$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: Ce1bdUxkKeQIEJm1sD/a65KIdkTCWXRIf5zhsA7RThg= Subject key identifier: F2:99:4F:7E:F6:F3:24:F8:2B:94:B0:EE:F3:8C:13:AB:EB:33:59:2B Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 048B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 0483 Signing time: Sun 08 Jun 2025 23:40:09 +0000 Manifest this update: Sun 08 Jun 2025 23:40:08 +0000 Manifest next update: Sun 15 Jun 2025 23:40:08 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: 9kQTWHNwALO3pyAfTUbkiPTFyIiF5REQYCLmoyQtxfM=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Jun 8 23:40:08 2025 GMT Not After : Jun 15 23:40:08 2025 GMT Subject: CN=68461f58-9129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:9e:2f:24:89:99:18:08:67:f7:07:b9:97: 1c:20:0b:c1:f9:61:17:75:2e:01:88:46:01:4a:ba: 02:bd:6b:cf:72:62:e0:39:e2:3c:18:96:80:23:d6: aa:26:2b:b2:51:58:43:60:7b:5d:22:53:a8:08:28: 5b:56:cf:6b:53:67:24:75:60:75:25:24:d4:51:d0: 4f:28:23:58:71:4e:3d:70:bd:42:0d:66:1a:ae:26: 3e:02:37:8a:c2:d4:79:5d:8a:6c:60:a3:ba:e6:ef: f9:00:dc:e8:90:19:e1:48:71:2a:1f:4a:26:48:6f: 22:2a:82:e7:9b:0b:71:20:2f:7d:2b:ff:a4:5d:2c: fc:8d:c2:07:03:31:28:4f:96:b4:ad:e1:89:24:10: 81:56:56:d2:c3:26:24:df:ce:cc:d2:9b:c0:32:05: b8:5f:47:1e:66:4a:8e:0c:48:fc:d8:f6:0d:e1:50: 69:b3:d2:66:41:ff:29:ba:3a:5b:17:23:86:09:e0: 81:fc:d5:74:d8:e4:d2:49:2f:96:76:b0:13:3f:c9: f9:30:5c:b8:da:04:7c:c0:74:c0:47:0b:af:83:68: a2:ed:10:9e:73:3a:0b:74:4f:69:e3:17:d1:ee:31: 18:0a:7d:c8:1f:48:07:03:56:01:67:72:70:a4:75: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:99:4F:7E:F6:F3:24:F8:2B:94:B0:EE:F3:8C:13:AB:EB:33:59:2B X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:03:98:38:d2:cf:09:37:f6:02:7a:8b:f0:16:6a:7b:1c:8e: 02:f2:57:4d:97:90:d7:5c:db:5b:cb:a7:71:07:72:91:08:6b: c4:2e:77:dd:1d:ff:bf:fc:f1:b2:ce:af:a9:b4:d7:dc:b0:c5: 74:ee:72:99:5f:75:9a:b1:22:0c:c2:7e:9e:01:37:1f:4b:83: 6c:d3:bf:53:ac:c7:f2:7f:84:25:f8:f2:a2:10:6f:28:35:ae: 3f:7b:1a:e0:7f:a7:ca:14:2d:e7:85:5b:17:a5:85:d2:f2:7f: 23:df:f3:bf:e8:73:65:8e:11:e9:29:0c:63:b7:1f:3a:a4:1e: 0d:ac:38:c1:c1:c1:4b:eb:1a:5b:b6:51:f5:be:3d:5b:17:5f: be:af:85:19:13:b4:d0:3a:00:16:3e:cb:9d:28:f3:80:06:8f: d1:1e:68:f9:82:d1:d4:f6:4f:5c:d5:c6:1f:4b:3a:5e:1c:ae: 8f:ec:aa:13:70:bd:17:65:23:83:7a:33:73:a8:4e:15:2d:64: c4:65:b1:92:fc:36:c6:6b:0d:78:d0:e7:c5:21:5e:46:37:50: bd:6b:0f:d7:0b:5e:fa:85:01:dd:79:77:d4:ea:a5:00:25:41: e6:77:bc:f8:47:5f:2b:a2:fd:82:90:2a:eb:ab:40:41:fc:2c: 98:72:c4:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUwNjA4MjM0MDA4WhcNMjUwNjE1MjM0MDA4WjAYMRYwFAYD VQQDEw02ODQ2MWY1OC05MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRGeLySJmRgIZ/cHuZccIAvB+WEXdS4BiEYBSroCvWvPcmLgOeI8GJaAI9aq JiuyUVhDYHtdIlOoCChbVs9rU2ckdWB1JSTUUdBPKCNYcU49cL1CDWYariY+AjeK wtR5XYpsYKO65u/5ANzokBnhSHEqH0omSG8iKoLnmwtxIC99K/+kXSz8jcIHAzEo T5a0reGJJBCBVlbSwyYk387M0pvAMgW4X0ceZkqODEj82PYN4VBps9JmQf8pujpb FyOGCeCB/NV02OTSSS+WdrATP8n5MFy42gR8wHTARwuvg2ii7RCeczoLdE9p4xfR 7jEYCn3IH0gHA1YBZ3JwpHVpZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKZT372 8yT4K5Sw7vOME6vrM1krMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnA5g40s8JN/YCeovwFmp7HI4C8ldNl5DXXNtby6dxB3KRCGvELnfd Hf+//PGyzq+ptNfcsMV07nKZX3WasSIMwn6eATcfS4Ns079TrMfyf4Ql+PKiEG8o Na4/exrgf6fKFC3nhVsXpYXS8n8j3/O/6HNljhHpKQxjtx86pB4NrDjBwcFL6xpb tlH1vj1bF1++r4UZE7TQOgAWPsudKPOABo/RHmj5gtHU9k9c1cYfSzpeHK6P7KoT cL0XZSODejNzqE4VLWTEZbGS/DbGaw140OfFIV5GN1C9aw/XC176hQHdeXfU6qUA JUHmd7z4R18rov2CkCrrq0BB/CyYcsTX -----END CERTIFICATE-----Generated at Tue Jun 10 02:03:30 2025 by rpki-client