$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json) Hash identifier: tKfs6j13VlIArtid4UhWB6JTshQamq5jjCgAQohLWk4= Subject key identifier: F4:83:49:48:13:85:9B:C6:E9:B8:AC:C7:56:0D:A4:97:42:8E:29:D2 Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft Manifest number: 7F Signing time: Wed 14 May 2025 19:37:55 +0000 Manifest this update: Wed 14 May 2025 19:37:55 +0000 Manifest next update: Wed 21 May 2025 19:37:55 +0000 Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: g5b3LTTWx44X8UfWJLNkE9tnBXdp9HCUa8GThbd2Fbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Validity Not Before: May 14 19:37:55 2025 GMT Not After : May 21 19:37:55 2025 GMT Subject: CN=6824f113-5f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:ba:e8:ae:9f:53:c1:82:1d:08:8b:63:a3: 15:bc:f1:cc:a5:ed:9b:3d:b8:96:5b:bb:b8:94:64: 31:38:08:c4:51:29:f9:17:68:7a:cf:1f:aa:cf:6f: 90:6c:75:3b:16:a5:22:0a:87:05:98:08:c6:92:f6: d6:fa:97:31:76:e7:9a:cb:96:0a:d0:ef:c9:0a:e1: e8:f7:2e:66:ad:23:f0:5d:98:e5:4a:8f:30:29:d0: 07:71:ae:9e:4c:75:30:f7:28:17:eb:ae:45:49:b1: 16:01:f8:0b:86:44:0b:aa:15:4f:80:77:17:22:0e: 6a:f9:da:6e:72:5b:a1:2a:4c:d0:b2:ae:15:d5:41: 37:7c:dc:a7:f1:ea:f1:e8:22:7e:19:8e:a5:96:78: 17:74:bb:b4:48:42:b2:bb:69:f9:46:e2:4a:1a:9e: 9c:51:17:68:7f:9b:25:3d:fd:93:6d:66:5a:0a:0f: 2e:c3:b9:b1:b9:46:9a:29:04:96:88:3b:08:c8:7e: 6d:7c:5c:ca:be:a2:6d:fe:0b:74:dc:b1:01:d1:38: 2f:4e:67:3b:52:c2:94:66:68:95:11:b2:3b:00:be: 9e:50:f8:25:f1:c1:27:5c:d1:ea:78:d4:37:af:cb: 75:e5:ce:e9:1e:3c:81:c4:24:05:d8:06:b0:4f:d3: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:83:49:48:13:85:9B:C6:E9:B8:AC:C7:56:0D:A4:97:42:8E:29:D2 X509v3 Authority Key Identifier: keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:98:d8:a7:ff:b8:59:b9:b2:72:96:ef:38:17:7a:44:91:a7: 85:9d:9f:3d:29:80:b6:6f:2e:15:86:2d:81:a4:0b:05:2d:04: 04:ec:89:da:44:80:95:9b:59:59:77:6c:d4:91:be:f5:bd:4d: 0a:7b:5c:c2:56:ef:f0:73:4f:57:b7:00:be:67:70:6e:00:8f: 77:cc:cb:ed:29:0a:f4:42:a6:86:8d:27:fe:41:33:34:be:90: e4:ab:d9:e7:d6:b7:2b:76:ea:54:73:a9:30:3d:3c:73:5a:2a: 50:45:3a:89:82:60:25:f2:c0:5b:d1:06:f7:47:1f:21:2e:78: 1b:24:e3:84:67:4d:e5:f8:c4:fa:bc:3d:00:b2:f5:32:c3:9e: 32:49:81:43:11:c9:2b:50:2f:0a:90:d2:df:63:be:49:55:b8: e8:99:87:fe:7f:28:9f:e4:3e:6e:a8:c7:4d:e9:a8:cb:33:bd: 98:03:ce:82:4a:ba:e5:0c:d9:0a:97:d9:de:73:07:eb:fd:37: 8d:71:b9:33:c4:3a:d0:57:20:16:2e:bc:21:d5:f5:73:2d:95: c6:53:44:d1:07:6b:77:60:1b:13:27:e6:3e:cb:34:0d:8e:40: 26:0d:8a:76:93:49:b4:2e:b1:11:cb:96:92:b1:dc:97:5c:48: 78:da:82:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MENBMTExMC8GA1UEBRMoMkM3QjVEODQ3MjAwM0NGMzQzNkFDRkU1QjYxRTg5RUM4 QjFBRDhBQjAeFw0yNTA1MTQxOTM3NTVaFw0yNTA1MjExOTM3NTVaMBgxFjAUBgNV BAMTDTY4MjRmMTEzLTVmNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPR7rorp9TwYIdCItjoxW88cyl7Zs9uJZbu7iUZDE4CMRRKfkXaHrPH6rPb5Bs dTsWpSIKhwWYCMaS9tb6lzF255rLlgrQ78kK4ej3LmatI/BdmOVKjzAp0Adxrp5M dTD3KBfrrkVJsRYB+AuGRAuqFU+AdxciDmr52m5yW6EqTNCyrhXVQTd83Kfx6vHo In4ZjqWWeBd0u7RIQrK7aflG4koanpxRF2h/myU9/ZNtZloKDy7DubG5RpopBJaI OwjIfm18XMq+om3+C3TcsQHROC9OZztSwpRmaJURsjsAvp5Q+CXxwSdc0ep41Dev y3XlzukePIHEJAXYBrBP0xeVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9INJSBOF m8bpuKzHVg2kl0KOKdIwHwYDVR0jBBgwFoAULHtdhHIAPPNDas/lth6J7Isa2Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwQ0ExLzRFMTFGNEQ2NzE5 MDExRUY4M0M0QkY3QUM0RjlBRTAyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTEh0ZGhISUFQUE5EYXNfbHRoNko3SXNhMktzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw Q0ExLzRFMTFGNEQ2NzE5MDExRUY4M0M0QkY3QUM0RjlBRTAyL0xIdGRoSElBUFBO RGFzX2x0aDZKN0lzYTJLcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKY2Kf/uFm5snKW7zgXekSRp4Wdnz0pgLZvLhWGLYGkCwUtBATsidpE gJWbWVl3bNSRvvW9TQp7XMJW7/BzT1e3AL5ncG4Aj3fMy+0pCvRCpoaNJ/5BMzS+ kOSr2efWtyt26lRzqTA9PHNaKlBFOomCYCXywFvRBvdHHyEueBsk44RnTeX4xPq8 PQCy9TLDnjJJgUMRyStQLwqQ0t9jvklVuOiZh/5/KJ/kPm6ox03pqMszvZgDzoJK uuUM2QqX2d5zB+v9N41xuTPEOtBXIBYuvCHV9XMtlcZTRNEHa3dgGxMn5j7LNA2O QCYNinaTSbQusRHLlpKx3JdcSHjagrY= -----END CERTIFICATE-----Generated at Wed May 14 23:17:05 2025 by rpki-client