$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: 0bqLMspZv9WahW4qsn5DJcOQjbY6hk11onmZfZwuycE= Subject key identifier: 19:20:6A:CB:C8:5E:07:0E:73:B8:7A:3C:77:4A:D0:91:66:19:EC:A8 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 2E Signing time: Sat 31 May 2025 07:18:07 +0000 Manifest this update: Sat 31 May 2025 07:18:06 +0000 Manifest next update: Sat 07 Jun 2025 07:18:06 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: QBJU0Rr2yYyBtVq4mj7vmodZNjJpRdg58BceZfDhIEI=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: May 31 07:18:06 2025 GMT Not After : Jun 7 07:18:06 2025 GMT Subject: CN=683aad2f-7182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:b7:f9:ee:42:9e:2e:26:df:dd:78:f4:48: 97:41:75:0a:26:e2:a0:c6:6c:fc:6b:4f:26:5a:a0: d8:b8:6e:54:b8:ac:bd:17:5d:d4:74:94:c3:a3:44: 0c:fb:8b:11:e2:b7:2a:35:53:41:c9:fe:c9:7b:d2: 77:2a:3e:e4:1c:8b:32:20:0d:0d:e0:ba:7e:82:a3: d8:5a:8b:61:fa:f2:2b:42:ae:01:4f:73:ff:1c:d1: 60:ba:52:48:b3:73:7a:72:ae:db:bf:54:9b:cc:aa: a5:eb:e7:5b:89:de:96:53:48:9d:51:b6:22:b3:f8: 06:83:b3:c3:3f:d0:8a:04:be:70:f9:af:c8:51:9a: da:95:fb:c3:a5:4d:be:2e:67:3b:96:4f:3a:3c:68: ec:02:9c:93:18:32:ff:9f:b6:b1:7c:ff:71:52:c8: 8e:23:ca:51:27:84:ec:d9:81:f0:1a:cf:4b:ae:4e: 75:03:67:0a:be:bd:12:6b:99:3d:79:a9:de:0c:1b: ce:49:ae:a8:75:ab:f6:fd:89:7c:1d:3e:12:13:50: 6f:d2:53:13:ca:ce:06:1f:b1:42:55:41:30:ee:7b: ff:1c:36:24:0a:98:be:1b:4e:0a:cb:36:84:a4:f4: 4f:cf:8b:7f:40:05:a3:c1:69:b2:f6:ed:65:dd:9c: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:6A:CB:C8:5E:07:0E:73:B8:7A:3C:77:4A:D0:91:66:19:EC:A8 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:ef:f2:df:1c:67:a7:95:ef:e0:83:c0:55:5a:7f:13:68: 9d:0f:8b:2c:91:a7:cc:47:79:a9:ab:b1:84:e3:e2:ae:24:8a: b0:29:31:16:e2:fe:e7:53:7b:02:54:2e:cf:33:e9:07:27:eb: 59:fb:22:00:c1:02:ad:c7:68:40:44:6b:26:3b:46:af:dd:78: e0:36:48:bb:70:4b:8d:82:3e:17:41:d9:03:5e:98:e7:8b:e2: ca:98:99:3b:cb:24:dc:af:5f:e0:a8:06:d5:42:d6:c2:6b:94: 2c:4a:83:28:8a:68:d9:83:f8:4f:bc:c3:e9:5f:56:51:45:c1: aa:b1:ce:20:11:9d:2b:e7:53:27:3e:f0:4d:9c:50:8f:e8:7e: fc:dd:fb:08:36:2c:f2:fa:5d:46:4b:0b:7b:28:be:62:7d:ec: ed:b8:04:60:db:fc:f2:27:0e:a8:86:07:ee:78:f5:88:37:68: 63:b2:67:c2:8e:b4:93:5d:a0:85:70:61:d4:f5:29:4a:57:1c: 2b:c2:77:eb:b5:0a:53:b0:8e:33:cf:43:ab:e1:fa:4a:ea:a5: da:55:55:63:6e:f9:3b:68:2d:ae:c3:af:de:71:20:c4:da:55: 58:86:9c:85:50:33:c2:a3:05:5a:b4:dd:40:1f:81:11:ad:c4: 1e:7e:0c:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTA1MzEwNzE4MDZaFw0yNTA2MDcwNzE4MDZaMBgxFjAUBgNV BAMTDTY4M2FhZDJmLTcxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC127f57kKeLibf3Xj0SJdBdQom4qDGbPxrTyZaoNi4blS4rL0XXdR0lMOjRAz7 ixHityo1U0HJ/sl70ncqPuQcizIgDQ3gun6Co9hai2H68itCrgFPc/8c0WC6Ukiz c3pyrtu/VJvMqqXr51uJ3pZTSJ1RtiKz+AaDs8M/0IoEvnD5r8hRmtqV+8OlTb4u ZzuWTzo8aOwCnJMYMv+ftrF8/3FSyI4jylEnhOzZgfAaz0uuTnUDZwq+vRJrmT15 qd4MG85Jrqh1q/b9iXwdPhITUG/SUxPKzgYfsUJVQTDue/8cNiQKmL4bTgrLNoSk 9E/Pi39ABaPBabL27WXdnOTnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGSBqy8he Bw5zuHo8d0rQkWYZ7KgwHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1L7/LfHGenle/gg8BVWn8TaJ0PiyyRp8xHeamrsYTj4q4kirApMRbi /udTewJULs8z6Qcn61n7IgDBAq3HaEBEayY7Rq/deOA2SLtwS42CPhdB2QNemOeL 4sqYmTvLJNyvX+CoBtVC1sJrlCxKgyiKaNmD+E+8w+lfVlFFwaqxziARnSvnUyc+ 8E2cUI/ofvzd+wg2LPL6XUZLC3sovmJ97O24BGDb/PInDqiGB+549Yg3aGOyZ8KO tJNdoIVwYdT1KUpXHCvCd+u1ClOwjjPPQ6vh+krqpdpVVWNu+TtoLa7Dr95xIMTa VViGnIVQM8KjBVq03UAfgRGtxB5+DB8= -----END CERTIFICATE-----Generated at Sat May 31 17:44:00 2025 by rpki-client