$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: KzdWNh6CwX2R1StptSzsSKz85MtOtJ7cRYr1r7C+vfw= Subject key identifier: 53:39:00:C8:D0:40:C3:52:7F:38:89:8A:C2:45:9F:16:2C:7C:34:43 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09CB Signing time: Mon 12 May 2025 19:47:12 +0000 Manifest this update: Mon 12 May 2025 19:47:11 +0000 Manifest next update: Mon 19 May 2025 19:47:11 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: /kIRs1UoliSInlvXgDJPH45+Gi/cWTF2N0FYBpkR4Eo=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: 7d4ZQMpLwZNv6c2aTJKagStC5pu82EAlUBC22iAZFbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: May 12 19:47:11 2025 GMT Not After : May 19 19:47:11 2025 GMT Subject: CN=6822503f-eebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:53:2b:ed:9d:ae:23:81:e1:e7:30:8e:de: 56:6c:ff:dc:81:4d:03:6b:aa:5a:e5:ad:19:fa:81: 05:cf:80:c5:a9:98:b2:8e:7d:22:c4:1f:28:d9:71: 83:d5:b9:25:0d:2c:f7:b7:35:0c:a9:e9:40:99:25: ee:42:ce:82:79:be:32:7a:d2:6f:15:d3:a6:ec:f4: d8:36:3b:93:53:a7:08:00:b9:73:07:bd:7d:26:21: 9d:73:52:35:9a:a7:a7:8d:f9:67:bb:55:89:87:55: b6:b8:69:d6:55:04:ac:f5:74:b0:f6:e7:79:56:07: c4:06:98:7a:88:96:16:5a:2c:d4:ac:98:43:f6:ae: c6:4e:ba:1c:4d:ba:75:73:41:d0:b4:ef:ac:d9:dd: ef:6f:a8:46:08:2d:fd:08:27:b9:ab:e7:07:5e:74: 4b:a1:6b:37:5d:36:ec:7f:86:01:52:31:7a:cb:32: 96:9d:8c:a0:0f:31:04:ff:9e:86:34:74:70:6a:94: a2:25:0b:5e:c8:af:79:a7:72:aa:ec:97:b8:94:dc: ea:97:85:64:df:ae:db:35:9d:39:3e:11:a8:ec:ec: b4:81:5d:08:6a:25:af:e0:db:09:0d:c5:1b:67:5e: 12:f5:34:16:4f:4c:72:22:34:ab:be:53:a0:5a:5b: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:00:C8:D0:40:C3:52:7F:38:89:8A:C2:45:9F:16:2C:7C:34:43 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:5c:89:e1:ca:e0:3c:a5:f2:59:bb:c1:78:46:94:51:31: 59:36:5f:a3:fb:e2:c8:45:01:18:13:4d:3a:02:35:8f:a1:31: 14:db:dd:6c:f2:00:9f:8a:3b:48:0a:6f:cb:9d:66:43:c7:1f: 1c:31:45:8c:4f:e6:db:87:e5:26:e2:8e:55:0c:10:9f:04:41: eb:85:22:4c:b3:2e:ba:0f:26:d4:3e:32:98:2a:8b:e3:73:73: a9:8f:c8:89:22:47:bf:81:e9:81:14:d8:22:bd:5f:ed:2d:68: df:6a:32:a6:0c:37:3c:ef:91:6f:47:58:e8:ea:20:9e:03:df: dd:a7:ac:1d:bd:2c:1b:54:b9:7a:6f:84:65:36:4a:83:3b:d9: b0:3e:3b:8b:33:42:6a:40:82:99:75:cc:b1:1e:b3:84:e7:6e: 69:7d:40:4d:33:13:7f:d5:53:28:48:5e:8d:6f:b1:09:69:77: 33:75:92:98:5d:51:6d:76:09:67:3d:8a:73:ea:19:d4:9d:23: b3:5f:0f:6d:a6:e2:c3:b6:85:64:32:c1:45:f4:27:2a:24:ca: f2:7d:2b:d1:75:75:c6:18:72:33:df:a4:6f:fa:89:f3:75:38: de:66:52:a3:07:11:4a:d1:7c:04:ad:fe:a9:d4:14:3b:09:d1: 72:dc:59:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwNTEyMTk0NzExWhcNMjUwNTE5MTk0NzExWjAYMRYwFAYD VQQDEw02ODIyNTAzZi1lZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv5TK+2driOB4ecwjt5WbP/cgU0Da6pa5a0Z+oEFz4DFqZiyjn0ixB8o2XGD 1bklDSz3tzUMqelAmSXuQs6Ceb4yetJvFdOm7PTYNjuTU6cIALlzB719JiGdc1I1 mqenjflnu1WJh1W2uGnWVQSs9XSw9ud5VgfEBph6iJYWWizUrJhD9q7GTrocTbp1 c0HQtO+s2d3vb6hGCC39CCe5q+cHXnRLoWs3XTbsf4YBUjF6yzKWnYygDzEE/56G NHRwapSiJQteyK95p3Kq7Je4lNzql4Vk367bNZ05PhGo7Oy0gV0IaiWv4NsJDcUb Z14S9TQWT0xyIjSrvlOgWlsyCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM5AMjQ QMNSfziJisJFnxYsfDRDMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbz1yJ4crgPKXyWbvBeEaUUTFZNl+j++LIRQEYE006AjWPoTEU291s 8gCfijtICm/LnWZDxx8cMUWMT+bbh+Um4o5VDBCfBEHrhSJMsy66DybUPjKYKovj c3Opj8iJIke/gemBFNgivV/tLWjfajKmDDc875FvR1jo6iCeA9/dp6wdvSwbVLl6 b4RlNkqDO9mwPjuLM0JqQIKZdcyxHrOE525pfUBNMxN/1VMoSF6Nb7EJaXczdZKY XVFtdglnPYpz6hnUnSOzXw9tpuLDtoVkMsFF9CcqJMryfSvRdXXGGHIz36Rv+onz dTjeZlKjBxFK0XwErf6p1BQ7CdFy3Fk+ -----END CERTIFICATE-----Generated at Wed May 14 10:26:20 2025 by rpki-client