$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: u5ilZfl4NT+VRTzorYen9PGBQKDVMMx+lnSWljnyP8s= Subject key identifier: 43:17:3B:AD:D3:83:0D:D2:DB:40:1C:5F:AC:32:E2:2C:91:6E:17:61 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 10 Signing time: Thu 03 Apr 2025 07:20:51 +0000 Manifest this update: Thu 03 Apr 2025 07:20:50 +0000 Manifest next update: Thu 10 Apr 2025 07:20:50 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: NopUJNlLQYv9ApL5XU0MhKpVZ2JeWZ9yUSvVKy/7ltw=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: fisSzN1NEUWVRstcSqL4cuynXiHp5VgHPFGAgqQAMWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974 Validity Not Before: Apr 3 07:20:50 2025 GMT Not After : Apr 10 07:20:50 2025 GMT Subject: CN=67ee36d3-f806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a7:01:6d:b0:ba:35:92:1f:d4:84:e4:b3:4b: 67:96:ed:dd:65:8b:2d:af:52:6f:ad:45:c9:41:f0: ab:5a:19:bb:0f:0d:bf:d4:3c:87:21:91:8c:59:76: bf:5e:46:fa:5c:49:5c:12:b3:48:b7:95:63:c5:c5: 72:18:5c:35:8e:0f:07:98:c8:60:37:30:6e:1e:66: 1d:ba:98:f1:77:70:36:aa:b0:ac:57:70:d6:e6:d1: ae:76:df:3f:37:4f:c6:09:55:4d:71:67:7f:ce:b4: 7c:5f:33:5b:49:09:9c:89:ae:e4:c1:a1:97:f9:ae: 5b:a4:70:f2:8a:04:06:a1:d6:08:c8:7f:dc:87:e7: 08:02:6c:86:99:a9:a1:84:ba:23:b4:fe:34:f8:c6: 0d:54:0b:ee:6f:9f:e5:ab:70:93:6b:e8:ff:ea:c8: 1f:29:75:a3:a7:0b:bc:32:37:8f:a5:02:a4:3a:2f: d5:33:fa:3b:f1:04:e4:3b:1f:ab:87:28:f3:80:59: 0e:f3:36:d6:92:5b:a9:b3:ed:f9:15:86:79:b8:26: 1b:e4:69:d1:8e:ab:8d:e2:49:82:c7:b9:65:39:d2: ad:38:94:8c:8a:e2:cf:ed:98:c6:d8:f3:fe:cc:31: 36:32:f1:ee:12:fe:84:b1:e0:fd:48:88:ee:c5:a1: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:17:3B:AD:D3:83:0D:D2:DB:40:1C:5F:AC:32:E2:2C:91:6E:17:61 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:a6:62:40:40:87:c8:e8:94:0a:d2:59:08:4a:2a:3d:71: 47:8a:e8:ed:1f:41:e6:db:05:f4:b0:c6:38:da:38:b2:f3:46: b9:4f:b0:e0:84:e9:2f:24:54:3a:34:7f:8c:9a:0c:91:6b:36: 73:71:21:6c:49:86:f9:28:2a:ae:40:08:55:94:61:0a:31:11: 15:27:d8:77:d6:74:41:15:cc:86:1f:fc:fd:a9:ff:43:00:b5: a4:47:3e:ba:4a:a8:01:30:c0:ea:e6:7a:09:ff:87:4b:01:35: 6c:61:fa:50:c9:2f:1a:28:6b:16:9d:35:ea:f5:aa:78:1a:ab: b4:ed:7a:bb:50:64:c9:75:19:c8:14:5b:e7:c3:8c:56:20:0a: 4c:60:2e:c3:2c:04:35:67:1b:dc:2d:11:6a:7c:28:f4:b5:92: 31:0c:ff:2d:0d:0b:92:24:80:65:90:73:c5:b2:83:ef:e0:b4: eb:fb:e8:e6:18:cf:35:b6:a7:9c:ec:83:71:8d:92:70:2d:13: e2:d2:fd:9f:b3:14:c1:5e:77:97:f3:dd:5a:dd:97:a5:9e:7a: 87:1e:53:6f:a9:f3:1a:cc:53:e0:7e:de:61:d7:f0:af:3f:ed: 77:d6:ee:78:13:9f:59:c2:76:ca:8d:c9:2b:a9:89:5e:66:ee: 17:83:19:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA0MDMwNzIwNTBaFw0yNTA0MTAwNzIwNTBaMBgxFjAUBgNV BAMTDTY3ZWUzNmQzLWY4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUpwFtsLo1kh/UhOSzS2eW7d1liy2vUm+tRclB8KtaGbsPDb/UPIchkYxZdr9e RvpcSVwSs0i3lWPFxXIYXDWODweYyGA3MG4eZh26mPF3cDaqsKxXcNbm0a523z83 T8YJVU1xZ3/OtHxfM1tJCZyJruTBoZf5rlukcPKKBAah1gjIf9yH5wgCbIaZqaGE uiO0/jT4xg1UC+5vn+WrcJNr6P/qyB8pdaOnC7wyN4+lAqQ6L9Uz+jvxBOQ7H6uH KPOAWQ7zNtaSW6mz7fkVhnm4JhvkadGOq43iSYLHuWU50q04lIyK4s/tmMbY8/7M MTYy8e4S/oSx4P1IiO7FoSNFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQxc7rdOD DdLbQBxfrDLiLJFuF2EwHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAICOpmJAQIfI6JQK0lkISio9cUeK6O0fQebbBfSwxjjaOLLzRrlPsOCE 6S8kVDo0f4yaDJFrNnNxIWxJhvkoKq5ACFWUYQoxERUn2HfWdEEVzIYf/P2p/0MA taRHPrpKqAEwwOrmegn/h0sBNWxh+lDJLxooaxadNer1qngaq7TtertQZMl1GcgU W+fDjFYgCkxgLsMsBDVnG9wtEWp8KPS1kjEM/y0NC5IkgGWQc8Wyg+/gtOv76OYY zzW2p5zsg3GNknAtE+LS/Z+zFMFed5fz3Vrdl6WeeoceU2+p8xrMU+B+3mHX8K8/ 7XfW7ngTn1nCdsqNySupiV5m7heDGXE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:15 2025 by rpki-client