$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json) Hash identifier: j5hUCPw0Bfq/hfndkyoUtL9szkbaUxIA3/mGygo5hGg= Subject key identifier: AA:81:A1:AE:59:29:5E:0F:22:E4:65:28:C5:33:99:F0:F4:71:D2:5F Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft Manifest number: 0255 Signing time: Sat 19 Jul 2025 02:14:36 +0000 Manifest this update: Sat 19 Jul 2025 02:14:36 +0000 Manifest next update: Sat 26 Jul 2025 02:14:36 +0000 Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: gHw7iMGoyH67cYXuT0icHiFdbqauIJPzTyTLe2xOInU=) 2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: 6xgX7RCx1jR+s1bDY/KUKo4N6DkkwUVmskiN+xXDBfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Validity Not Before: Jul 19 02:14:36 2025 GMT Not After : Jul 26 02:14:36 2025 GMT Subject: CN=687aff8c-b561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:f9:e6:c6:4a:92:c1:de:72:25:b5:61:98: d6:34:37:d3:6a:5d:5e:88:56:d7:ff:63:92:55:98: c5:84:ee:ec:f9:b1:1e:53:a7:34:17:45:75:f0:71: 46:07:30:30:d4:1c:43:a0:eb:f1:1c:37:b6:a9:94: 40:ee:bc:ba:da:4a:82:68:68:3f:44:c8:9b:78:8e: 8f:f5:16:15:6e:cf:00:31:2e:4f:a6:bd:c0:b2:dd: 9c:21:57:e2:67:59:bf:63:a4:21:a9:57:83:1e:ae: 6d:c2:32:b7:3a:4f:98:dd:b1:05:b4:68:4e:91:07: f7:25:30:f1:8b:ea:5e:f4:b9:55:8c:b3:24:ff:d6: c4:52:35:43:84:2f:b1:5e:ec:c8:21:7e:fc:a3:17: 67:d6:d6:f6:2a:c2:7c:ad:5e:7b:e9:ff:59:2a:30: 55:8e:b1:97:ef:7b:cd:d5:9e:4a:d4:05:68:b3:2a: 48:c6:5e:38:0c:7e:ff:fa:18:ea:9e:25:6b:a3:2b: 1d:5b:da:31:f5:c7:8c:57:a1:f4:63:6b:8f:0e:c0: d9:4e:3e:30:ee:8e:c5:e7:34:93:fe:7a:b0:a1:c9: 09:fd:91:ea:72:51:b3:c8:1d:d7:18:a0:e9:e4:46: 6d:ab:81:5b:18:15:8c:ed:98:3c:f3:dc:ed:08:82: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:A1:AE:59:29:5E:0F:22:E4:65:28:C5:33:99:F0:F4:71:D2:5F X509v3 Authority Key Identifier: keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:3a:71:44:ed:78:09:2d:e2:b2:df:64:b9:1a:07:21:c9:c4: 33:9c:80:a6:3f:f4:76:e6:11:28:da:3b:ea:87:71:7c:93:4e: c7:ae:7f:ef:18:1a:f8:7e:b1:02:1f:b2:02:6c:f2:da:d7:cb: 63:10:07:e7:40:8d:1e:7a:e3:c1:93:31:1d:0d:ce:b6:14:1c: a9:bc:65:ec:64:89:df:51:57:4d:c2:03:be:c2:66:ba:71:cd: e0:76:50:87:3e:57:ea:00:20:34:a3:a7:b9:48:36:e2:79:77: a8:f2:2b:e3:cd:47:a7:51:3a:0a:d1:00:08:34:a9:59:14:c2: d2:b2:06:c6:1a:6f:aa:4a:9e:2e:3c:0e:37:98:82:7e:bf:01: 81:a3:36:c9:58:1e:e0:fd:1f:1e:ab:d5:c9:0f:34:66:e3:05: 3a:da:86:c1:2a:18:63:15:76:f7:06:b0:0f:3b:a9:19:bb:b8: f1:09:b1:91:db:39:60:93:7d:65:2b:d6:c5:1e:13:2e:b2:16: f6:01:50:c5:a0:27:57:fb:02:d5:46:c4:44:52:c6:9b:a5:a8: 0c:1b:e1:02:d4:03:5a:10:c1:33:75:21:e2:e0:cb:dc:20:c7: 6a:2f:86:7d:31:e3:e5:d3:a4:49:d5:75:9f:24:fe:eb:e1:58: e1:97:f8:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1 ODJDQzJGQUUwHhcNMjUwNzE5MDIxNDM2WhcNMjUwNzI2MDIxNDM2WjAYMRYwFAYD VQQDEw02ODdhZmY4Yy1iNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17T55sZKksHeciW1YZjWNDfTal1eiFbX/2OSVZjFhO7s+bEeU6c0F0V18HFG BzAw1BxDoOvxHDe2qZRA7ry62kqCaGg/RMibeI6P9RYVbs8AMS5Ppr3Ast2cIVfi Z1m/Y6QhqVeDHq5twjK3Ok+Y3bEFtGhOkQf3JTDxi+pe9LlVjLMk/9bEUjVDhC+x XuzIIX78oxdn1tb2KsJ8rV576f9ZKjBVjrGX73vN1Z5K1AVosypIxl44DH7/+hjq niVroysdW9ox9ceMV6H0Y2uPDsDZTj4w7o7F5zST/nqwockJ/ZHqclGzyB3XGKDp 5EZtq4FbGBWM7Zg889ztCIKWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqBoa5Z KV4PIuRlKMUzmfD0cdJfMB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0 NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt Y3NCc0xmYm92aEZZTE1MNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCOnFE7XgJLeKy32S5GgchycQznICmP/R25hEo2jvqh3F8k07Hrn/v GBr4frECH7ICbPLa18tjEAfnQI0eeuPBkzEdDc62FBypvGXsZInfUVdNwgO+wma6 cc3gdlCHPlfqACA0o6e5SDbieXeo8ivjzUenUToK0QAINKlZFMLSsgbGGm+qSp4u PA43mIJ+vwGBozbJWB7g/R8eq9XJDzRm4wU62obBKhhjFXb3BrAPO6kZu7jxCbGR 2zlgk31lK9bFHhMushb2AVDFoCdX+wLVRsREUsabpagMG+EC1ANaEMEzdSHi4Mvc IMdqL4Z9MePl06RJ1XWfJP7r4Vjhl/jW -----END CERTIFICATE-----Generated at Sun Jul 20 07:33:17 2025 by rpki-client