$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: NcxvjNX7ym+ytDDzyaoavyAW9DgeHpzTwB+Y5k95ekc= Subject key identifier: 1E:73:49:86:E7:85:33:9E:57:3F:60:7F:6D:16:2F:2E:F5:D5:26:D0 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 0124 Signing time: Thu 03 Jul 2025 04:54:57 +0000 Manifest this update: Thu 03 Jul 2025 04:54:57 +0000 Manifest next update: Thu 10 Jul 2025 04:54:57 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: 3ajaNGLAQjdJB/oll+RHpl9GcdFUwOWGO091t6/Gy3I=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Jul 3 04:54:57 2025 GMT Not After : Jul 10 04:54:57 2025 GMT Subject: CN=68660d21-8023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:f0:5b:75:17:9f:a2:58:62:d1:34:9f:2e: 9b:d5:93:0d:39:bc:95:da:49:8e:99:62:a8:18:f6: 71:00:e1:94:f8:a8:33:e3:b2:7f:e0:69:2c:60:8a: f3:da:ee:9f:98:99:53:12:2d:e8:a5:5e:93:c5:d8: f8:08:73:6a:d6:23:84:3a:7b:40:f9:f8:e9:e0:a1: 4d:a6:91:07:9c:e5:89:a6:89:a1:01:64:2d:69:a8: 2a:dd:2b:cc:1c:ad:17:a3:80:98:24:94:71:75:cd: d4:c6:4c:3b:0d:64:84:9c:6f:49:b1:80:b5:1d:27: e5:d6:07:c8:be:29:fd:bb:30:80:23:0f:3b:1e:35: 8c:d1:52:a7:a7:b2:2e:1d:30:c2:21:5a:31:3f:af: 67:99:5b:19:95:c4:37:48:f3:31:56:ea:62:8a:3a: c2:82:8d:a6:de:22:3c:32:55:5e:dc:1e:11:ec:5a: c4:ed:25:13:f9:90:39:2a:c5:51:01:0e:b4:4e:0b: 7a:67:a9:f6:a3:c1:f1:1d:96:71:1d:77:a0:7b:d9: de:9c:18:44:08:e5:b0:b4:53:e3:27:4b:08:c4:77: 11:79:fa:1e:c5:54:18:99:b5:a1:23:2e:29:0d:66: 04:89:a5:07:cf:f0:e1:ff:f4:2c:d2:8b:6f:e4:ab: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:49:86:E7:85:33:9E:57:3F:60:7F:6D:16:2F:2E:F5:D5:26:D0 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2b:c4:39:3b:7e:99:35:62:82:25:45:78:81:69:f7:c9:63: fe:c1:0c:3b:86:02:cb:39:b7:40:60:8e:fd:bc:13:92:8c:5d: 66:32:47:36:e9:6d:09:c0:eb:f4:63:62:aa:e6:75:6e:16:8c: aa:e0:af:67:42:ba:ef:f4:d0:75:7e:64:90:c5:f2:9c:77:d6: 42:aa:3f:f7:d9:88:93:25:00:c3:09:8b:6c:1c:76:05:ff:c0: c3:f6:cd:9f:72:b0:a6:00:93:bd:ba:5a:fb:ef:e8:31:d9:a2: bf:9f:69:11:42:c2:82:33:dc:f3:85:b5:23:3d:46:aa:b9:45: e4:eb:fd:c4:3b:91:39:64:c3:28:dd:68:fc:59:16:8f:11:ce: ee:3d:1d:0e:13:da:10:e6:01:12:18:04:a8:b4:22:6f:f1:be: 9e:16:42:77:1b:ab:6a:9b:71:bd:3d:67:b3:1b:d5:9b:e0:99: ea:33:82:24:0d:ec:a5:c7:73:5e:08:7e:a4:79:39:2a:70:01: 04:b9:8e:5d:26:cf:27:c0:9e:10:c9:9c:a5:bc:3d:bd:50:c0: 27:4a:00:3a:7d:e8:43:c9:76:80:c0:2f:df:5f:d5:3e:ce:5b: a1:a4:b6:ce:7a:3e:98:a9:7c:65:37:e3:6c:21:5b:ab:84:5e: 47:60:ae:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUwNzAzMDQ1NDU3WhcNMjUwNzEwMDQ1NDU3WjAYMRYwFAYD VQQDEw02ODY2MGQyMS04MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1PwW3UXn6JYYtE0ny6b1ZMNObyV2kmOmWKoGPZxAOGU+Kgz47J/4GksYIrz 2u6fmJlTEi3opV6Txdj4CHNq1iOEOntA+fjp4KFNppEHnOWJpomhAWQtaagq3SvM HK0Xo4CYJJRxdc3Uxkw7DWSEnG9JsYC1HSfl1gfIvin9uzCAIw87HjWM0VKnp7Iu HTDCIVoxP69nmVsZlcQ3SPMxVupiijrCgo2m3iI8MlVe3B4R7FrE7SUT+ZA5KsVR AQ60Tgt6Z6n2o8HxHZZxHXege9nenBhECOWwtFPjJ0sIxHcRefoexVQYmbWhIy4p DWYEiaUHz/Dh//Qs0otv5Ks/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5zSYbn hTOeVz9gf20WLy711SbQMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5K8Q5O36ZNWKCJUV4gWn3yWP+wQw7hgLLObdAYI79vBOSjF1mMkc2 6W0JwOv0Y2Kq5nVuFoyq4K9nQrrv9NB1fmSQxfKcd9ZCqj/32YiTJQDDCYtsHHYF /8DD9s2fcrCmAJO9ulr77+gx2aK/n2kRQsKCM9zzhbUjPUaquUXk6/3EO5E5ZMMo 3Wj8WRaPEc7uPR0OE9oQ5gESGASotCJv8b6eFkJ3G6tqm3G9PWezG9Wb4JnqM4Ik Deylx3NeCH6keTkqcAEEuY5dJs8nwJ4QyZylvD29UMAnSgA6fehDyXaAwC/fX9U+ zluhpLbOej6YqXxlN+NsIVurhF5HYK4k -----END CERTIFICATE-----Generated at Sat Jul 5 01:54:45 2025 by rpki-client