$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: MN5Paeu2KZEsMi+FkGw7Xc2/hbjS2iY5X65M9/GXGZ0= Subject key identifier: E4:31:45:DD:77:F3:2B:DC:9A:23:7A:9B:52:16:A7:58:95:96:70:1B Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 47 Signing time: Sat 19 Jul 2025 07:41:00 +0000 Manifest this update: Sat 19 Jul 2025 07:40:59 +0000 Manifest next update: Sat 26 Jul 2025 07:40:59 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: xXHtjsLE8PSsD8RVNNn7gZfPh1AT57jm/pxv09n7d9s=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Jul 19 07:40:59 2025 GMT Not After : Jul 26 07:40:59 2025 GMT Subject: CN=687b4c0c-e169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:68:99:50:45:72:83:d3:33:14:8d:21:f2: 11:0a:c7:f4:99:98:f1:5e:9e:c0:75:5a:7a:38:be: 89:71:ca:a1:57:f5:41:63:55:72:c0:e5:2e:d8:0e: d7:5c:e4:af:aa:63:c6:5d:78:85:a8:29:23:b4:d0: 25:52:39:55:d2:52:2f:26:dc:5b:71:a8:31:28:7b: 4d:60:4f:78:a7:a6:ee:21:5f:33:9c:d1:6b:71:d3: 82:3b:f1:56:dd:99:46:a3:6d:d7:6a:03:71:d6:db: 84:c8:43:52:eb:56:6d:57:16:2d:4d:e0:5e:20:df: f1:69:0e:a9:89:bf:6a:d0:b8:ee:58:ab:05:ee:ae: e7:6e:48:ea:be:f2:9a:9f:68:6c:8d:0b:d3:f3:14: 01:53:d0:3f:f9:1a:de:64:6d:68:bc:f7:87:a9:26: bc:d9:19:54:18:b8:cc:40:2e:ad:db:b6:b2:40:d3: cd:f0:80:b2:94:69:dc:d4:fa:51:3a:29:8a:27:3b: e1:5f:05:92:b0:0d:d7:53:8c:85:16:5c:0b:d9:4c: 2f:33:06:bf:2c:5a:02:56:d5:d8:63:04:3e:df:9e: 6c:79:50:f2:b7:85:55:57:de:8d:91:0d:62:38:12: 08:7f:71:3a:ea:e5:39:f0:6e:01:f1:e2:34:d2:03: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:31:45:DD:77:F3:2B:DC:9A:23:7A:9B:52:16:A7:58:95:96:70:1B X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:68:33:41:18:c2:c7:4b:69:46:be:69:f7:67:a8:c8:a5:20: 69:ca:bb:54:b3:62:1a:d0:0d:1f:7a:22:35:32:11:8f:04:2b: bb:81:fb:65:4e:5a:e1:c1:2b:d7:44:59:58:0b:b1:5c:1e:d8: 1d:86:77:c2:ba:9c:1b:5f:e3:20:fd:6a:66:cb:60:d2:43:6c: 7c:a3:ae:aa:66:ff:51:03:20:9a:7b:38:7f:1a:53:e7:e9:3e: 15:0f:bf:79:82:e7:f3:88:33:7a:26:98:f2:90:60:3a:39:ac: 28:f3:81:63:ec:62:c4:74:55:61:2a:68:a4:6f:f5:12:20:ad: 7b:90:68:4b:99:85:83:e7:44:df:dd:5c:6d:48:4b:32:ac:e7: b4:5d:39:69:c1:6c:98:bf:7e:fd:00:c1:4c:4d:24:77:2b:7d: aa:53:5c:97:97:92:da:e0:5c:04:16:c5:36:55:01:04:c7:9c: b4:ba:3f:77:6d:95:80:b2:4a:b2:32:ea:7e:db:89:e7:de:01: f4:50:02:07:6a:1e:83:d8:fe:c3:75:ea:3f:6c:9f:ab:24:cd: 03:a7:32:37:ef:cd:3a:e3:0b:e8:f0:ac:03:38:45:bc:25:84: e3:db:73:71:a7:cc:47:8c:49:1c:bf:fb:72:a0:f0:b4:74:b8: 12:89:5d:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA3MTkwNzQwNTlaFw0yNTA3MjYwNzQwNTlaMBgxFjAUBgNV BAMTDTY4N2I0YzBjLWUxNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1bmiZUEVyg9MzFI0h8hEKx/SZmPFensB1Wno4volxyqFX9UFjVXLA5S7YDtdc 5K+qY8ZdeIWoKSO00CVSOVXSUi8m3FtxqDEoe01gT3inpu4hXzOc0Wtx04I78Vbd mUajbddqA3HW24TIQ1LrVm1XFi1N4F4g3/FpDqmJv2rQuO5YqwXuruduSOq+8pqf aGyNC9PzFAFT0D/5Gt5kbWi894epJrzZGVQYuMxALq3btrJA083wgLKUadzU+lE6 KYonO+FfBZKwDddTjIUWXAvZTC8zBr8sWgJW1dhjBD7fnmx5UPK3hVVX3o2RDWI4 Egh/cTrq5TnwbgHx4jTSA2/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5DFF3Xfz K9yaI3qbUhanWJWWcBswHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFoM0EYwsdLaUa+afdnqMilIGnKu1SzYhrQDR96IjUyEY8EK7uB+2VO WuHBK9dEWVgLsVwe2B2Gd8K6nBtf4yD9ambLYNJDbHyjrqpm/1EDIJp7OH8aU+fp PhUPv3mC5/OIM3ommPKQYDo5rCjzgWPsYsR0VWEqaKRv9RIgrXuQaEuZhYPnRN/d XG1ISzKs57RdOWnBbJi/fv0AwUxNJHcrfapTXJeXktrgXAQWxTZVAQTHnLS6P3dt lYCySrIy6n7biefeAfRQAgdqHoPY/sN16j9sn6skzQOnMjfvzTrjC+jwrAM4Rbwl hOPbc3GnzEeMSRy/+3Kg8LR0uBKJXZY= -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:18 2025 by rpki-client