$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: a8cYMKo63JmzLrYZBT/nc2K7VRSI/dGE/Ntfxl2TSLA= Subject key identifier: CE:7F:72:FB:3E:9D:50:F7:F7:B3:7A:6B:99:EF:2E:29:4E:60:45:26 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 31 Signing time: Sat 19 Jul 2025 07:55:12 +0000 Manifest this update: Sat 19 Jul 2025 07:55:11 +0000 Manifest next update: Sat 26 Jul 2025 07:55:11 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: g7eKqtKLKe/se8+BVnwR+Cq9+yW3kLLJMS/OgzhDBM4=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Jul 19 07:55:11 2025 GMT Not After : Jul 26 07:55:11 2025 GMT Subject: CN=687b4f60-2bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:79:bd:36:ae:98:4e:6f:25:67:07:5a:f9: e7:32:6f:5c:7a:33:ad:03:03:bb:a4:59:13:3e:79: f6:97:46:61:35:ea:38:0c:db:89:5f:16:63:a1:23: 52:89:57:d1:d2:7e:ee:c6:95:d3:8e:26:8f:a9:68: 72:d7:b0:30:4b:ad:67:45:75:63:b8:e9:1a:53:78: 8d:2f:49:b7:f7:18:d6:4d:fc:65:ec:f5:b2:89:93: b3:b1:24:81:e5:a6:ee:bf:31:86:cd:28:61:70:73: d5:00:70:d4:2e:e7:6d:cc:a5:57:56:58:bb:ba:81: 26:e3:39:0d:62:f5:c9:46:bb:a3:9d:31:55:1f:e6: e7:bc:c2:2b:5b:39:fa:01:53:25:47:76:5c:8b:39: 58:53:eb:b1:28:bd:df:e1:bc:8e:bb:2f:28:ec:e9: d0:ea:64:25:48:1f:c2:d4:1f:b0:6d:18:fe:93:df: dd:57:e3:83:8e:75:d4:81:57:66:51:6b:b0:02:5e: 4a:09:a3:c7:72:09:01:09:3a:4e:e4:cf:73:0d:4b: 3a:07:88:bf:c8:dc:64:e3:44:b0:53:4e:dd:08:53: 08:14:8e:6d:6c:c1:26:57:34:4c:cc:24:3d:19:5c: e0:46:e3:4e:c1:6b:cb:1d:70:7c:6e:68:1a:cd:ab: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7F:72:FB:3E:9D:50:F7:F7:B3:7A:6B:99:EF:2E:29:4E:60:45:26 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f8:f0:d1:a4:31:0f:26:99:dd:06:f9:e1:e0:f0:09:77:fa: 6d:59:45:18:2a:94:a1:b7:e5:09:0c:25:9c:26:82:98:d5:16: 77:f7:17:03:fd:5a:8f:9b:85:04:c0:37:79:14:0d:17:2a:36: 95:87:93:93:22:18:d8:4d:6e:4b:b5:30:7a:56:ef:56:24:a7: 1a:ad:2d:22:a5:4d:51:a0:8f:8e:ce:c2:58:84:20:57:19:ea: 17:04:d1:06:df:43:1f:cf:79:ad:b9:08:05:75:af:c2:e2:78: 59:e3:94:a5:f1:d8:e0:b0:d5:13:18:66:84:f4:65:3b:d1:ff: 57:a1:0a:20:e2:da:ab:e9:97:f4:e6:4f:60:80:1f:7f:21:1f: 67:28:2b:3f:a4:a3:cf:c4:5e:25:63:9f:ae:f4:e8:42:05:59: 69:38:1a:d7:40:61:05:71:d0:2a:7e:05:00:0c:2f:30:a4:47: a3:41:f4:64:27:63:6d:da:8b:df:d9:b3:d2:ef:81:90:ab:f0: 2a:96:e6:84:85:8d:7e:68:97:3d:24:64:71:22:3c:5f:52:63: 6b:23:a3:f6:70:12:62:fc:18:36:36:97:13:11:dc:0a:93:b6: d4:0a:68:47:ab:e6:5a:19:62:d3:16:68:8a:76:ad:59:ee:b1: df:d7:5a:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTA3MTkwNzU1MTFaFw0yNTA3MjYwNzU1MTFaMBgxFjAUBgNV BAMTDTY4N2I0ZjYwLTJiYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRKHm9Nq6YTm8lZwda+ecyb1x6M60DA7ukWRM+efaXRmE16jgM24lfFmOhI1KJ V9HSfu7GldOOJo+paHLXsDBLrWdFdWO46RpTeI0vSbf3GNZN/GXs9bKJk7OxJIHl pu6/MYbNKGFwc9UAcNQu523MpVdWWLu6gSbjOQ1i9clGu6OdMVUf5ue8witbOfoB UyVHdlyLOVhT67Eovd/hvI67Lyjs6dDqZCVIH8LUH7BtGP6T391X44OOddSBV2ZR a7ACXkoJo8dyCQEJOk7kz3MNSzoHiL/I3GTjRLBTTt0IUwgUjm1swSZXNEzMJD0Z XOBG407Ba8sdcHxuaBrNq5frAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzn9y+z6d UPf3s3prme8uKU5gRSYwHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACT48NGkMQ8mmd0G+eHg8Al3+m1ZRRgqlKG35QkMJZwmgpjVFnf3FwP9 Wo+bhQTAN3kUDRcqNpWHk5MiGNhNbku1MHpW71YkpxqtLSKlTVGgj47OwliEIFcZ 6hcE0QbfQx/Pea25CAV1r8LieFnjlKXx2OCw1RMYZoT0ZTvR/1ehCiDi2qvpl/Tm T2CAH38hH2coKz+ko8/EXiVjn6706EIFWWk4GtdAYQVx0Cp+BQAMLzCkR6NB9GQn Y23ai9/Zs9LvgZCr8CqW5oSFjX5olz0kZHEiPF9SY2sjo/ZwEmL8GDY2lxMR3AqT ttQKaEer5loZYtMWaIp2rVnusd/XWuk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:31:20 2025 by rpki-client