$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: e1EP5pBudyYLvwbkMZEnyTnBcPK0RUYop3vJPYa47Dw= Subject key identifier: E7:89:A1:B4:40:C2:48:A0:01:77:CF:4B:E7:19:8B:F4:AE:A3:B7:96 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09E6 Signing time: Wed 02 Jul 2025 20:07:27 +0000 Manifest this update: Wed 02 Jul 2025 20:07:26 +0000 Manifest next update: Wed 09 Jul 2025 20:07:26 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: k0fLWSIPIh6qVt3a+yC9evvqYHswMY8bgIFt/yzO9YI=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Jul 2 20:07:26 2025 GMT Not After : Jul 9 20:07:26 2025 GMT Subject: CN=6865917f-d12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ea:35:b5:95:95:64:7d:48:59:12:9d:40:bc: 70:49:7e:a2:74:5b:8f:6d:82:b6:7b:fd:7b:c9:bd: a1:f7:52:25:95:e6:bb:6f:6b:65:15:9b:80:39:0a: bc:fa:86:cd:51:2e:b4:bc:f9:93:9f:99:69:72:77: 52:11:d4:72:be:93:70:9d:20:6e:15:76:09:c9:2e: 6a:77:2e:0e:cd:12:75:6b:f2:4b:63:4e:53:9e:83: 93:b9:98:00:90:a3:9f:30:90:e1:85:e6:d4:3c:19: e5:0a:04:57:9e:c8:19:d5:21:64:cf:13:86:58:f0: c1:71:9d:9b:e4:c7:25:af:26:12:b7:41:80:8d:4b: ed:b4:fa:7d:39:18:6b:e4:76:39:63:3a:15:56:83: fb:7b:8c:ae:d3:29:6e:6b:bd:0f:b4:47:5e:41:f5: 6e:d8:83:2a:ff:e6:1e:fa:0d:c4:1b:6e:b7:7b:e7: 29:96:10:69:48:ff:21:96:a8:f2:71:4a:47:9d:79: 06:7b:34:38:d6:1c:48:db:f6:f7:30:57:66:18:9c: 9b:db:f0:4d:2f:75:57:ab:55:83:c0:1c:a0:99:9f: 04:6d:d7:2a:02:d5:ad:1e:4f:d8:17:22:86:81:69: 08:a3:f9:25:d5:e8:6f:c2:81:db:34:86:50:10:bf: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:A1:B4:40:C2:48:A0:01:77:CF:4B:E7:19:8B:F4:AE:A3:B7:96 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b6:ba:ba:00:bf:61:c2:d2:f9:c4:bb:0c:16:bc:79:90:3f: 14:ad:12:e9:4a:b3:ca:e1:4c:92:f2:26:10:6e:21:11:07:64: ad:cd:3a:51:b7:3b:f2:f3:77:ae:31:de:47:05:40:a9:e7:68: d2:03:0a:10:71:8a:2c:5c:5d:7b:94:39:61:7f:17:81:f0:e6: a0:aa:46:c7:26:1a:79:9b:7a:92:1e:ea:a9:20:32:08:a8:cc: 3a:09:8f:ff:9c:6f:cd:14:d1:fd:41:3e:30:95:7a:52:fd:51: d5:68:97:0d:72:34:e0:5b:68:19:39:b7:14:82:3a:56:22:6b: d1:be:05:02:67:b3:a8:b7:ed:af:80:37:b2:f2:c3:73:61:97: 11:cf:fb:53:8d:01:ee:25:13:3e:f6:10:3d:63:be:26:43:f2: 68:3e:73:51:95:27:c5:42:35:5a:bb:b6:df:13:a0:79:cd:45: b7:3a:13:6f:61:f1:ad:30:e4:8d:db:d1:6c:55:f4:96:8e:1b: ba:20:1b:c5:f6:d7:af:61:7d:e9:c5:c0:b1:53:60:57:63:84: c3:7d:96:61:0b:5f:0c:f0:98:e3:09:27:85:52:4d:cc:b2:02: f1:2b:f5:4c:f5:b8:28:a6:87:3d:3c:a4:b5:fc:0d:e6:1d:2c: bc:13:fc:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwNzAyMjAwNzI2WhcNMjUwNzA5MjAwNzI2WjAYMRYwFAYD VQQDEw02ODY1OTE3Zi1kMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eo1tZWVZH1IWRKdQLxwSX6idFuPbYK2e/17yb2h91Illea7b2tlFZuAOQq8 +obNUS60vPmTn5lpcndSEdRyvpNwnSBuFXYJyS5qdy4OzRJ1a/JLY05TnoOTuZgA kKOfMJDhhebUPBnlCgRXnsgZ1SFkzxOGWPDBcZ2b5MclryYSt0GAjUvttPp9ORhr 5HY5YzoVVoP7e4yu0ylua70PtEdeQfVu2IMq/+Ye+g3EG263e+cplhBpSP8hlqjy cUpHnXkGezQ41hxI2/b3MFdmGJyb2/BNL3VXq1WDwBygmZ8EbdcqAtWtHk/YFyKG gWkIo/kl1ehvwoHbNIZQEL9DvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeJobRA wkigAXfPS+cZi/Suo7eWMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWtrq6AL9hwtL5xLsMFrx5kD8UrRLpSrPK4UyS8iYQbiERB2StzTpR tzvy83euMd5HBUCp52jSAwoQcYosXF17lDlhfxeB8OagqkbHJhp5m3qSHuqpIDII qMw6CY//nG/NFNH9QT4wlXpS/VHVaJcNcjTgW2gZObcUgjpWImvRvgUCZ7Oot+2v gDey8sNzYZcRz/tTjQHuJRM+9hA9Y74mQ/JoPnNRlSfFQjVau7bfE6B5zUW3OhNv YfGtMOSN29FsVfSWjhu6IBvF9tevYX3pxcCxU2BXY4TDfZZhC18M8JjjCSeFUk3M sgLxK/VM9bgopoc9PKS1/A3mHSy8E/zn -----END CERTIFICATE-----Generated at Thu Jul 3 00:11:52 2025 by rpki-client