$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: aBcXg19lXYprw81XPlSsr1ZexlEzpuPnzQ5YmJFu2dg= Subject key identifier: 5B:B7:19:7F:76:47:66:65:AB:F1:1C:96:38:F6:25:CB:F2:19:B8:FB Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0B99 Signing time: Fri 04 Jul 2025 19:21:12 +0000 Manifest this update: Fri 04 Jul 2025 19:21:11 +0000 Manifest next update: Fri 11 Jul 2025 19:21:11 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: gqoKfISpkRh2KU1tLjsyuEldawYP3+IxA9fn5vqBMj8=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Jul 4 19:21:11 2025 GMT Not After : Jul 11 19:21:11 2025 GMT Subject: CN=686829a7-0b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:f7:3d:d2:68:dc:f4:a1:ab:b5:a6:c5:ae: 9e:c9:c4:a2:ce:90:b9:4b:1e:f1:75:90:c2:ce:41: d3:f7:e6:c6:89:86:19:f6:1a:bd:f6:9c:34:76:2e: 4b:a3:bc:d6:eb:9a:ce:d1:7c:9c:e9:dc:88:70:3f: 7c:46:b5:2f:28:82:45:25:46:87:7c:37:7c:9c:00: 35:5c:f2:59:87:88:01:8b:24:3f:7e:52:c1:4d:f4: 0c:71:78:c9:06:d0:1f:c9:f2:91:9b:ac:6a:6c:9b: 7b:1d:54:2c:fb:c9:54:af:d7:60:93:13:67:56:40: b2:7a:17:ce:c0:29:73:11:b9:1d:09:5a:48:de:1c: 66:c2:f0:92:92:a8:bf:14:b6:a2:0e:ff:69:bb:21: 31:8c:44:71:cf:fd:29:b0:d8:5a:1d:95:0a:49:60: 05:69:15:71:3c:8e:ad:c7:e7:ed:06:01:17:90:0c: 13:32:e1:75:32:52:41:70:a3:4b:42:f0:ae:72:ee: d1:38:7d:74:94:91:9a:0b:4b:e4:c5:6d:7a:dc:a4: 54:f0:e3:04:0a:34:81:6d:db:6f:c0:7f:b0:c1:8e: 88:4c:77:99:e3:c6:66:4e:15:22:6b:97:83:df:ba: 07:6a:94:7f:c3:70:ab:08:31:f1:b8:c0:30:e9:0a: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B7:19:7F:76:47:66:65:AB:F1:1C:96:38:F6:25:CB:F2:19:B8:FB X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:37:6a:3e:ad:10:3d:c1:ea:9a:51:ee:eb:4c:c3:8b:f4:07: c0:8b:ab:d8:7c:98:ac:9d:df:c8:fd:97:8a:f4:5b:c5:12:bf: 95:2e:a0:d9:e4:ab:08:a8:68:7a:07:67:87:24:2b:f8:be:f6: 24:34:79:24:66:29:26:46:fa:e8:11:a4:0b:1a:8c:dc:f1:89: eb:76:56:27:de:5c:8b:8c:38:27:37:9d:eb:a9:12:7e:94:eb: dc:83:d4:43:75:3b:c3:7f:bc:ce:e1:da:ec:0f:10:d1:fd:a7: 2e:24:a0:45:d0:d4:7d:3a:26:64:d2:6b:3d:76:da:98:43:1b: 41:09:09:5f:1e:c2:c4:fc:87:1a:35:98:6b:bc:4c:3f:63:56: c6:84:34:1a:5a:a5:9a:86:11:31:f4:ef:ae:2d:46:9f:78:99: b5:79:de:32:ad:f8:b9:c5:12:aa:09:63:48:1d:66:fd:4f:30: 02:07:8c:05:44:f1:4e:b0:44:ab:74:ab:a7:85:88:a4:20:bb: 07:ce:a3:88:f2:d8:25:f0:2f:10:47:98:fc:3b:39:2c:ac:9c: 29:e9:5a:61:27:9c:27:15:7e:83:49:fb:2a:b4:55:0f:95:36: a5:2f:12:6f:2d:a0:c1:d9:2d:3c:51:03:35:4d:63:74:04:68: 3c:ce:91:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUwNzA0MTkyMTExWhcNMjUwNzExMTkyMTExWjAYMRYwFAYD VQQDEw02ODY4MjlhNy0wYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCT3PdJo3PShq7Wmxa6eycSizpC5Sx7xdZDCzkHT9+bGiYYZ9hq99pw0di5L o7zW65rO0Xyc6dyIcD98RrUvKIJFJUaHfDd8nAA1XPJZh4gBiyQ/flLBTfQMcXjJ BtAfyfKRm6xqbJt7HVQs+8lUr9dgkxNnVkCyehfOwClzEbkdCVpI3hxmwvCSkqi/ FLaiDv9puyExjERxz/0psNhaHZUKSWAFaRVxPI6tx+ftBgEXkAwTMuF1MlJBcKNL QvCucu7ROH10lJGaC0vkxW163KRU8OMECjSBbdtvwH+wwY6ITHeZ48ZmThUia5eD 37oHapR/w3CrCDHxuMAw6QrjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu3GX92 R2Zlq/Ecljj2JcvyGbj7MB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcN2o+rRA9weqaUe7rTMOL9AfAi6vYfJisnd/I/ZeK9FvFEr+VLqDZ 5KsIqGh6B2eHJCv4vvYkNHkkZikmRvroEaQLGozc8YnrdlYn3lyLjDgnN53rqRJ+ lOvcg9RDdTvDf7zO4drsDxDR/acuJKBF0NR9OiZk0ms9dtqYQxtBCQlfHsLE/Ica NZhrvEw/Y1bGhDQaWqWahhEx9O+uLUafeJm1ed4yrfi5xRKqCWNIHWb9TzACB4wF RPFOsESrdKunhYikILsHzqOI8tgl8C8QR5j8OzksrJwp6VphJ5wnFX6DSfsqtFUP lTalLxJvLaDB2S08UQM1TWN0BGg8zpFD -----END CERTIFICATE-----Generated at Sat Jul 5 01:39:41 2025 by rpki-client