$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: K61hyETvClHEB3K0kMBLhEkMcmsr5uq8WFkZAZSoofM= Subject key identifier: CF:C0:DC:65:48:D7:66:03:0E:01:CD:3B:2A:0D:7B:63:22:3E:69:D6 Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 0477 Signing time: Thu 15 May 2025 00:08:21 +0000 Manifest this update: Thu 15 May 2025 00:08:20 +0000 Manifest next update: Thu 22 May 2025 00:08:20 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: Nu/PgBQAz2AyC7329ERZj36gquxTo8kukVFFYxg2j80=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: May 15 00:08:20 2025 GMT Not After : May 22 00:08:20 2025 GMT Subject: CN=68253074-72fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:37:54:71:5e:c6:4b:af:dd:2f:ed:87:41: 9c:c0:b8:e2:8c:89:ec:82:02:98:5d:30:8e:89:90: 73:d9:a3:b3:f6:75:1e:be:c0:06:47:0e:0f:af:b8: 1f:67:10:6b:18:34:84:49:cd:fa:87:f8:a7:65:ed: 40:86:c2:cd:b7:f1:f9:df:7b:86:df:84:f9:30:5e: 11:e7:16:32:3c:4f:c8:c2:09:2d:99:42:e6:48:59: 11:db:48:6b:8a:60:6e:df:cd:2b:cb:5c:51:fc:a7: 15:49:9a:b5:07:44:11:c8:98:61:75:2c:ae:a4:96: f9:36:39:c9:c1:46:f4:a5:f0:ca:81:5c:5e:ae:d6: aa:dc:e6:13:92:65:1a:c7:72:83:f3:49:dc:c0:e4: 7b:f6:0c:5c:5e:14:fa:0a:e9:e2:3d:bf:8b:24:a8: e9:17:10:17:1a:8f:30:7e:3b:5b:6f:ed:7c:2b:26: be:69:36:54:03:19:5a:bd:f9:f7:8a:36:9f:5e:5e: 10:6b:3f:3c:44:cf:62:47:3b:af:60:a7:20:f5:52: 68:95:fb:46:be:62:aa:6f:47:1f:35:e8:8a:e1:a9: 9c:05:31:2c:95:03:d7:14:25:60:40:3b:ec:25:6a: 11:70:5f:44:41:b1:05:0a:cd:b8:84:f3:c1:40:9e: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:DC:65:48:D7:66:03:0E:01:CD:3B:2A:0D:7B:63:22:3E:69:D6 X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d4:d5:36:ec:dd:55:17:d4:ca:dd:dc:c4:ff:dc:11:2b:4e: a6:ba:68:9c:32:8c:3c:36:82:67:ec:01:2d:30:f4:67:df:5f: 1a:08:e1:02:5c:ae:17:9b:47:34:e7:7a:cc:23:91:29:08:f4: f2:d1:50:67:0b:6c:2d:82:3a:62:a2:19:e6:b9:c1:ca:4e:4e: 5e:c5:29:00:84:9f:ff:40:d9:9e:8c:f9:c9:fa:67:c1:bc:56: f0:d9:b1:f7:b2:b5:8f:07:d0:8f:81:4a:35:77:15:9b:a7:2c: ca:f9:53:ca:78:b2:3d:fc:7a:c4:d0:f3:19:fe:3e:c1:a2:05: 47:fe:07:b9:a1:d3:9c:fa:80:15:62:64:91:69:7a:37:f3:c3: 88:df:88:c2:a5:fc:93:a2:2a:84:4d:1c:af:67:55:10:b0:ad: d8:2c:af:18:cc:8a:c8:06:b1:18:27:1d:91:bf:14:58:a4:89: b7:25:59:6b:68:9f:d3:ef:b2:1a:70:b7:3c:a4:2b:5f:b7:be: 29:c6:70:54:41:65:27:67:20:ab:1c:cb:8d:0d:38:84:39:24: c2:ba:f0:95:a1:62:14:fd:8c:1b:91:9d:85:19:a7:d2:db:e5: ea:08:c2:75:54:25:f4:15:3d:3d:45:7c:f2:4e:dd:00:8e:d3: b2:52:33:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUwNTE1MDAwODIwWhcNMjUwNTIyMDAwODIwWjAYMRYwFAYD VQQDEw02ODI1MzA3NC03MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Dk3VHFexkuv3S/th0GcwLjijInsggKYXTCOiZBz2aOz9nUevsAGRw4Pr7gf ZxBrGDSESc36h/inZe1AhsLNt/H533uG34T5MF4R5xYyPE/IwgktmULmSFkR20hr imBu380ry1xR/KcVSZq1B0QRyJhhdSyupJb5NjnJwUb0pfDKgVxertaq3OYTkmUa x3KD80ncwOR79gxcXhT6CuniPb+LJKjpFxAXGo8wfjtbb+18Kya+aTZUAxlavfn3 ijafXl4Qaz88RM9iRzuvYKcg9VJolftGvmKqb0cfNeiK4amcBTEslQPXFCVgQDvs JWoRcF9EQbEFCs24hPPBQJ77fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/A3GVI 12YDDgHNOyoNe2MiPmnWMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE1NU27N1VF9TK3dzE/9wRK06mumicMow8NoJn7AEtMPRn318aCOEC XK4Xm0c053rMI5EpCPTy0VBnC2wtgjpiohnmucHKTk5exSkAhJ//QNmejPnJ+mfB vFbw2bH3srWPB9CPgUo1dxWbpyzK+VPKeLI9/HrE0PMZ/j7BogVH/ge5odOc+oAV YmSRaXo388OI34jCpfyToiqETRyvZ1UQsK3YLK8YzIrIBrEYJx2RvxRYpIm3JVlr aJ/T77IacLc8pCtft74pxnBUQWUnZyCrHMuNDTiEOSTCuvCVoWIU/YwbkZ2FGafS 2+XqCMJ1VCX0FT09RXzyTt0AjtOyUjPQ -----END CERTIFICATE-----Generated at Thu May 15 13:20:02 2025 by rpki-client