$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: CjXT+4YxPeei1y5GkEO9YshcGq+lUp6fVIAXwPYDGsw= Subject key identifier: 68:42:E3:50:F2:32:61:D2:30:20:95:CE:79:2B:E2:18:90:3B:6A:45 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 08AE Signing time: Sun 20 Jul 2025 20:38:30 +0000 Manifest this update: Sun 20 Jul 2025 20:38:29 +0000 Manifest next update: Sun 27 Jul 2025 20:38:29 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: f/XqbkrcUWA692GW3orFwdwHOXiitDzsUsaZuMErZ68=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Jul 20 20:38:29 2025 GMT Not After : Jul 27 20:38:29 2025 GMT Subject: CN=687d53c5-542c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:c1:6e:e1:f7:71:cd:ea:f9:52:5d:a2:ee: 21:f1:c2:fc:fe:8d:14:50:2f:d3:b3:55:36:78:94: cc:4c:49:21:6f:9f:ae:9d:49:83:05:01:5b:6a:4f: 6b:c3:82:6b:2c:08:c0:70:5d:b7:ba:2c:45:93:59: 3d:85:34:cc:c1:be:07:39:58:c0:0c:d6:2e:fd:c5: 87:ca:d8:ae:ab:f2:11:11:3a:41:02:7e:08:eb:35: e7:f8:1f:b3:c9:c9:e6:37:19:d2:80:68:be:43:c4: d8:00:11:05:35:83:c2:d4:3e:79:17:5b:fd:bb:c0: 21:05:0b:de:99:df:9c:92:39:c0:41:77:c6:7f:27: 33:1a:5d:02:70:cb:c0:cf:71:bc:d5:19:b5:56:a5: 9b:b4:cf:0d:cc:f4:74:ea:f0:4d:25:d6:73:a6:fb: ae:28:10:15:ca:b5:f0:4b:dc:bd:3f:04:f4:2c:17: c7:35:0e:ce:bd:47:da:4f:ec:b8:0e:fe:69:5b:f0: 85:05:7f:70:e5:55:48:6a:23:91:13:2e:4b:ac:ff: 2e:3a:28:5e:51:01:1e:a1:59:0e:38:0b:51:5b:ef: 6f:6d:a3:15:74:c4:53:0e:a6:ed:47:cd:3f:cb:46: ba:24:e3:95:23:61:28:00:e4:fd:79:ae:f2:cc:94: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:42:E3:50:F2:32:61:D2:30:20:95:CE:79:2B:E2:18:90:3B:6A:45 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:24:e7:f7:c6:a8:8e:98:3c:1f:fb:04:40:84:60:7e:7e:36: c3:01:be:98:62:1f:0c:33:5e:04:61:1b:59:a6:c9:7e:72:8f: 99:c7:3f:46:f9:6a:07:11:aa:7f:57:b3:aa:6f:f8:b1:74:fc: 6b:62:60:ac:0d:37:e0:31:40:a0:e6:64:9c:76:73:30:0e:92: de:1f:57:b7:25:a0:86:6f:f5:00:14:1f:21:c9:4e:8d:90:de: c6:a0:56:3b:47:7a:71:20:c7:06:55:24:ba:bc:72:0c:94:1a: 00:cf:be:4e:a2:eb:84:cc:b9:31:58:be:51:da:2b:15:a5:cd: 41:8b:c1:03:54:27:9a:a6:3b:97:d1:7c:0f:48:30:c6:0b:54: 14:f9:85:fa:18:ce:2e:e9:67:23:e3:97:1b:14:df:19:16:c0: 5c:e5:e3:c9:d1:c5:7f:0e:b9:12:02:34:c0:21:0e:0c:1d:75: 3b:cc:95:4b:5c:e9:e0:69:b9:d8:66:8c:c7:3b:85:7c:5f:e5: d5:3a:47:d0:89:3a:87:c1:31:51:f4:55:25:a5:02:53:42:ff: 8c:cb:f1:7e:6f:e0:82:79:d3:0a:86:b6:00:c9:ac:86:3c:4b: 0c:07:63:6b:c5:fe:c2:1d:3a:c8:e6:12:64:f4:7d:17:a7:cf: 18:71:2b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwNzIwMjAzODI5WhcNMjUwNzI3MjAzODI5WjAYMRYwFAYD VQQDEw02ODdkNTNjNS01NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RjBbuH3cc3q+VJdou4h8cL8/o0UUC/Ts1U2eJTMTEkhb5+unUmDBQFbak9r w4JrLAjAcF23uixFk1k9hTTMwb4HOVjADNYu/cWHytiuq/IRETpBAn4I6zXn+B+z ycnmNxnSgGi+Q8TYABEFNYPC1D55F1v9u8AhBQvemd+ckjnAQXfGfyczGl0CcMvA z3G81Rm1VqWbtM8NzPR06vBNJdZzpvuuKBAVyrXwS9y9PwT0LBfHNQ7OvUfaT+y4 Dv5pW/CFBX9w5VVIaiOREy5LrP8uOiheUQEeoVkOOAtRW+9vbaMVdMRTDqbtR80/ y0a6JOOVI2EoAOT9ea7yzJSr8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhC41Dy MmHSMCCVznkr4hiQO2pFMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFJOf3xqiOmDwf+wRAhGB+fjbDAb6YYh8MM14EYRtZpsl+co+Zxz9G +WoHEap/V7Oqb/ixdPxrYmCsDTfgMUCg5mScdnMwDpLeH1e3JaCGb/UAFB8hyU6N kN7GoFY7R3pxIMcGVSS6vHIMlBoAz75OouuEzLkxWL5R2isVpc1Bi8EDVCeapjuX 0XwPSDDGC1QU+YX6GM4u6Wcj45cbFN8ZFsBc5ePJ0cV/DrkSAjTAIQ4MHXU7zJVL XOngabnYZozHO4V8X+XVOkfQiTqHwTFR9FUlpQJTQv+My/F+b+CCedMKhrYAyayG PEsMB2Nrxf7CHTrI5hJk9H0Xp88YcStO -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:54 2025 by rpki-client