$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: Mdxby9Y9khRae2A/vygElCpOzJgeuNZKCfPcIBC0lTg= Subject key identifier: 42:E4:12:37:7A:3D:B1:21:72:2F:A0:DB:11:B8:DC:2A:7C:98:FA:18 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 27 Signing time: Thu 15 May 2025 07:07:35 +0000 Manifest this update: Thu 15 May 2025 07:07:34 +0000 Manifest next update: Thu 22 May 2025 07:07:34 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: bjQiDuwxVZeb5lYz4xvikvgL4pyeN8dHS1kYJ6WjFAs=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: May 15 07:07:34 2025 GMT Not After : May 22 07:07:34 2025 GMT Subject: CN=682592b7-b7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:3a:f3:8a:50:00:7c:43:70:3f:8d:2f:b0: cd:c1:9d:70:03:49:5d:6c:2f:8b:01:d1:64:d4:f8: 97:1d:7e:48:1f:74:c8:0c:38:62:6b:68:d5:7b:35: 2b:9a:80:1a:8b:de:02:50:b1:5e:29:95:7b:ff:86: ea:8e:0e:1c:54:dd:84:44:a1:bf:42:88:1c:aa:50: 90:ea:b2:6c:a2:d7:a5:69:ee:b7:c7:c0:c3:43:d3: 9e:40:18:47:84:21:59:37:a1:0e:90:e2:1d:22:1d: fd:c7:b2:e8:f6:e2:6a:f5:7e:1b:c1:df:d3:d5:30: 86:f4:52:62:5a:e7:1b:e7:65:09:74:ab:01:ae:4d: 61:e8:e1:59:f1:40:3c:f4:cf:80:f0:c5:3c:29:9c: bf:b5:f5:f0:c9:0f:eb:c5:21:75:38:6b:95:cd:50: 1d:b9:86:6e:1a:07:48:b3:e5:b7:50:d1:63:ae:39: 4c:65:37:27:fe:88:79:44:67:63:f1:24:dd:3a:e7: 45:b7:8d:4d:5a:15:52:c5:3c:ee:b1:de:8d:94:23: 03:77:15:c7:37:23:38:ac:db:ab:dc:3f:43:96:3c: 5e:fe:4a:74:3d:2b:30:44:00:c4:f3:1e:8e:37:98: 09:25:7f:d0:0d:38:14:6a:aa:c3:90:68:ae:70:56: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E4:12:37:7A:3D:B1:21:72:2F:A0:DB:11:B8:DC:2A:7C:98:FA:18 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5b:34:ad:1a:59:30:9b:f2:95:a1:3e:f1:e8:e6:62:2d:62: 12:61:30:e9:3c:b6:82:c3:d7:c7:dd:1e:e6:e6:05:7e:6e:80: 7d:b6:4f:72:35:c2:61:d0:29:31:29:6b:c8:9c:7f:41:82:f9: ae:b7:49:db:27:8b:da:a7:7f:bf:fc:19:5b:9f:80:36:68:22: 8b:96:d5:8a:2e:16:b2:dd:4b:12:8e:e7:1b:72:cd:c7:2e:07: 72:2f:e7:a3:6a:aa:a0:b4:29:3c:8b:02:31:23:18:6b:f5:be: 13:80:5b:49:e9:b1:d3:07:c9:55:5b:73:8e:f7:5f:37:80:05: 54:e7:ab:65:c1:64:7d:47:5f:45:aa:ca:77:e6:49:a3:f4:be: 5f:66:ff:f1:06:12:23:14:40:11:2f:11:2c:28:69:7f:ad:43: 8d:51:30:b8:bf:34:56:8d:7a:ae:2a:0b:1c:bb:e1:42:4e:5e: 77:30:d4:29:d6:da:72:ec:54:ed:8d:11:51:22:c6:65:1e:e0: 0c:e0:89:71:9c:f2:4e:c5:fa:19:cd:c1:37:71:b4:d3:1f:d2: fd:e8:11:17:dd:f0:45:83:bb:55:06:b1:3c:a0:7e:3d:ae:e7: 7f:a8:e1:79:be:3e:a4:45:03:e9:b7:c4:97:6c:5b:27:9c:d0: 9a:85:a0:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA1MTUwNzA3MzRaFw0yNTA1MjIwNzA3MzRaMBgxFjAUBgNV BAMTDTY4MjU5MmI3LWI3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpwjrzilAAfENwP40vsM3BnXADSV1sL4sB0WTU+JcdfkgfdMgMOGJraNV7NSua gBqL3gJQsV4plXv/huqODhxU3YREob9CiByqUJDqsmyi16Vp7rfHwMND055AGEeE IVk3oQ6Q4h0iHf3Hsuj24mr1fhvB39PVMIb0UmJa5xvnZQl0qwGuTWHo4VnxQDz0 z4DwxTwpnL+19fDJD+vFIXU4a5XNUB25hm4aB0iz5bdQ0WOuOUxlNyf+iHlEZ2Px JN0650W3jU1aFVLFPO6x3o2UIwN3Fcc3Izis26vcP0OWPF7+SnQ9KzBEAMTzHo43 mAklf9ANOBRqqsOQaK5wVqFXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQuQSN3o9 sSFyL6DbEbjcKnyY+hgwHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1bNK0aWTCb8pWhPvHo5mItYhJhMOk8toLD18fdHubmBX5ugH22T3I1 wmHQKTEpa8icf0GC+a63Sdsni9qnf7/8GVufgDZoIouW1YouFrLdSxKO5xtyzccu B3Iv56NqqqC0KTyLAjEjGGv1vhOAW0npsdMHyVVbc473XzeABVTnq2XBZH1HX0Wq ynfmSaP0vl9m//EGEiMUQBEvESwoaX+tQ41RMLi/NFaNeq4qCxy74UJOXncw1CnW 2nLsVO2NEVEixmUe4AzgiXGc8k7F+hnNwTdxtNMf0v3oERfd8EWDu1UGsTygfj2u 53+o4Xm+PqRFA+m3xJdsWyec0JqFoJ8= -----END CERTIFICATE-----Generated at Fri May 16 14:38:18 2025 by rpki-client