$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: DyGPmDEt9k2acHn8hXbvW+ZfU+jZZiMgAo/V1FF5AHg= Subject key identifier: A5:EE:4B:FC:7E:D4:51:88:A6:D5:0C:D0:6A:25:61:1E:A7:57:04:9C Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 0433 Signing time: Sat 12 Apr 2025 23:57:06 +0000 Manifest this update: Sat 12 Apr 2025 23:57:06 +0000 Manifest next update: Sat 19 Apr 2025 23:57:06 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: naGOHER30ERpJ3ezqDu72qj1aBxP8HRjwYae0h9qd3s=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: Apr 12 23:57:06 2025 GMT Not After : Apr 19 23:57:06 2025 GMT Subject: CN=67fafdd2-40e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:f6:20:b4:92:d6:e7:03:80:f0:b2:36:5f: e4:43:51:e0:ac:dd:d2:c4:65:61:22:c7:37:fc:a1: fe:44:65:58:e4:bd:7d:74:56:80:21:27:38:bd:5e: ec:3f:db:87:14:1d:f2:e4:51:05:3f:80:d5:90:bc: fc:06:bb:05:93:a1:d4:7e:b9:ff:77:8f:c5:1c:06: c6:0b:2e:a4:89:c4:6b:bc:0a:11:d6:59:be:8d:89: f2:ef:b3:d6:7d:33:fd:70:20:1a:25:07:45:96:80: 5f:92:2a:06:27:c3:8d:36:57:3b:b1:a3:e2:4c:48: 45:75:1a:24:08:a5:0f:4f:95:59:b7:e0:1d:89:ad: c3:16:19:ad:bd:e7:86:18:be:8e:2a:2a:20:fa:b9: 5e:6e:dc:23:63:eb:b0:d8:ff:b6:ab:5d:cd:30:46: 3e:17:2f:c3:3c:b3:82:ae:a8:b4:4b:79:76:10:02: e3:f8:48:46:21:6c:57:c8:a3:9d:94:52:a4:6b:a6: 4a:6e:ce:a4:05:a4:39:bc:08:72:0c:87:d0:c4:65: 42:99:9c:c4:d5:33:1e:fa:6e:81:d8:1d:77:21:27: 53:d8:a0:b5:49:f5:c0:b5:94:62:e0:d4:10:c4:55: 82:be:cc:99:78:05:79:4c:84:a8:03:2c:5f:f0:ea: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:4B:FC:7E:D4:51:88:A6:D5:0C:D0:6A:25:61:1E:A7:57:04:9C X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:36:a5:4e:4c:7d:fa:ed:65:ee:be:6c:a9:54:b8:4a:c5:60: 6b:91:49:19:b2:30:5a:c5:23:90:e0:ad:3e:fb:83:a8:4c:91: 29:f1:bf:6a:cf:ed:07:8c:38:60:4f:ca:02:18:62:75:de:4e: 2d:fa:22:c2:1e:6c:1a:5d:95:20:7d:af:13:b0:6e:f3:8c:71: 0c:f3:ab:b0:9a:5e:a3:96:f3:03:67:fa:32:b3:be:74:6c:e7: d3:b6:5c:62:cd:89:19:d0:7c:ee:1b:96:91:cb:bd:42:31:c3: c5:fd:ae:c9:63:06:32:7c:07:e0:28:18:64:f8:e4:7e:09:27: a9:3c:49:f6:af:b8:f8:c1:1a:5b:c7:86:86:51:33:32:e0:68: e7:51:96:ab:b4:de:12:5a:d7:9c:9b:90:68:26:88:d0:62:6b: d9:00:a2:aa:05:1c:fb:ab:98:9b:25:56:58:26:1a:20:2c:09: 9d:fe:81:f4:dd:c1:33:96:e9:9b:2e:59:6c:4a:1d:c6:e4:14: 8c:a2:28:61:0a:51:6d:f0:0c:e3:a6:4b:2f:55:9a:c9:8e:ec: 25:97:1e:54:c1:92:fc:7f:c9:a0:7e:73:e0:dd:0c:d2:8e:fd: ab:e5:2d:2d:ea:fd:aa:5f:69:7f:71:55:92:db:3b:9b:15:ab: 8a:e8:5e:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjUwNDEyMjM1NzA2WhcNMjUwNDE5MjM1NzA2WjAYMRYwFAYD VQQDEw02N2ZhZmRkMi00MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrT2ILSS1ucDgPCyNl/kQ1HgrN3SxGVhIsc3/KH+RGVY5L19dFaAISc4vV7s P9uHFB3y5FEFP4DVkLz8BrsFk6HUfrn/d4/FHAbGCy6kicRrvAoR1lm+jYny77PW fTP9cCAaJQdFloBfkioGJ8ONNlc7saPiTEhFdRokCKUPT5VZt+Adia3DFhmtveeG GL6OKiog+rlebtwjY+uw2P+2q13NMEY+Fy/DPLOCrqi0S3l2EALj+EhGIWxXyKOd lFKka6ZKbs6kBaQ5vAhyDIfQxGVCmZzE1TMe+m6B2B13ISdT2KC1SfXAtZRi4NQQ xFWCvsyZeAV5TISoAyxf8OrUCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXuS/x+ 1FGIptUM0GolYR6nVwScMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGNqVOTH367WXuvmypVLhKxWBrkUkZsjBaxSOQ4K0++4OoTJEp8b9q z+0HjDhgT8oCGGJ13k4t+iLCHmwaXZUgfa8TsG7zjHEM86uwml6jlvMDZ/oys750 bOfTtlxizYkZ0HzuG5aRy71CMcPF/a7JYwYyfAfgKBhk+OR+CSepPEn2r7j4wRpb x4aGUTMy4GjnUZartN4SWtecm5BoJojQYmvZAKKqBRz7q5ibJVZYJhogLAmd/oH0 3cEzlumbLllsSh3G5BSMoihhClFt8AzjpksvVZrJjuwllx5UwZL8f8mgfnPg3QzS jv2r5S0t6v2qX2l/cVWS2zubFauK6F7O -----END CERTIFICATE-----Generated at Sun Apr 13 06:00:10 2025 by rpki-client