$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json) Hash identifier: 33igSppKZiODVUYuQv1P5kzlXO0rKiQXhS4J/fjyPO8= Subject key identifier: 32:1A:C2:78:C2:4F:C0:A6:F2:AD:DF:4F:34:B6:1C:B2:89:A0:46:35 Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft Manifest number: 14 Signing time: Thu 03 Jul 2025 08:19:52 +0000 Manifest this update: Thu 03 Jul 2025 08:19:51 +0000 Manifest next update: Thu 10 Jul 2025 08:19:51 +0000 Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: +ZsAlZan2eZ85MnmQUOV21z+pLz1nJ6sK2vWi+1PlGk=) 2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: qhyVTwwEqxyTdaMk7ejochFJVyO6XKIlCbt0eSHtSs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Validity Not Before: Jul 3 08:19:51 2025 GMT Not After : Jul 10 08:19:51 2025 GMT Subject: CN=68663d28-d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:b9:be:6b:94:8e:3d:45:b0:8c:f5:22:e7: 2b:4b:28:96:81:09:63:8e:f7:f1:68:92:51:8d:e6: 39:4d:a9:42:d0:63:f3:e3:0a:04:8f:d7:a8:b6:ba: 25:70:63:c4:5c:92:98:54:2c:59:94:b9:6b:a9:00: 93:46:70:99:e9:b6:a6:50:63:94:f4:10:3f:d4:87: a6:c4:77:31:3b:2f:d6:d5:d4:33:18:8d:d0:f3:24: f4:bd:8c:c0:61:c9:13:48:c2:43:53:51:ab:1a:1a: a1:d6:f0:ec:a6:59:3b:9f:56:78:3b:cc:ac:47:19: 65:06:b7:19:06:b9:34:a6:d4:27:fa:06:2c:a5:13: 7a:4b:47:e3:3b:86:95:47:db:32:47:c7:ea:37:4c: a2:1e:ca:31:f9:11:1a:ff:4e:84:98:e4:25:56:be: 17:86:a9:17:98:ef:e7:24:23:ac:4c:fe:73:dc:89: 71:77:71:a7:b6:c5:d6:7a:ae:56:bf:d2:ee:48:05: 92:83:5e:fa:31:12:08:7b:da:f6:19:42:09:ab:2e: e8:cb:8a:0e:7d:aa:14:1f:10:2e:10:b5:1d:fc:77: 77:f1:eb:57:f7:d0:a5:51:30:79:b2:d6:23:df:f5: 45:40:7f:9c:1c:4d:e9:63:02:2c:34:36:4f:0d:4f: af:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1A:C2:78:C2:4F:C0:A6:F2:AD:DF:4F:34:B6:1C:B2:89:A0:46:35 X509v3 Authority Key Identifier: keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3b:da:2d:ce:ca:52:e3:11:45:a7:5a:16:54:c1:df:d7:c3: 79:69:33:a8:ea:20:cd:dd:93:55:cd:15:17:31:79:b0:b9:20: ee:0b:0d:bf:78:a1:85:e0:c5:be:99:c2:d3:e9:98:bb:49:a0: 42:1d:36:8d:a8:45:80:38:0d:a7:68:14:12:c1:13:38:bc:ee: 06:32:ed:a5:d3:2d:08:4f:ad:4c:d9:a8:19:af:26:4c:50:b6: e9:63:4f:51:55:55:33:c5:69:2d:58:27:f2:6b:e9:bd:da:a4: 48:f4:15:1f:e2:3a:30:56:3c:7a:16:87:3e:0e:27:29:c5:ce: f3:05:c2:7a:0a:7f:fb:e1:6c:a5:dd:1f:7c:24:93:22:68:52: e6:fb:bc:f4:0c:88:47:5f:9b:8f:28:8a:8d:98:41:d7:e9:55: 98:54:80:a8:93:82:74:dc:17:57:ea:e1:f3:81:4a:25:8f:e3: 15:9f:21:b7:5f:d8:84:20:e0:9a:a2:28:2f:2c:62:35:bf:5f: 85:12:c6:14:84:de:a7:b2:a1:cb:7c:6c:e2:03:7f:c8:ec:45: 48:71:2f:10:96:c2:fa:e1:07:35:0b:73:f0:6c:47:bb:a7:44: 35:71:6e:50:ff:12:45:94:ff:6e:a9:44:b5:ee:07:23:d0:56: f8:3d:2b:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMkQzRTNGQkJDN0MyQjEyQ0Q1MzRDOEI5RUQzNzg2RkI2 QUE1NTUwNjAeFw0yNTA3MDMwODE5NTFaFw0yNTA3MTAwODE5NTFaMBgxFjAUBgNV BAMTDTY4NjYzZDI4LWQ0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPgbm+a5SOPUWwjPUi5ytLKJaBCWOO9/FoklGN5jlNqULQY/PjCgSP16i2uiVw Y8RckphULFmUuWupAJNGcJnptqZQY5T0ED/Uh6bEdzE7L9bV1DMYjdDzJPS9jMBh yRNIwkNTUasaGqHW8OymWTufVng7zKxHGWUGtxkGuTSm1Cf6BiylE3pLR+M7hpVH 2zJHx+o3TKIeyjH5ERr/ToSY5CVWvheGqReY7+ckI6xM/nPciXF3cae2xdZ6rla/ 0u5IBZKDXvoxEgh72vYZQgmrLujLig59qhQfEC4QtR38d3fx61f30KVRMHmy1iPf 9UVAf5wcTeljAiw0Nk8NT69/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMhrCeMJP wKbyrd9PNLYcsomgRjUwHwYDVR0jBBgwFoAULT4/u8fCsSzVNMi57TeG+2qlVQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzZBMkNFODgyNDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6Vk5NaTU3VGVHLTJxbFZR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFQ0X3U4ZkNzU3pWTk1pNTdUZUctMnFsVlFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzZBMkNFODgyNDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6 Vk5NaTU3VGVHLTJxbFZRWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK072i3OylLjEUWnWhZUwd/Xw3lpM6jqIM3dk1XNFRcxebC5IO4LDb94 oYXgxb6ZwtPpmLtJoEIdNo2oRYA4DadoFBLBEzi87gYy7aXTLQhPrUzZqBmvJkxQ tuljT1FVVTPFaS1YJ/Jr6b3apEj0FR/iOjBWPHoWhz4OJynFzvMFwnoKf/vhbKXd H3wkkyJoUub7vPQMiEdfm48oio2YQdfpVZhUgKiTgnTcF1fq4fOBSiWP4xWfIbdf 2IQg4JqiKC8sYjW/X4USxhSE3qeyoct8bOIDf8jsRUhxLxCWwvrhBzULc/BsR7un RDVxblD/EkWU/26pRLXuByPQVvg9KxM= -----END CERTIFICATE-----Generated at Fri Jul 4 04:03:26 2025 by rpki-client