$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: NxI5E5L1HLDcbfjHKGSrV4BGOE8fiKAy78WCL6NEwtE= Subject key identifier: E1:F9:10:88:A6:4C:A0:3B:54:D9:84:15:25:EB:B1:E1:9B:1D:24:21 Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 03A8 Signing time: Tue 01 Jul 2025 01:22:15 +0000 Manifest this update: Tue 01 Jul 2025 01:22:15 +0000 Manifest next update: Tue 08 Jul 2025 01:22:15 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: XHCqE/ZQOD8AbRSb23kp1Gmnn4rPne/OUyhKqESMpOU=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Jul 1 01:22:15 2025 GMT Not After : Jul 8 01:22:15 2025 GMT Subject: CN=68633847-f1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:03:16:be:09:22:ee:e1:af:ae:13:38:0e: ba:f6:6c:40:ee:9c:b2:10:7c:9d:c7:ad:2e:d2:53: 1e:0b:f1:4b:65:d3:51:ee:5d:3c:87:ac:9c:ab:b5: 01:4a:ea:43:15:76:99:d8:bc:03:52:2e:bc:95:88: 24:4c:6d:f0:96:ec:73:2e:c6:b8:35:49:dc:cb:4a: 80:f4:ae:e3:e1:68:37:e4:90:d4:ab:2b:ed:4e:4b: c7:86:c9:88:21:43:9a:97:a6:a2:1f:49:2c:cd:4f: 79:ad:bf:2b:04:8c:c2:79:74:b6:93:89:e2:6d:68: 4d:6a:2c:1f:05:58:47:31:28:83:fb:60:b4:9b:1b: 8d:a1:54:72:b5:9e:99:72:54:d8:d8:87:ea:a1:a4: 0c:b1:93:c1:ba:0a:f6:63:51:b6:07:02:12:f8:77: 51:0b:34:b0:3b:f4:0d:48:6c:62:18:4c:df:1b:52: 6f:b1:c6:c2:5c:68:51:5f:e8:5a:1d:83:6f:74:a6: 0b:1e:45:69:66:c2:54:76:ec:b3:fd:63:06:26:48: fa:20:77:dd:2e:68:37:f2:d1:37:e0:ff:8a:ed:14: 0c:a8:c8:66:77:78:eb:2d:71:b6:28:a6:7f:70:c5: dd:94:aa:c7:0c:cd:9a:fc:54:fa:e5:a7:fb:ff:9d: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F9:10:88:A6:4C:A0:3B:54:D9:84:15:25:EB:B1:E1:9B:1D:24:21 X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:25:ff:4a:f8:71:8f:d2:7a:79:70:84:18:a3:a6:d1:c2:c5: 3b:47:8a:67:12:ce:04:e9:e3:97:24:b8:85:94:0d:1b:7e:90: 4b:95:ed:e0:38:c7:42:ef:81:ad:76:81:92:ee:b5:3e:6c:ee: f3:6c:71:10:07:a5:ea:3f:50:4c:a1:13:d5:71:63:25:d3:14: 77:56:22:1d:12:4e:3d:0b:0d:19:e2:1b:0a:2e:d7:91:a4:d9: d9:e3:77:ad:b3:80:b9:ad:bf:09:6c:35:0a:a0:dc:11:cc:72: 19:68:3e:21:85:7e:42:02:e6:15:0d:66:b6:e6:4f:c4:3e:7c: 0b:de:8a:1c:36:00:0f:74:66:fd:17:bd:c2:59:04:59:b4:e4: 70:28:ac:bb:a6:e1:28:5f:4e:56:99:12:9c:87:5d:37:c3:41: e8:08:10:fe:6f:db:4a:99:d6:a1:58:69:2d:c7:3a:d3:98:d0: 04:42:cf:10:fc:e7:60:02:79:09:f3:00:b1:ca:47:9a:12:2e: af:3f:c8:aa:11:54:98:cf:de:de:2f:2d:42:0f:ec:a9:94:5d: ef:08:95:8e:92:31:6a:af:e6:30:b1:9c:4c:43:aa:ca:d3:70: 86:60:de:59:13:f6:d2:f9:90:1a:3f:90:08:b0:3b:ad:62:fa: 11:64:3d:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjUwNzAxMDEyMjE1WhcNMjUwNzA4MDEyMjE1WjAYMRYwFAYD VQQDEw02ODYzMzg0Ny1mMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zMDFr4JIu7hr64TOA669mxA7pyyEHydx60u0lMeC/FLZdNR7l08h6ycq7UB SupDFXaZ2LwDUi68lYgkTG3wluxzLsa4NUncy0qA9K7j4Wg35JDUqyvtTkvHhsmI IUOal6aiH0kszU95rb8rBIzCeXS2k4nibWhNaiwfBVhHMSiD+2C0mxuNoVRytZ6Z clTY2IfqoaQMsZPBugr2Y1G2BwIS+HdRCzSwO/QNSGxiGEzfG1JvscbCXGhRX+ha HYNvdKYLHkVpZsJUduyz/WMGJkj6IHfdLmg38tE34P+K7RQMqMhmd3jrLXG2KKZ/ cMXdlKrHDM2a/FT65af7/50nmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH5EIim TKA7VNmEFSXrseGbHSQhMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJf9K+HGP0np5cIQYo6bRwsU7R4pnEs4E6eOXJLiFlA0bfpBLle3g OMdC74GtdoGS7rU+bO7zbHEQB6XqP1BMoRPVcWMl0xR3ViIdEk49Cw0Z4hsKLteR pNnZ43ets4C5rb8JbDUKoNwRzHIZaD4hhX5CAuYVDWa25k/EPnwL3oocNgAPdGb9 F73CWQRZtORwKKy7puEoX05WmRKch103w0HoCBD+b9tKmdahWGktxzrTmNAEQs8Q /OdgAnkJ8wCxykeaEi6vP8iqEVSYz97eLy1CD+yplF3vCJWOkjFqr+YwsZxMQ6rK 03CGYN5ZE/bS+ZAaP5AIsDutYvoRZD2b -----END CERTIFICATE-----Generated at Wed Jul 2 19:10:30 2025 by rpki-client