$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: KWmf3p0686rpDomq9n2D/XPq5EcwCe2hsRL9BsgZuL8= Subject key identifier: A3:C2:67:FD:43:FE:CD:73:A2:2A:91:20:7C:78:C6:84:07:8C:D1:2E Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 6E Signing time: Sat 19 Jul 2025 07:09:27 +0000 Manifest this update: Sat 19 Jul 2025 07:09:26 +0000 Manifest next update: Sat 26 Jul 2025 07:09:26 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: T9arkoBgNlOq4arQYm1AhU22cKR26yoq7yrSGGDBQsk=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: oBdfX7J4SfTWAha0J5te4TT+MMNp1UK2JxnYA8w+Btw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: Jul 19 07:09:26 2025 GMT Not After : Jul 26 07:09:26 2025 GMT Subject: CN=687b44a6-c780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b0:4a:c1:e8:12:f8:80:ab:51:9e:3a:2a:a2: cb:bd:e2:0e:91:2c:0a:c5:6a:70:d9:aa:72:e7:7b: a6:8e:ec:21:4a:f5:bb:ad:0c:82:c0:4b:d4:44:ef: 42:f7:67:f5:53:d1:dc:83:1b:f6:f9:43:50:69:d0: d2:3d:c6:3a:27:cf:0a:cd:5c:ef:42:ed:05:2d:50: 12:e6:66:d1:ca:bd:0a:f7:ac:cf:92:08:f7:b2:77: 22:f5:0c:f6:38:f9:ee:e2:59:55:e7:d0:d9:36:e6: 7e:86:ed:4d:6e:69:9d:c9:0a:13:ab:3f:e5:df:7d: d7:41:df:ef:84:c4:2f:7b:ce:5a:f2:62:a8:70:59: ce:a7:c9:d4:95:44:98:41:1d:38:fc:62:25:5a:9b: 57:2c:09:b9:b8:b4:ea:e7:86:73:9f:e2:93:c5:cd: ac:24:e2:c9:7d:db:d9:50:f5:1d:2f:81:fe:1f:24: fe:be:35:d3:c1:d5:33:c9:bc:8d:67:bf:fa:d3:86: 92:71:fb:0e:4a:ec:29:a5:75:83:f6:95:17:ac:c6: 60:f1:a5:67:23:bf:06:54:c3:33:4a:cc:20:3c:cd: 89:a0:53:15:11:96:c9:65:54:1a:64:65:fa:3c:e8: 53:5e:44:39:2c:4d:ef:b4:42:fd:f0:26:1e:e7:83: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C2:67:FD:43:FE:CD:73:A2:2A:91:20:7C:78:C6:84:07:8C:D1:2E X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:45:a8:fd:7b:fe:a7:c9:1b:59:c3:80:c7:bf:65:c4:8a:7a: 9e:28:82:92:31:b9:f5:3e:bd:cd:d2:4a:a4:67:8f:2b:5e:b4: ce:f3:e4:1f:73:b6:c8:00:dd:0f:ee:00:da:8c:8d:0b:8b:ee: 4f:14:7b:09:8f:e8:2e:1f:f7:ae:77:1c:26:80:74:04:5c:31: a7:ae:5a:10:5c:85:56:11:a5:40:5d:6e:43:c8:e8:46:d9:2f: dd:7c:7c:fc:ea:6c:e5:aa:2d:61:79:76:a8:91:1d:65:55:e7: 7b:08:ae:c8:c3:7f:36:4d:fc:fe:06:e2:cb:1b:87:1f:4e:80: a7:53:de:95:48:1b:8f:37:90:52:cf:50:c8:a8:0c:ae:30:4f: 7f:e0:2a:75:7c:69:9c:53:6b:ab:b6:1b:d9:e3:0b:c5:1b:03: 50:34:c7:cb:cd:7e:fe:3f:ba:17:75:6c:24:82:9e:21:b5:24: ec:ed:31:6b:4e:c0:01:a7:ff:43:c6:b3:a5:e1:59:f6:ec:89: 3e:e0:c3:54:d3:43:18:70:c3:3b:3a:5c:cd:53:10:78:42:d1: eb:66:85:ec:d4:40:ee:58:7f:3a:81:b4:ea:fa:06:db:82:20: 33:50:85:06:ce:0d:28:ce:a7:35:24:3b:9d:73:12:b1:f8:79: 89:0c:88:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMkE1NzM5NkRDRTcwRUI1NkMwNzNERTFBNzYwQjYyQTcy MkIwNDc4RTAeFw0yNTA3MTkwNzA5MjZaFw0yNTA3MjYwNzA5MjZaMBgxFjAUBgNV BAMTDTY4N2I0NGE2LWM3ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5sErB6BL4gKtRnjoqosu94g6RLArFanDZqnLne6aO7CFK9butDILAS9RE70L3 Z/VT0dyDG/b5Q1Bp0NI9xjonzwrNXO9C7QUtUBLmZtHKvQr3rM+SCPeydyL1DPY4 +e7iWVXn0Nk25n6G7U1uaZ3JChOrP+XffddB3++ExC97zlryYqhwWc6nydSVRJhB HTj8YiVam1csCbm4tOrnhnOf4pPFzawk4sl929lQ9R0vgf4fJP6+NdPB1TPJvI1n v/rThpJx+w5K7CmldYP2lResxmDxpWcjvwZUwzNKzCA8zYmgUxURlsllVBpkZfo8 6FNeRDksTe+0Qv3wJh7ngzuPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo8Jn/UP+ zXOiKpEgfHjGhAeM0S4wHwYDVR0jBBgwFoAUKlc5bc5w61bAc94adgtipyKwR44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0FGNDFCRDEwQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2xjNWJjNXc2MWJBYzk0YWRndGlweUt3UjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0FGNDFCRDEwQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFi QWM5NGFkZ3RpcHlLd1I0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAElFqP17/qfJG1nDgMe/ZcSKep4ogpIxufU+vc3SSqRnjytetM7z5B9z tsgA3Q/uANqMjQuL7k8UewmP6C4f9653HCaAdARcMaeuWhBchVYRpUBdbkPI6EbZ L918fPzqbOWqLWF5dqiRHWVV53sIrsjDfzZN/P4G4ssbhx9OgKdT3pVIG483kFLP UMioDK4wT3/gKnV8aZxTa6u2G9njC8UbA1A0x8vNfv4/uhd1bCSCniG1JOztMWtO wAGn/0PGs6XhWfbsiT7gw1TTQxhwwzs6XM1TEHhC0etmhezUQO5YfzqBtOr6BtuC IDNQhQbODSjOpzUkO51zErH4eYkMiNc= -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:55 2025 by rpki-client