE6RDnGO+MBHD8Ct+9rEChgjOxJBr4JGJD5lKUyP svKvphYbSNfkPv83xIvn4azNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKpySb5uV U8F2QcE2l8dzX7dp+XkwHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxqxTW6upgLg8xllFHfyklGRi8qWKQ5A4jP6bCd0uh3atV1wyJFC/cN LryxAwSmceknz/HAygnaEiLgfW3uxYyeE2fzTDBwENLICWToxtPbYTD1SA/ADaF6 89jaxyJHwBiGcWvHhIsNzeQDI7Rzig4FLNrtxYFsbbyTiA67Mk5Uk9L3x1rVsIZJ FkmbSG2ucOaUuIbj83/cftPeHqEPjYF2jLzKEKbGeXj/P6uknzzNISPl7O8ArD57 y7gae9CyZc+ElUT0qe+KkmIF8Uq33h3vqehWP9xk2L3q1diKTFfTDDSqp1zO2EyX nSBRdkBvi8QAfbySWpHryhDf0F1NFeA= -----END CERTIFICATE-----Generated at Thu Jul 3 14:59:52 2025 by rpki-client