$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: RxB2EOMMNhIq8wwBjbnPXJRq75lyKAjWIREX4DTnFpY= Subject key identifier: AE:A5:4F:02:91:5D:6B:FE:CA:CA:FF:1B:39:CB:E2:D1:80:15:CE:0F Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 08A5 Signing time: Wed 02 Jul 2025 20:49:20 +0000 Manifest this update: Wed 02 Jul 2025 20:49:20 +0000 Manifest next update: Wed 09 Jul 2025 20:49:20 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: af8A/i3+63L2L5zp2D7/OEMZCS2KZBroq+x/a3Pii2U=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Jul 2 20:49:20 2025 GMT Not After : Jul 9 20:49:20 2025 GMT Subject: CN=68659b50-fb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:79:ad:c5:aa:5e:77:27:9f:dd:2f:ce:30: fa:94:53:32:40:92:68:44:9c:6e:2f:c1:7d:da:78: 2c:ea:96:d4:bd:17:b4:a3:ab:fb:dd:3a:02:12:45: 7a:1e:11:dc:fc:3e:88:93:b8:4a:10:00:09:96:73: 90:9a:54:6c:6c:f7:de:b8:31:60:54:9f:73:96:c2: 63:b8:12:bb:09:f4:c6:82:09:c6:50:f1:a6:59:c9: e5:4b:58:d1:6e:1f:63:8c:66:b2:21:09:00:3f:3b: 26:07:b8:05:d4:d2:71:fa:b3:53:d2:9b:05:02:1c: 76:25:18:f9:58:e8:bf:35:81:14:2c:63:71:a5:b3: 89:17:c5:87:08:08:30:78:a7:32:55:77:5f:4c:c2: 00:40:e1:e9:a0:3d:7f:f2:1c:22:93:09:f8:d3:7f: e9:b5:4c:39:13:31:1f:74:47:87:11:c1:96:4f:33: aa:23:a3:72:d8:6d:af:c5:29:57:ed:00:06:79:20: fb:b7:be:ac:28:bd:37:44:eb:c0:16:91:a1:93:fd: 42:c4:d1:af:cb:0c:0b:cb:d7:b6:b3:b7:d1:cf:26: b1:aa:6c:e4:32:7e:41:58:b6:87:24:2c:bc:e9:ed: 54:0d:64:19:da:8c:fe:58:71:c9:21:fd:1f:76:44: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A5:4F:02:91:5D:6B:FE:CA:CA:FF:1B:39:CB:E2:D1:80:15:CE:0F X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:cc:26:42:8a:02:5d:2b:6e:08:ff:e1:f7:af:01:d8:cb:b5: e1:fd:29:0b:e0:f4:4c:58:39:ef:07:2d:9a:a1:70:c5:98:54: 58:15:44:b5:bb:a2:5a:48:4a:31:ba:66:b7:f1:f3:f3:ac:c2: 6c:89:91:c9:86:42:ec:1e:ac:58:72:d2:2b:5e:e2:06:80:46: 37:38:71:90:96:80:5e:c8:28:ad:60:29:86:00:57:04:57:ff: ce:98:b6:92:b3:80:aa:f3:be:67:68:32:b6:f9:28:b1:08:16: 00:70:49:94:25:7f:8d:d8:8e:f7:d4:ca:0e:56:22:b7:4e:68: c7:71:a0:2f:1c:4d:91:70:7a:0e:be:11:48:fd:75:fb:3b:ea: 72:10:0d:61:dd:fe:fb:d9:9a:4e:d1:0b:ce:25:33:4e:68:f0: 44:02:ac:64:46:3e:f9:f6:11:cb:b5:b2:40:41:b6:ce:b8:82: bb:ee:9c:01:ae:1e:fa:e1:5d:b5:c4:e7:54:c4:0d:90:d7:d4: d8:99:bf:c9:a3:23:6d:67:70:6b:32:fd:a9:6a:2b:58:92:96: 64:82:d9:3f:84:78:27:1b:a5:2c:32:01:15:04:bb:23:9e:11: 5b:65:f4:eb:ec:4e:14:f2:2e:c3:12:90:cc:97:49:ee:24:88: 97:46:9f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwNzAyMjA0OTIwWhcNMjUwNzA5MjA0OTIwWjAYMRYwFAYD VQQDEw02ODY1OWI1MC1mYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZl5rcWqXncnn90vzjD6lFMyQJJoRJxuL8F92ngs6pbUvRe0o6v73ToCEkV6 HhHc/D6Ik7hKEAAJlnOQmlRsbPfeuDFgVJ9zlsJjuBK7CfTGggnGUPGmWcnlS1jR bh9jjGayIQkAPzsmB7gF1NJx+rNT0psFAhx2JRj5WOi/NYEULGNxpbOJF8WHCAgw eKcyVXdfTMIAQOHpoD1/8hwikwn403/ptUw5EzEfdEeHEcGWTzOqI6Ny2G2vxSlX 7QAGeSD7t76sKL03ROvAFpGhk/1CxNGvywwLy9e2s7fRzyaxqmzkMn5BWLaHJCy8 6e1UDWQZ2oz+WHHJIf0fdkS6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6lTwKR XWv+ysr/GznL4tGAFc4PMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlzCZCigJdK24I/+H3rwHYy7Xh/SkL4PRMWDnvBy2aoXDFmFRYFUS1 u6JaSEoxuma38fPzrMJsiZHJhkLsHqxYctIrXuIGgEY3OHGQloBeyCitYCmGAFcE V//OmLaSs4Cq875naDK2+SixCBYAcEmUJX+N2I731MoOViK3TmjHcaAvHE2RcHoO vhFI/XX7O+pyEA1h3f772ZpO0QvOJTNOaPBEAqxkRj759hHLtbJAQbbOuIK77pwB rh764V21xOdUxA2Q19TYmb/JoyNtZ3BrMv2paitYkpZkgtk/hHgnG6UsMgEVBLsj nhFbZfTr7E4U8i7DEpDMl0nuJIiXRp9z -----END CERTIFICATE-----Generated at Fri Jul 4 18:59:22 2025 by rpki-client