$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: P18v0jMsrMsHJ41nsHjB10IIkCAFNBcfawDGWYa0DRE= Subject key identifier: 17:ED:BB:10:B7:21:EF:64:6F:A1:94:66:30:DF:8F:65:DB:C1:C6:17 Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 046B Signing time: Sun 20 Apr 2025 23:46:15 +0000 Manifest this update: Sun 20 Apr 2025 23:46:15 +0000 Manifest next update: Sun 27 Apr 2025 23:46:15 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: giGsUgrseJdwcY3/12gadQ+pOIu2KW4m7PIrH4+6FUA=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Apr 20 23:46:15 2025 GMT Not After : Apr 27 23:46:15 2025 GMT Subject: CN=68058747-455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:5f:5b:d4:a1:f4:8f:4d:33:01:03:65:f4: 77:6e:68:dc:4f:6b:27:39:a8:ea:6b:26:cf:ab:d7: 4f:9f:4e:45:4e:dc:80:50:e1:c6:e9:b7:40:11:15: 39:97:71:cc:10:af:02:55:12:35:94:86:f6:a3:97: 45:e1:1a:27:16:e3:c2:c7:86:53:8e:0e:4c:2c:d7: cc:fe:bc:9a:eb:d1:5e:62:0f:5a:7f:bd:0b:6c:e0: 2a:aa:5c:7e:9d:3c:c6:ed:33:a1:b0:17:45:d7:fc: 3f:31:2a:36:84:a6:36:62:43:76:bc:ac:fb:af:6b: 82:81:52:33:03:19:3a:18:2d:9f:eb:ac:0c:a3:97: 54:51:16:6d:a7:39:8d:d7:2e:10:a6:96:e4:6f:5b: 89:11:7a:36:73:2b:a2:9c:24:2a:9c:c4:38:d4:6f: 93:b0:7d:f4:1f:aa:06:aa:e9:9a:15:b7:25:e2:11: 7c:cb:f3:a2:99:60:88:e2:18:a9:bf:4b:59:61:2a: 7f:37:16:23:e8:f2:50:3e:3d:35:14:77:8c:c9:65: 61:43:f6:85:c6:06:15:a2:5a:55:dd:be:38:a5:cd: f8:36:3f:6b:d7:7e:d7:77:a0:6e:02:b8:f4:ad:1f: 31:e4:2f:44:20:db:90:db:8a:28:7c:de:75:8e:07: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:ED:BB:10:B7:21:EF:64:6F:A1:94:66:30:DF:8F:65:DB:C1:C6:17 X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:52:90:af:9d:d5:a9:ed:ed:43:21:2b:2d:88:fc:11:f5:08: 3f:05:b8:45:9b:e4:e4:cc:9a:07:53:c3:56:d6:30:62:74:9f: da:10:83:6c:54:4a:8f:8d:14:d3:cf:98:8f:df:9b:05:f2:48: 39:8b:a8:17:97:cc:c1:92:71:0f:c2:bc:c5:cb:95:54:86:63: e9:69:60:be:01:a7:bc:55:11:8e:64:18:ea:e6:2b:94:84:b5: 3a:92:ca:f4:f2:00:c6:0f:a1:4b:f9:af:df:55:ac:a8:3d:d0: 81:5b:b2:3c:29:82:ce:88:62:62:8c:ae:b8:5f:5d:0f:20:73: d6:6a:72:4e:1d:74:aa:ff:b3:f3:95:02:dc:89:6f:8d:ff:fe: 0d:2f:f4:10:e7:9e:b4:06:bc:dc:75:b1:d9:48:fd:99:ed:d3: 19:1e:bd:91:f5:d4:5c:67:a1:fe:bd:0f:27:1d:d4:01:c8:b8: 73:d5:fc:b2:d9:1a:c7:ea:57:1d:f1:15:1f:e5:19:ec:bc:9a: 07:a0:86:ec:11:f5:d2:fc:ac:00:ef:30:d4:3b:c1:f4:40:3a: 70:7d:1e:41:77:a0:f8:f9:a6:fd:44:08:d8:ae:b2:54:bf:8b: 4e:21:78:c4:56:28:3b:b4:1c:be:49:22:c0:15:8b:e8:6e:30: e9:09:da:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUwNDIwMjM0NjE1WhcNMjUwNDI3MjM0NjE1WjAYMRYwFAYD VQQDEw02ODA1ODc0Ny00NTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKRfW9Sh9I9NMwEDZfR3bmjcT2snOajqaybPq9dPn05FTtyAUOHG6bdAERU5 l3HMEK8CVRI1lIb2o5dF4RonFuPCx4ZTjg5MLNfM/rya69FeYg9af70LbOAqqlx+ nTzG7TOhsBdF1/w/MSo2hKY2YkN2vKz7r2uCgVIzAxk6GC2f66wMo5dUURZtpzmN 1y4Qppbkb1uJEXo2cyuinCQqnMQ41G+TsH30H6oGqumaFbcl4hF8y/OimWCI4hip v0tZYSp/NxYj6PJQPj01FHeMyWVhQ/aFxgYVolpV3b44pc34Nj9r137Xd6BuArj0 rR8x5C9EINuQ24oofN51jgdnoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBftuxC3 Ie9kb6GUZjDfj2XbwcYXMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGUpCvndWp7e1DISstiPwR9Qg/BbhFm+TkzJoHU8NW1jBidJ/aEINs VEqPjRTTz5iP35sF8kg5i6gXl8zBknEPwrzFy5VUhmPpaWC+Aae8VRGOZBjq5iuU hLU6ksr08gDGD6FL+a/fVayoPdCBW7I8KYLOiGJijK64X10PIHPWanJOHXSq/7Pz lQLciW+N//4NL/QQ5560BrzcdbHZSP2Z7dMZHr2R9dRcZ6H+vQ8nHdQByLhz1fyy 2RrH6lcd8RUf5RnsvJoHoIbsEfXS/KwA7zDUO8H0QDpwfR5Bd6D4+ab9RAjYrrJU v4tOIXjEVig7tBy+SSLAFYvobjDpCdoD -----END CERTIFICATE-----Generated at Tue Apr 22 06:13:22 2025 by rpki-client