$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json) Hash identifier: aVLAaHKvJXiAnN4LNENEmjCVRzi8BW30otojMn/H/IM= Subject key identifier: 34:EA:57:56:6B:80:92:7F:0D:C9:F3:15:96:91:B0:59:1B:51:CB:44 Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft Manifest number: 0174 Signing time: Tue 01 Jul 2025 04:13:24 +0000 Manifest this update: Tue 01 Jul 2025 04:13:23 +0000 Manifest next update: Tue 08 Jul 2025 04:13:23 +0000 Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: lvnHFOxHFXbTaHAagPbpFY86FVZDiyifLi/BFTwW/HQ=) 2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: zTYXuX3GDZ63v54RvQHdui7ccszwzNrfqOTF6/FnToE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Jul 1 04:13:23 2025 GMT Not After : Jul 8 04:13:23 2025 GMT Subject: CN=68636064-cbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:1b:6f:28:05:e0:d4:23:68:12:8d:c4:27: 5e:b8:04:0c:ee:95:dc:30:e9:1e:14:e0:c7:30:74: 77:d1:49:6b:a4:38:50:0d:71:5c:19:27:f1:5e:99: 31:cf:f3:1e:63:31:bc:db:4f:b5:66:3c:aa:c8:2a: 6a:d7:66:c2:33:db:94:68:f0:b2:d8:f7:de:6e:8f: 8b:f6:24:88:aa:97:61:b8:e6:62:60:61:33:52:04: 0a:5c:e3:5c:ea:85:bc:94:00:97:8e:3b:18:6e:61: 48:b3:42:f6:0a:f5:35:f4:7f:30:f6:0c:f9:e5:d6: c2:84:a6:eb:a3:4f:54:4f:ed:d0:4a:f6:5f:db:9a: f2:9a:c0:30:ac:37:8a:68:75:65:ec:ce:f8:b2:77: 97:af:a6:bf:34:08:e5:fc:57:cb:93:00:bd:7e:cd: f4:8a:a2:a3:00:c6:60:72:03:6b:45:07:97:17:5b: 13:cc:cd:ae:ed:70:a1:87:10:0c:ef:0d:49:66:7e: a3:53:e3:02:a1:1b:2b:df:1a:17:c4:ce:25:fc:ae: b6:80:63:af:82:88:fe:43:78:81:49:a4:22:e8:b4: 03:3c:10:84:cb:d5:03:22:65:5c:ee:e7:e4:ac:ad: 46:5e:43:26:17:9e:62:06:a7:37:e4:e0:e0:d3:0a: bc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EA:57:56:6B:80:92:7F:0D:C9:F3:15:96:91:B0:59:1B:51:CB:44 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:bc:8c:b1:97:87:a9:61:19:eb:93:66:61:f6:75:c2:b4: 85:9a:a6:5f:18:43:5b:c7:1e:76:7a:7c:89:6f:df:87:93:15: 7c:5a:0d:39:c1:91:3a:f5:01:17:5b:80:f6:04:b9:47:cd:33: e1:3c:73:c4:89:4a:04:57:7e:a2:8e:bc:67:0b:02:3a:ad:db: af:66:4b:bb:f6:d9:83:2d:b5:0b:f1:43:50:92:e3:30:1c:c5: 41:32:7a:b0:10:e5:ab:f2:77:ec:ef:ae:2c:bb:9f:5d:d7:6d: ea:e0:0a:cd:7f:ff:85:98:17:52:3e:f6:ea:e6:1d:a0:ee:e7: c4:61:09:6e:5a:07:55:cf:67:5f:d6:f3:4f:47:de:79:3b:a8: 5b:de:99:75:a1:27:b2:e8:21:b6:6e:4f:80:35:af:7f:fe:c9: 90:05:7a:d2:56:d9:22:21:cf:56:3a:b2:02:50:5d:8a:09:49: c8:b4:e3:56:7e:2a:52:9b:7f:ad:76:15:d7:a1:2f:04:a1:10: f8:36:f6:ce:c4:af:1f:52:a1:50:97:05:7d:37:1b:33:60:d3: e1:91:f3:ae:cf:25:87:c9:c3:7d:4a:9e:62:e7:f5:cb:af:d2: b3:30:be:f3:33:c2:1d:78:db:61:83:19:4b:f8:fe:8d:63:15: 71:13:30:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjUwNzAxMDQxMzIzWhcNMjUwNzA4MDQxMzIzWjAYMRYwFAYD VQQDEw02ODYzNjA2NC1jYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojEbbygF4NQjaBKNxCdeuAQM7pXcMOkeFODHMHR30UlrpDhQDXFcGSfxXpkx z/MeYzG820+1ZjyqyCpq12bCM9uUaPCy2Pfebo+L9iSIqpdhuOZiYGEzUgQKXONc 6oW8lACXjjsYbmFIs0L2CvU19H8w9gz55dbChKbro09UT+3QSvZf25rymsAwrDeK aHVl7M74sneXr6a/NAjl/FfLkwC9fs30iqKjAMZgcgNrRQeXF1sTzM2u7XChhxAM 7w1JZn6jU+MCoRsr3xoXxM4l/K62gGOvgoj+Q3iBSaQi6LQDPBCEy9UDImVc7ufk rK1GXkMmF55iBqc35ODg0wq8twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTqV1Zr gJJ/DcnzFZaRsFkbUctEMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZFNC9BQkU3RTA1NjFFMEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3 SUFyQTZmcEhacEZkZEwtZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc27yMsZeHqWEZ65NmYfZ1wrSFmqZfGENbxx52enyJb9+HkxV8Wg05 wZE69QEXW4D2BLlHzTPhPHPEiUoEV36ijrxnCwI6rduvZku79tmDLbUL8UNQkuMw HMVBMnqwEOWr8nfs764su59d123q4ArNf/+FmBdSPvbq5h2g7ufEYQluWgdVz2df 1vNPR955O6hb3pl1oSey6CG2bk+ANa9//smQBXrSVtkiIc9WOrICUF2KCUnItONW fipSm3+tdhXXoS8EoRD4NvbOxK8fUqFQlwV9NxszYNPhkfOuzyWHycN9Sp5i5/XL r9KzML7zM8IdeNthgxlL+P6NYxVxEzB1 -----END CERTIFICATE-----Generated at Wed Jul 2 15:20:57 2025 by rpki-client