$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: 4hZ+s8KocwE8+Ac3OWr9uFQ31lrgPU5xSxfoxXkgXFA= Subject key identifier: 58:C7:AF:DD:E4:9B:42:E2:B3:CB:09:33:85:A7:9C:11:A8:41:B0:BF Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 09F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09EF Signing time: Sun 20 Jul 2025 19:59:17 +0000 Manifest this update: Sun 20 Jul 2025 19:59:16 +0000 Manifest next update: Sun 27 Jul 2025 19:59:16 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: nEKxsUiJG/93Zi3YtbIrWj1lJW9aN0JVwy59BRrdisw=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2550 (0x9f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Jul 20 19:59:16 2025 GMT Not After : Jul 27 19:59:16 2025 GMT Subject: CN=687d4a95-d9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:a1:a4:4b:a1:63:1f:ec:3f:8a:40:48:b6: 1d:e2:45:d9:26:48:7e:e0:29:91:d0:d9:b3:2b:dc: d8:33:df:e4:c3:6a:36:81:6a:c6:0a:7d:69:b9:56: 22:a7:d6:7d:8e:e1:ab:df:70:5c:4d:df:43:5a:23: 81:c6:a0:aa:9b:b5:3a:f6:f9:f1:2e:bb:ff:fa:a1: 3c:af:f5:0d:44:16:4a:c9:1d:ea:a2:5d:23:ef:42: 5d:ab:b5:19:bf:f5:a3:19:24:6b:97:81:95:ea:f0: 2b:a7:a4:24:98:d0:77:f1:92:e6:63:e7:97:71:8f: 6e:fd:23:87:b3:18:63:45:75:4b:0b:c1:b0:a9:56: 3f:fe:d3:da:2c:ea:2b:6c:b1:35:18:13:e9:e6:0a: 4d:09:e5:f6:e2:44:1f:b8:7c:77:ea:c5:53:92:1a: 53:62:0d:f3:e8:96:c1:22:51:55:d3:f0:b4:ad:d2: c0:37:d2:3d:8b:04:f4:01:c0:7d:2c:53:72:ec:ca: 41:5a:7b:cd:f8:c7:71:d8:78:09:c7:0c:e4:2c:0f: b7:a4:25:dd:30:cd:81:c8:5a:9f:c9:de:71:1c:e9: db:a1:c7:4a:20:d6:ca:56:d7:d2:2e:3a:07:46:2c: 77:55:e8:7f:9e:27:9e:8c:29:2c:b2:ee:a0:9d:7e: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C7:AF:DD:E4:9B:42:E2:B3:CB:09:33:85:A7:9C:11:A8:41:B0:BF X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:72:bb:62:f6:be:e5:aa:a7:70:10:d7:19:65:6f:c4:7f:1e: 20:75:04:4f:61:da:b5:5d:92:48:17:bd:ea:2a:61:21:f8:42: 11:b4:c4:b9:ee:9e:d7:9b:1c:90:e1:3f:e3:04:29:e0:64:cd: f6:bd:70:a2:fc:bd:28:df:91:05:16:ae:0d:e9:ac:d2:b1:f2: 6c:af:d0:93:21:1a:06:f7:c4:2f:d8:72:b7:34:ba:84:33:40: 96:69:ba:79:7e:ae:82:14:9d:2c:35:17:58:6d:0f:d1:a1:4a: c1:d8:2c:b2:6e:c2:70:b0:ae:e3:72:ba:87:14:c5:ce:f1:0d: 3a:3e:6e:37:81:26:27:53:87:93:c4:b9:6a:6f:4f:c0:d3:a6: ae:0e:fa:fb:88:e5:f9:c1:de:a4:f7:ac:5b:d3:07:22:72:08: 98:02:38:3c:f6:ff:0b:c2:65:72:af:2e:64:22:40:bb:59:57: c3:50:66:c1:81:e4:53:8f:52:69:91:5a:a1:fc:ac:ba:cc:51: 76:25:67:67:d5:a2:21:23:c1:fe:63:16:02:30:73:07:51:e6: 90:13:8a:53:b8:da:6d:ef:c4:95:30:e8:9e:e6:5a:8e:84:d9: 8c:10:de:42:61:40:07:5b:8d:bb:a5:b8:82:25:ab:6a:cd:f1: b7:3b:fd:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwNzIwMTk1OTE2WhcNMjUwNzI3MTk1OTE2WjAYMRYwFAYD VQQDEw02ODdkNGE5NS1kOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEShpEuhYx/sP4pASLYd4kXZJkh+4CmR0NmzK9zYM9/kw2o2gWrGCn1puVYi p9Z9juGr33BcTd9DWiOBxqCqm7U69vnxLrv/+qE8r/UNRBZKyR3qol0j70Jdq7UZ v/WjGSRrl4GV6vArp6QkmNB38ZLmY+eXcY9u/SOHsxhjRXVLC8GwqVY//tPaLOor bLE1GBPp5gpNCeX24kQfuHx36sVTkhpTYg3z6JbBIlFV0/C0rdLAN9I9iwT0AcB9 LFNy7MpBWnvN+Mdx2HgJxwzkLA+3pCXdMM2ByFqfyd5xHOnbocdKINbKVtfSLjoH Rix3Veh/nieejCkssu6gnX7TXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjHr93k m0Lis8sJM4WnnBGoQbC/MB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXcrti9r7lqqdwENcZZW/Efx4gdQRPYdq1XZJIF73qKmEh+EIRtMS5 7p7XmxyQ4T/jBCngZM32vXCi/L0o35EFFq4N6azSsfJsr9CTIRoG98Qv2HK3NLqE M0CWabp5fq6CFJ0sNRdYbQ/RoUrB2CyybsJwsK7jcrqHFMXO8Q06Pm43gSYnU4eT xLlqb0/A06auDvr7iOX5wd6k96xb0wcicgiYAjg89v8LwmVyry5kIkC7WVfDUGbB geRTj1JpkVqh/Ky6zFF2JWdn1aIhI8H+YxYCMHMHUeaQE4pTuNpt78SVMOie5lqO hNmMEN5CYUAHW427pbiCJatqzfG3O/3i -----END CERTIFICATE-----Generated at Mon Jul 21 02:40:04 2025 by rpki-client