$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: J9UwZM3mYu7pvvQPc5X6zOm5/4e3otCncr+pJUPp7E8= Subject key identifier: B1:AE:4B:2B:6F:DD:F1:A8:93:7D:4C:45:71:44:B0:75:16:6E:15:9B Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 59 Signing time: Sat 23 Aug 2025 07:26:58 +0000 Manifest this update: Sat 23 Aug 2025 07:26:58 +0000 Manifest next update: Sat 30 Aug 2025 07:26:58 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: xqq/B4rVLT99vbTXDd4R4+6S3dtb/0fXMstlL3z7FAg=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Aug 23 07:26:58 2025 GMT Not After : Aug 30 07:26:58 2025 GMT Subject: CN=68a96d42-bcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:eb:56:4b:10:94:f7:9d:9c:08:c2:c4:e3: 7f:30:15:53:c7:ee:66:62:6d:6a:25:5c:8e:d4:a3: 1f:f9:ea:bc:59:53:1d:aa:b1:18:ee:6b:26:74:c4: 8c:b4:ae:e2:7b:6b:8d:54:45:13:92:2e:6c:bd:ff: 32:e4:6c:2b:41:b5:de:92:6b:de:1e:ac:84:2e:d7: 92:3a:08:4b:d0:9d:5f:aa:46:b0:de:d2:c9:62:1d: d2:23:8a:b9:11:ba:4d:e8:60:eb:f7:43:17:e6:56: 76:37:ef:be:71:83:a6:69:b1:88:e0:3b:f3:6a:9b: 9c:08:f7:be:21:64:58:a3:bb:63:6a:b8:f5:01:31: a8:29:54:c0:be:f4:71:9a:cc:cf:9a:5f:9f:56:ff: 6b:e6:cf:ff:49:a0:ec:c5:8e:47:90:e6:6f:4a:c3: d0:45:b1:80:86:10:d8:87:41:e2:9a:01:49:6c:24: 0c:09:e6:29:93:5a:3e:d8:0e:b2:17:7c:3b:25:07: e3:cd:9d:a9:bc:5c:e8:3c:6d:67:4c:20:a4:42:3a: 58:16:1b:a3:54:09:30:3c:a5:c4:ec:94:9b:c2:12: 54:77:b2:9a:5e:c3:db:c6:8d:39:02:8e:ec:4f:3d: ef:4f:ec:c1:b9:99:33:46:1f:e2:61:29:49:c7:ba: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:4B:2B:6F:DD:F1:A8:93:7D:4C:45:71:44:B0:75:16:6E:15:9B X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7e:39:56:f0:fa:7c:1d:97:94:80:15:68:e5:2c:f8:5d:73: 74:91:82:ef:13:7f:17:38:d9:19:c2:6b:12:65:80:e1:6e:91: 7b:a2:67:2e:a3:01:0c:c6:5d:2b:50:72:35:a7:42:dd:89:89: 99:a4:99:a0:86:9f:c0:bb:3a:3c:9a:d9:e4:14:33:0c:bb:96: 30:94:b1:8b:38:fb:91:28:ce:fd:4b:9b:5b:60:18:e4:ae:08: e2:56:58:ad:ba:12:5b:b9:ad:54:a9:dc:07:e4:d1:7a:39:94: 59:2b:61:67:25:9c:1a:d9:ff:92:2a:d0:2b:12:aa:9c:e8:69: 66:c4:b3:03:be:5d:34:bc:87:27:b0:3e:09:ce:35:b1:04:84: 6d:27:0d:ae:3e:f6:94:85:bd:94:d8:e3:63:ad:57:80:fa:12: 63:aa:7a:50:e3:ad:89:41:db:6e:90:10:79:3f:47:2f:45:22: 37:17:41:ac:03:d4:49:5f:c9:40:a0:44:95:63:6a:f2:89:3c: bc:5e:1d:e1:07:79:c6:04:3f:cf:a0:8f:99:1b:88:c3:8f:a7: 17:09:b2:5b:3b:a1:55:d6:38:41:42:09:1d:ab:d0:97:88:dd: d1:6e:13:a6:ea:03:b8:7a:c3:1a:d1:8a:12:fe:6b:4b:8f:f6: 8b:c6:53:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA4MjMwNzI2NThaFw0yNTA4MzAwNzI2NThaMBgxFjAUBgNV BAMTDTY4YTk2ZDQyLWJjYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/AetWSxCU952cCMLE438wFVPH7mZibWolXI7Uox/56rxZUx2qsRjuayZ0xIy0 ruJ7a41URROSLmy9/zLkbCtBtd6Sa94erIQu15I6CEvQnV+qRrDe0sliHdIjirkR uk3oYOv3QxfmVnY3775xg6ZpsYjgO/Nqm5wI974hZFiju2NquPUBMagpVMC+9HGa zM+aX59W/2vmz/9JoOzFjkeQ5m9Kw9BFsYCGENiHQeKaAUlsJAwJ5imTWj7YDrIX fDslB+PNnam8XOg8bWdMIKRCOlgWG6NUCTA8pcTslJvCElR3sppew9vGjTkCjuxP Pe9P7MG5mTNGH+JhKUnHurTFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsa5LK2/d 8aiTfUxFcUSwdRZuFZswHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGF+OVbw+nwdl5SAFWjlLPhdc3SRgu8Tfxc42RnCaxJlgOFukXuiZy6j AQzGXStQcjWnQt2JiZmkmaCGn8C7Ojya2eQUMwy7ljCUsYs4+5Eozv1Lm1tgGOSu COJWWK26Elu5rVSp3Afk0Xo5lFkrYWclnBrZ/5Iq0CsSqpzoaWbEswO+XTS8hyew PgnONbEEhG0nDa4+9pSFvZTY42OtV4D6EmOqelDjrYlB226QEHk/Ry9FIjcXQawD 1ElfyUCgRJVjavKJPLxeHeEHecYEP8+gj5kbiMOPpxcJsls7oVXWOEFCCR2r0JeI 3dFuE6bqA7h6wxrRihL+a0uP9ovGUyY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:58 2025 by rpki-client