$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: Ts+FdKVXFBQ003wOq41RjrovtrIxoPkM0cqGY6MdUYk= Subject key identifier: 1C:79:68:99:01:A0:67:3C:F0:B8:65:E2:B1:29:5C:4E:7D:96:44:13 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 08D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 08C1 Signing time: Fri 22 Aug 2025 20:37:07 +0000 Manifest this update: Fri 22 Aug 2025 20:37:07 +0000 Manifest next update: Fri 29 Aug 2025 20:37:07 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: 29PToskGlujCS47HQ3aEsGtUnlyr1YVh00dBudZtZCY=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: RhxFTOuJ/e6uIZTp4AHpESYI5KzhXykHlA9CqyGvafI=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: u5cH8Cct4Kcc1phETe1wMMgP4HVQBU2rSY+p4Vm2lKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Aug 22 20:37:07 2025 GMT Not After : Aug 29 20:37:07 2025 GMT Subject: CN=68a8d4f3-c237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:2e:a8:fa:22:bb:52:2b:b5:04:20:ee:b0: 04:70:16:49:88:a3:6c:c0:80:78:d6:9e:96:78:f9: 87:06:be:5e:cf:00:90:91:1b:d9:4d:b9:f6:6b:9d: c9:b6:92:95:9d:d0:8a:d1:84:97:b2:75:94:b7:ee: b0:42:a1:64:bc:87:c3:0c:42:03:03:7e:56:8d:63: fd:01:83:7a:a5:62:03:13:3b:6a:1b:2c:7d:ef:e5: 4e:55:8a:82:8d:58:69:48:27:7a:7f:b2:1a:44:2d: 83:95:34:78:af:2b:61:95:32:86:71:cf:a0:2e:1f: e1:22:38:94:43:78:97:f9:76:5e:bf:b4:51:2f:15: ad:12:87:c6:9a:d5:8c:b2:a9:c3:80:91:7b:d3:ce: 5b:98:a2:57:98:7c:bd:f9:8d:7a:4d:d1:29:39:c2: 6e:9c:d5:6f:0b:c4:f6:ac:da:13:30:65:ef:e5:2a: 31:89:12:5b:7b:b6:e1:b3:9c:62:8d:76:2f:53:21: 37:03:01:01:c1:53:9e:94:13:d8:2e:89:6e:96:14: ac:45:e6:d8:12:08:2f:5e:3a:1c:40:07:2e:b4:84: 6c:72:ec:e2:f0:b0:73:f8:e4:8c:99:26:d9:b3:2d: 25:6e:38:7d:98:56:12:bf:34:4c:52:50:94:8a:27: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:68:99:01:A0:67:3C:F0:B8:65:E2:B1:29:5C:4E:7D:96:44:13 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:33:9c:66:ec:f1:8a:56:ff:2a:3f:ba:66:e7:af:61:dd:14: 24:50:a6:1a:ab:09:76:ff:cc:03:48:f0:f8:ec:45:4d:16:eb: 9e:1d:ea:8c:be:44:b9:26:b7:df:c1:8b:2c:52:40:7f:40:19: da:4f:ef:49:2e:0c:26:f5:03:ac:ad:97:87:50:c9:77:4d:e1: 1f:70:a5:ff:8e:8e:1c:53:34:1b:0e:b8:66:cd:0b:9a:c8:fa: d4:01:dc:69:1e:69:20:cf:5e:94:c7:ff:99:e4:44:0a:1a:75: 95:53:5b:6b:3d:b0:01:6a:2e:fb:5c:91:59:ff:21:00:c7:52: 2d:49:61:0c:1c:15:ce:cd:64:cc:87:b1:6e:6a:09:10:3a:25: ba:9f:f7:87:2d:8f:83:d1:49:c8:9c:3e:fc:99:19:8d:9b:d2: 5c:99:13:ff:8d:0a:23:f9:1b:c3:10:60:f8:6c:27:60:46:0b: cb:b1:28:dd:47:63:41:4c:ac:15:4d:1a:83:89:d2:23:db:04: cf:30:76:1c:5e:f6:69:20:0d:da:7b:de:1d:15:b6:b7:aa:75: 8a:1b:3e:0f:64:20:c7:ed:eb:79:d9:6f:b2:7d:29:03:ba:6d: b0:04:eb:87:00:2a:f3:b4:43:24:0f:89:e6:f5:0d:e9:99:61: 36:9c:f7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwODIyMjAzNzA3WhcNMjUwODI5MjAzNzA3WjAYMRYwFAYD VQQDEw02OGE4ZDRmMy1jMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDsuqPoiu1IrtQQg7rAEcBZJiKNswIB41p6WePmHBr5ezwCQkRvZTbn2a53J tpKVndCK0YSXsnWUt+6wQqFkvIfDDEIDA35WjWP9AYN6pWIDEztqGyx97+VOVYqC jVhpSCd6f7IaRC2DlTR4rythlTKGcc+gLh/hIjiUQ3iX+XZev7RRLxWtEofGmtWM sqnDgJF7085bmKJXmHy9+Y16TdEpOcJunNVvC8T2rNoTMGXv5SoxiRJbe7bhs5xi jXYvUyE3AwEBwVOelBPYLolulhSsRebYEggvXjocQAcutIRscuzi8LBz+OSMmSbZ sy0lbjh9mFYSvzRMUlCUiieWBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBx5aJkB oGc88Lhl4rEpXE59lkQTMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXM5xm7PGKVv8qP7pm569h3RQkUKYaqwl2/8wDSPD47EVNFuueHeqM vkS5JrffwYssUkB/QBnaT+9JLgwm9QOsrZeHUMl3TeEfcKX/jo4cUzQbDrhmzQua yPrUAdxpHmkgz16Ux/+Z5EQKGnWVU1trPbABai77XJFZ/yEAx1ItSWEMHBXOzWTM h7FuagkQOiW6n/eHLY+D0UnInD78mRmNm9JcmRP/jQoj+RvDEGD4bCdgRgvLsSjd R2NBTKwVTRqDidIj2wTPMHYcXvZpIA3ae94dFba3qnWKGz4PZCDH7et52W+yfSkD um2wBOuHACrztEMkD4nm9Q3pmWE2nPfx -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:01 2025 by rpki-client