$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: UDE/jIfMiL30/1KgrSDEHv2DCksKpBtuQgIU6Ae2TyA= Subject key identifier: 54:FF:5B:C9:40:77:39:CE:B7:C6:A8:76:E3:37:FA:33:C3:90:FE:14 Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0B7E Signing time: Sat 10 May 2025 18:50:20 +0000 Manifest this update: Sat 10 May 2025 18:50:19 +0000 Manifest next update: Sat 17 May 2025 18:50:19 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: 9YeUYVVqawD2AVIM5SHhwbR0TRaEQtVZX7fBX1aTOW8=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: May 10 18:50:19 2025 GMT Not After : May 17 18:50:19 2025 GMT Subject: CN=681f9feb-1c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:13:9e:46:9c:3c:42:19:f1:a5:0c:46:49: 67:12:a1:10:26:0f:09:76:a4:19:60:37:b9:75:97: d0:08:89:3a:97:fc:00:d7:9c:cc:7d:95:e0:48:bc: d6:1a:33:52:7b:93:9a:66:24:2f:a5:da:c6:76:7a: 90:52:3d:99:34:bd:02:c6:b1:77:28:bf:f7:d8:80: 32:3e:d4:05:76:fb:2e:37:34:d0:9c:1b:6f:f0:19: 54:df:59:69:83:8a:e1:a7:2b:47:b3:b9:b1:ce:62: 8d:f8:d5:d7:14:32:98:af:b5:44:13:10:44:03:b9: 15:1a:b6:5d:37:38:66:b9:f4:9d:11:3d:54:6f:c2: 4a:24:a4:9a:36:14:92:62:f5:4b:2f:67:f2:bb:90: 07:ff:7f:c3:85:23:22:39:d2:ce:3f:ff:f9:40:f7: eb:c5:dd:1d:f4:e7:73:6c:9c:81:0a:b3:f8:5d:c3: f1:56:de:dd:f0:8c:70:a7:07:d3:44:71:6d:87:94: 6f:1c:a8:0c:ab:9c:0b:86:75:ae:51:d0:11:10:ce: 83:79:bd:bf:07:23:41:cd:52:ab:c6:17:ea:40:be: 12:58:a3:23:89:8a:8d:f2:14:5f:12:9a:14:62:bf: af:79:23:09:aa:51:c6:36:65:70:c5:38:7e:74:47: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FF:5B:C9:40:77:39:CE:B7:C6:A8:76:E3:37:FA:33:C3:90:FE:14 X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5f:e3:a7:6b:5f:1d:32:4e:b7:b1:37:bb:36:00:f3:86:df: ba:36:23:89:95:7d:fa:f0:ba:f7:fd:1e:69:92:39:bb:67:31: 92:bf:14:64:34:01:e9:04:0f:c1:6c:0c:4f:8a:28:e1:a1:9f: 82:8b:dc:1d:be:0d:7c:27:9e:5b:7d:67:37:27:40:8b:b2:9e: 03:cc:39:97:c7:a4:ab:91:77:d1:d8:88:5b:3b:0f:4a:8a:82: 0c:39:56:88:7d:cd:b2:bc:14:d3:95:3f:99:68:44:3e:f0:67: 7e:eb:a1:b6:b3:9f:f5:39:93:59:e3:60:aa:6e:28:e7:6d:5d: 1d:83:f4:ba:bc:44:cf:4a:5f:8d:84:22:a5:f3:1f:2b:61:09: 42:1d:4c:11:b0:62:62:2d:eb:ef:50:96:67:a7:72:43:a1:e0: 22:73:74:ca:32:b3:de:9e:6e:92:83:f2:eb:1f:ff:07:f8:48: 95:ae:e3:d7:b8:93:4f:b4:a1:f4:c0:9d:1e:3e:9c:0a:65:80: 1e:b6:af:96:03:4c:8c:1c:5e:ec:9f:5b:dd:5c:59:96:b1:53: c9:89:80:c5:eb:76:e6:fa:17:e4:62:5d:b5:4b:03:fe:30:2b: 03:2b:d3:c4:c1:3d:02:15:6d:b5:99:ab:f1:e5:d7:e1:84:b1: e4:58:63:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUwNTEwMTg1MDE5WhcNMjUwNTE3MTg1MDE5WjAYMRYwFAYD VQQDEw02ODFmOWZlYi0xYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPETnkacPEIZ8aUMRklnEqEQJg8JdqQZYDe5dZfQCIk6l/wA15zMfZXgSLzW GjNSe5OaZiQvpdrGdnqQUj2ZNL0CxrF3KL/32IAyPtQFdvsuNzTQnBtv8BlU31lp g4rhpytHs7mxzmKN+NXXFDKYr7VEExBEA7kVGrZdNzhmufSdET1Ub8JKJKSaNhSS YvVLL2fyu5AH/3/DhSMiOdLOP//5QPfrxd0d9OdzbJyBCrP4XcPxVt7d8IxwpwfT RHFth5RvHKgMq5wLhnWuUdAREM6Deb2/ByNBzVKrxhfqQL4SWKMjiYqN8hRfEpoU Yr+veSMJqlHGNmVwxTh+dEe+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT/W8lA dznOt8aoduM3+jPDkP4UMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzX+Ona18dMk63sTe7NgDzht+6NiOJlX368Lr3/R5pkjm7ZzGSvxRk NAHpBA/BbAxPiijhoZ+Ci9wdvg18J55bfWc3J0CLsp4DzDmXx6SrkXfR2IhbOw9K ioIMOVaIfc2yvBTTlT+ZaEQ+8Gd+66G2s5/1OZNZ42CqbijnbV0dg/S6vETPSl+N hCKl8x8rYQlCHUwRsGJiLevvUJZnp3JDoeAic3TKMrPenm6Sg/LrH/8H+EiVruPX uJNPtKH0wJ0ePpwKZYAetq+WA0yMHF7sn1vdXFmWsVPJiYDF63bm+hfkYl21SwP+ MCsDK9PEwT0CFW21mavx5dfhhLHkWGNJ -----END CERTIFICATE-----Generated at Mon May 12 12:52:26 2025 by rpki-client