$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: E8wWLzPECyb12kk8peFl42i+ZnIxFvs+jXvt94lEHnQ= Subject key identifier: DA:12:57:79:98:68:A6:A5:7E:A4:44:3F:01:FB:1B:8C:04:9B:E2:7F Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 011A Signing time: Sun 01 Jun 2025 04:33:26 +0000 Manifest this update: Sun 01 Jun 2025 04:33:26 +0000 Manifest next update: Sun 08 Jun 2025 04:33:26 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: HydaSL3z8Z79IAr3l7gd2XJ1dGm1/97jwzK7Oq1BvXM=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: BrMg7LC27FVuPN/a8T84kbw3q38OJLbwQWRqwjiM6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Jun 1 04:33:26 2025 GMT Not After : Jun 8 04:33:26 2025 GMT Subject: CN=683bd816-a876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:34:53:10:5a:80:c8:64:07:ef:b2:fb:c0: 8d:a5:3c:80:3c:91:2c:91:b1:6a:06:41:b0:b9:ae: b4:dd:74:43:6a:5f:4a:ac:b6:4a:ed:9b:26:c0:85: 2d:5b:b9:11:63:58:81:23:95:08:e6:3a:6a:09:29: 8f:a6:04:bc:32:3f:e3:2f:61:e5:67:28:a6:c8:51: c4:e7:6f:45:df:5a:85:8b:4b:d1:79:44:14:c6:c1: 80:bb:f8:af:5c:3c:0f:f6:0f:79:37:52:e9:9a:06: 09:c0:88:70:1f:bc:eb:eb:a2:7e:c4:c1:c5:16:c3: d2:08:3f:7a:4e:c0:ee:f5:04:25:62:f6:f6:06:a0: cd:a8:a8:33:99:64:23:b6:15:af:34:30:ea:a9:0b: 53:0a:ef:ff:e0:39:a3:8b:7e:87:58:7a:fa:01:8b: 4d:2f:4a:c0:3c:6d:d6:b5:45:6c:8b:bc:fe:32:95: 56:1d:b1:9f:34:2b:9a:b1:61:47:1e:37:e1:ae:55: 95:5c:a9:1e:32:dc:6f:28:34:12:66:bf:22:52:aa: e5:c2:6b:1d:7c:8b:b7:d8:ab:f5:f0:3e:9b:1a:43: da:d2:94:83:5d:da:2d:d2:bc:99:7f:51:53:11:44: 3b:8d:e6:c5:34:7a:4f:9f:87:b9:aa:94:38:3b:5d: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:12:57:79:98:68:A6:A5:7E:A4:44:3F:01:FB:1B:8C:04:9B:E2:7F X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9c:99:e3:da:b7:a4:21:2e:f6:cb:58:5d:65:ce:d7:00:db: 1f:b4:07:f0:52:3c:a8:97:69:9f:f5:19:7f:9d:db:55:49:12: 21:48:a4:56:91:7a:44:12:d2:88:46:0f:39:99:17:94:d3:93: 3b:3a:fd:c7:fe:0b:52:3f:f9:ee:d5:44:cb:39:9e:5d:5e:20: 9d:ee:0e:b9:66:bd:bc:aa:f3:1c:7a:7c:03:78:44:79:ac:5d: 29:a2:64:39:5e:e8:89:75:54:69:c1:0e:f5:1b:7b:83:fe:d1: 17:8c:87:4c:ab:44:8e:84:f1:51:91:4f:c0:96:1b:cf:75:73: 5f:e0:57:0d:e2:d6:74:08:e1:cb:06:fb:e3:59:fc:8e:20:13: 1c:9f:f2:6d:d1:d1:dc:96:2f:a2:98:77:f6:c9:64:9d:1f:b2: b1:c7:8d:2c:4f:b8:29:e0:8d:3f:58:6a:92:dd:57:d7:7e:17: cc:c4:3e:e6:1d:b7:75:78:29:d7:c7:da:56:69:2e:8b:15:5a: 4e:dd:3c:bc:25:81:42:dc:79:91:de:6c:87:72:f3:2c:8a:f3: 50:7e:49:ac:58:e5:f5:ec:b1:c1:40:0a:ef:1a:48:4c:62:5e: a1:ac:85:b6:f1:8f:57:68:b8:0b:eb:65:7f:88:41:15:f1:58: 63:9e:5a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUwNjAxMDQzMzI2WhcNMjUwNjA4MDQzMzI2WjAYMRYwFAYD VQQDEw02ODNiZDgxNi1hODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwug0UxBagMhkB++y+8CNpTyAPJEskbFqBkGwua603XRDal9KrLZK7ZsmwIUt W7kRY1iBI5UI5jpqCSmPpgS8Mj/jL2HlZyimyFHE529F31qFi0vReUQUxsGAu/iv XDwP9g95N1LpmgYJwIhwH7zr66J+xMHFFsPSCD96TsDu9QQlYvb2BqDNqKgzmWQj thWvNDDqqQtTCu//4Dmji36HWHr6AYtNL0rAPG3WtUVsi7z+MpVWHbGfNCuasWFH HjfhrlWVXKkeMtxvKDQSZr8iUqrlwmsdfIu32Kv18D6bGkPa0pSDXdot0ryZf1FT EUQ7jebFNHpPn4e5qpQ4O10POwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoSV3mY aKalfqREPwH7G4wEm+J/MB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwnJnj2rekIS72y1hdZc7XANsftAfwUjyol2mf9Rl/ndtVSRIhSKRW kXpEEtKIRg85mReU05M7Ov3H/gtSP/nu1UTLOZ5dXiCd7g65Zr28qvMcenwDeER5 rF0pomQ5XuiJdVRpwQ71G3uD/tEXjIdMq0SOhPFRkU/AlhvPdXNf4FcN4tZ0COHL BvvjWfyOIBMcn/Jt0dHcli+imHf2yWSdH7Kxx40sT7gp4I0/WGqS3VfXfhfMxD7m Hbd1eCnXx9pWaS6LFVpO3Ty8JYFC3HmR3myHcvMsivNQfkmsWOX17LHBQArvGkhM Yl6hrIW28Y9XaLgL62V/iEEV8Vhjnlrn -----END CERTIFICATE-----Generated at Mon Jun 2 07:19:29 2025 by rpki-client