$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: JM959B2EYdPH5mKk1D7cn/P9D5bIl1xJajKN5RlbeAc= Subject key identifier: E1:0C:E2:B4:CF:33:4B:2F:A4:87:31:BC:D2:33:52:1F:16:4B:42:0C Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 66 Signing time: Thu 03 Jul 2025 07:14:57 +0000 Manifest this update: Thu 03 Jul 2025 07:14:57 +0000 Manifest next update: Thu 10 Jul 2025 07:14:57 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: 3S43bLvEP3xobTMwwAw4qyvK5i5dPHtyIsMTPYzPB+I=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: oBdfX7J4SfTWAha0J5te4TT+MMNp1UK2JxnYA8w+Btw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: Jul 3 07:14:57 2025 GMT Not After : Jul 10 07:14:57 2025 GMT Subject: CN=68662df1-2b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:96:9c:0a:e6:c3:82:cf:52:80:07:75:4a: 5e:e8:38:77:70:d0:ab:c1:07:f5:d3:a5:0b:86:3a: 61:cf:1d:c0:9d:84:4d:68:79:52:be:3e:c4:ae:d5: 47:23:ac:69:c6:de:72:09:0e:31:eb:7c:5e:3e:99: ce:6e:da:33:06:a4:56:bb:c1:f3:ba:5c:40:59:04: f4:88:36:83:8e:89:78:37:61:59:d4:e8:52:4b:4f: b4:dd:fa:7c:c1:61:0a:2e:42:28:f7:55:87:f2:4d: 45:3e:b6:82:66:e0:c9:1e:6a:fb:7f:cd:a1:bc:07: 84:75:15:3a:84:5f:67:05:35:32:3d:ed:c4:74:7f: 65:17:23:de:31:1c:16:0c:0d:e9:7c:ff:a5:44:fb: 1e:88:78:45:fb:d9:2c:9b:74:2e:c2:8d:f7:0e:a2: f1:a3:d1:14:c1:f5:8b:d2:15:6a:45:f3:7b:a4:ee: db:e8:f3:3d:73:30:5f:f9:6b:bb:b9:1b:2e:42:28: 9b:b5:30:8b:a9:1f:58:26:4e:bd:9e:60:95:fa:55: dc:07:d2:bb:14:87:07:70:ab:5e:f5:3d:39:aa:bc: 4c:ef:bd:78:62:a5:9b:22:2b:f1:84:bf:f1:98:38: 7a:82:c2:30:3c:c1:0b:b4:96:38:fa:27:af:c6:f8: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0C:E2:B4:CF:33:4B:2F:A4:87:31:BC:D2:33:52:1F:16:4B:42:0C X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:92:b8:37:89:aa:df:16:1b:0e:51:d5:84:09:6d:23:58:be: 8c:24:d3:4a:91:53:f3:ad:ba:bc:0d:17:3c:b6:36:87:61:98: df:e2:55:12:76:c0:47:58:3a:2d:6b:5a:93:7d:2a:01:a4:7d: 49:2d:56:8a:d3:7a:28:9a:5d:d2:4e:b9:ad:3e:b9:22:29:03: 63:12:95:7d:ed:91:26:61:4a:58:81:f5:32:aa:cd:ae:38:bb: 1a:94:69:68:ac:a6:8f:6b:8b:86:80:11:b0:06:6a:49:f9:64: cd:da:21:ce:39:a0:51:d9:b9:3c:fd:bb:a5:50:ed:86:f6:1e: 27:fb:ea:57:1f:a6:63:fc:de:36:4c:f5:41:1a:bd:71:79:05: c3:95:01:d8:25:2a:d6:a1:97:5e:3c:db:1f:cf:a1:58:e7:c7: 21:b4:5e:63:6f:8a:42:bf:f6:08:62:7b:89:5b:b6:31:fd:11: 07:ee:78:4a:a3:f7:33:89:19:e6:54:a6:54:4a:25:50:42:17: ce:bc:29:38:6a:8a:47:f3:8d:74:a7:4a:f4:75:86:9c:a2:48: 74:59:d2:d1:06:b4:89:9d:ce:4d:5f:12:9e:3a:33:f4:b1:fe: 73:9e:0a:6c:af:08:1d:ee:c2:5d:6b:88:64:86:a0:04:c1:88: 42:3d:0d:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMkE1NzM5NkRDRTcwRUI1NkMwNzNERTFBNzYwQjYyQTcy MkIwNDc4RTAeFw0yNTA3MDMwNzE0NTdaFw0yNTA3MTAwNzE0NTdaMBgxFjAUBgNV BAMTDTY4NjYyZGYxLTJiMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAApacCubDgs9SgAd1Sl7oOHdw0KvBB/XTpQuGOmHPHcCdhE1oeVK+PsSu1Ucj rGnG3nIJDjHrfF4+mc5u2jMGpFa7wfO6XEBZBPSINoOOiXg3YVnU6FJLT7Td+nzB YQouQij3VYfyTUU+toJm4Mkeavt/zaG8B4R1FTqEX2cFNTI97cR0f2UXI94xHBYM Del8/6VE+x6IeEX72SybdC7CjfcOovGj0RTB9YvSFWpF83uk7tvo8z1zMF/5a7u5 Gy5CKJu1MIupH1gmTr2eYJX6VdwH0rsUhwdwq171PTmqvEzvvXhipZsiK/GEv/GY OHqCwjA8wQu0ljj6J6/G+ONrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4QzitM8z Sy+khzG80jNSHxZLQgwwHwYDVR0jBBgwFoAUKlc5bc5w61bAc94adgtipyKwR44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0FGNDFCRDEwQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2xjNWJjNXc2MWJBYzk0YWRndGlweUt3UjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0FGNDFCRDEwQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFi QWM5NGFkZ3RpcHlLd1I0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAuSuDeJqt8WGw5R1YQJbSNYvowk00qRU/OturwNFzy2NodhmN/iVRJ2 wEdYOi1rWpN9KgGkfUktVorTeiiaXdJOua0+uSIpA2MSlX3tkSZhSliB9TKqza44 uxqUaWispo9ri4aAEbAGakn5ZM3aIc45oFHZuTz9u6VQ7Yb2Hif76lcfpmP83jZM 9UEavXF5BcOVAdglKtahl1482x/PoVjnxyG0XmNvikK/9ghie4lbtjH9EQfueEqj 9zOJGeZUplRKJVBCF868KThqikfzjXSnSvR1hpyiSHRZ0tEGtImdzk1fEp46M/Sx /nOeCmyvCB3uwl1riGSGoATBiEI9De8= -----END CERTIFICATE-----Generated at Fri Jul 4 21:25:59 2025 by rpki-client