$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: Pe9aS7KfOSOe34ytaeU5Vz//WAIuIWJAR4NxXEl+hGk= Subject key identifier: 3C:4A:FD:42:5C:41:EF:EE:B6:FB:17:C8:70:12:D1:BF:49:70:AF:FE Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 048F Signing time: Thu 03 Jul 2025 00:21:52 +0000 Manifest this update: Thu 03 Jul 2025 00:21:52 +0000 Manifest next update: Thu 10 Jul 2025 00:21:52 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: bvIeXkv/HQ4V2zLJ5hdcUFFgw7zyFyGUDiQfyL4pU18=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Jul 3 00:21:52 2025 GMT Not After : Jul 10 00:21:52 2025 GMT Subject: CN=6865cd20-deea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:fa:15:bb:3e:d1:d3:4d:30:f8:78:2a:f7: 37:c4:e6:d0:ba:1c:f3:dd:17:7e:89:4e:b4:e9:80: e9:c7:7d:f6:d9:d4:dd:e2:a6:49:6a:59:c6:5f:46: 1c:71:e7:fe:41:0a:b3:ab:a9:16:d4:f7:c3:a3:80: 9e:54:ba:d9:4c:5b:50:01:57:14:ff:c2:d3:48:36: 18:4d:32:c6:c2:e6:35:97:8f:48:fc:cb:5b:f6:96: 05:87:38:c7:4b:03:cc:47:f3:d8:5a:89:4a:95:7f: fa:ed:2a:34:88:a8:30:14:92:e3:48:61:8d:a0:8a: be:99:13:e9:54:5f:91:8f:80:08:d9:ea:53:12:a5: 06:8f:51:8a:10:02:ef:79:49:ee:bb:21:40:3f:59: bc:61:e0:3e:2f:48:90:d1:43:01:d7:76:8b:cc:77: 59:dc:f0:b1:b0:af:d5:39:ed:be:cd:30:78:b3:74: 45:06:17:64:1f:61:e2:4f:2c:2f:2f:bb:35:86:61: 8e:e4:e6:e8:2c:95:a5:02:08:00:cc:8f:a9:e1:4c: bf:34:e0:09:88:45:af:65:10:b8:4f:5b:79:3e:3f: 62:61:1d:ff:9c:19:9a:a1:f7:8c:a8:88:a0:7a:ec: 83:36:29:ae:43:1e:2a:15:d8:b3:63:78:5e:66:e2: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4A:FD:42:5C:41:EF:EE:B6:FB:17:C8:70:12:D1:BF:49:70:AF:FE X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:68:30:62:51:d5:93:1d:2e:8f:47:8f:1b:4c:c3:6c:85: c2:71:6e:0d:70:de:a2:cb:0d:4c:b6:ea:cc:7c:35:41:da:d0: 34:d7:6c:bd:86:7f:10:04:d3:78:29:14:0e:a9:da:41:e3:28: 64:80:81:86:11:ce:e9:88:8e:d0:da:01:c9:d5:98:92:a1:90: b1:91:d0:87:94:3c:a6:15:ba:91:90:d9:c5:f7:8b:02:d6:6c: af:7e:29:17:1c:43:cb:fa:8f:79:6c:82:47:4d:e9:aa:7f:61: 03:60:03:49:64:59:4d:2d:64:87:fa:7c:19:a6:d3:d0:82:bf: 19:77:b1:69:08:65:3a:cc:28:fd:4a:61:15:2c:58:f0:f5:6a: dd:14:55:3e:13:13:2c:07:51:0f:90:58:9c:5c:1a:e7:79:b0: 47:cf:90:9d:5e:e1:12:09:f7:73:bc:45:72:34:33:89:3a:07: 59:b4:99:81:fe:ee:f7:23:4b:54:f9:23:ef:d7:5b:c3:17:3b: 27:5a:8a:84:e5:32:00:2b:23:68:60:38:8a:77:30:3f:44:6c: 6b:8c:11:bf:c7:0a:2e:fd:cf:3f:1f:c2:3f:80:cb:32:f5:ea: 9e:08:28:be:05:c0:a2:2a:44:f0:eb:8f:e5:0b:92:c2:3b:36: 7e:fb:16:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUwNzAzMDAyMTUyWhcNMjUwNzEwMDAyMTUyWjAYMRYwFAYD VQQDEw02ODY1Y2QyMC1kZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4z6Fbs+0dNNMPh4Kvc3xObQuhzz3Rd+iU606YDpx3322dTd4qZJalnGX0Yc cef+QQqzq6kW1PfDo4CeVLrZTFtQAVcU/8LTSDYYTTLGwuY1l49I/Mtb9pYFhzjH SwPMR/PYWolKlX/67So0iKgwFJLjSGGNoIq+mRPpVF+Rj4AI2epTEqUGj1GKEALv eUnuuyFAP1m8YeA+L0iQ0UMB13aLzHdZ3PCxsK/VOe2+zTB4s3RFBhdkH2HiTywv L7s1hmGO5OboLJWlAggAzI+p4Uy/NOAJiEWvZRC4T1t5Pj9iYR3/nBmaofeMqIig euyDNimuQx4qFdizY3heZuJMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxK/UJc Qe/utvsXyHAS0b9JcK/+MB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3zGgwYlHVkx0uj0ePG0zDbIXCcW4NcN6iyw1MturMfDVB2tA012y9 hn8QBNN4KRQOqdpB4yhkgIGGEc7piI7Q2gHJ1ZiSoZCxkdCHlDymFbqRkNnF94sC 1myvfikXHEPL+o95bIJHTemqf2EDYANJZFlNLWSH+nwZptPQgr8Zd7FpCGU6zCj9 SmEVLFjw9WrdFFU+ExMsB1EPkFicXBrnebBHz5CdXuESCfdzvEVyNDOJOgdZtJmB /u73I0tU+SPv11vDFzsnWoqE5TIAKyNoYDiKdzA/RGxrjBG/xwou/c8/H8I/gMsy 9eqeCCi+BcCiKkTw64/lC5LCOzZ++xZb -----END CERTIFICATE-----Generated at Fri Jul 4 08:02:04 2025 by rpki-client