$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: 2XKEzc+K7qjwY0zX7ZKMDGkAoCZMNt6J8gTekwRNGpA= Subject key identifier: 67:E4:58:52:72:50:1E:C0:EF:AC:96:C2:ED:1E:75:39:EE:9E:9E:5E Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 0485 Signing time: Thu 12 Jun 2025 23:38:28 +0000 Manifest this update: Thu 12 Jun 2025 23:38:27 +0000 Manifest next update: Thu 19 Jun 2025 23:38:27 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: mV80Hum4IhdQBTxSFLIB/Ld1DGzuKpMvbq7ZYOheVvk=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Jun 12 23:38:27 2025 GMT Not After : Jun 19 23:38:27 2025 GMT Subject: CN=684b64f4-d35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:22:4b:3a:1b:46:f0:b8:69:d4:cf:3c:ce: cb:11:13:92:11:95:aa:85:32:4e:a6:92:b3:80:64: 7a:13:b7:33:cc:df:04:80:97:d7:aa:04:f3:73:2c: 10:0c:81:eb:ca:06:67:22:02:df:e9:e8:dd:ed:98: ad:15:e5:f4:bd:19:57:cb:e9:2f:bf:06:98:7e:7e: d0:1a:af:8c:31:51:4f:37:b2:94:fe:1f:fe:02:83: 35:30:42:82:0b:aa:f3:93:be:2d:8f:a0:e1:2a:84: a2:bc:99:df:b4:ef:a6:6d:c0:d1:e7:1a:a5:4c:d0: 89:e2:2d:75:55:32:eb:0b:13:75:54:19:b0:48:38: 4a:c1:75:ec:0f:8e:3d:1e:3a:5b:df:c6:0e:e9:1d: 0e:a8:77:14:a3:89:af:42:50:83:c3:8e:e3:b5:b3: dc:b3:ac:ee:0e:96:69:15:ff:2f:2a:ec:aa:32:c6: 0a:d9:b4:3f:64:9e:31:8b:3d:0a:b0:46:67:7e:d7: 7e:eb:7c:02:d6:ab:75:e3:30:d1:da:8a:32:47:6f: 63:e6:ac:b8:5f:16:8f:7c:0f:40:a4:43:6b:07:9c: 5c:23:6e:08:cf:33:3f:eb:e9:90:dd:00:ea:0f:82: d8:8b:13:e4:c1:10:ce:a5:9a:b4:7a:54:19:c0:3d: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E4:58:52:72:50:1E:C0:EF:AC:96:C2:ED:1E:75:39:EE:9E:9E:5E X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:63:63:e8:7b:82:4f:44:2f:a3:47:79:10:4c:d1:5c:20:cb: 6a:d8:4c:d3:c4:c1:93:04:97:29:f8:b9:e6:01:78:a6:8c:f2: 53:11:2a:ff:82:24:14:65:83:41:05:77:8c:47:42:ef:4f:53: 8c:79:e7:89:e1:cf:81:16:87:6a:d7:19:08:36:5e:85:d1:37: 26:fa:f0:f8:19:f9:8a:33:97:38:86:81:66:6a:d5:11:ef:0b: 08:f1:de:e2:36:16:ba:cb:c0:f4:6c:71:f2:5a:69:b1:9d:6e: 42:34:67:dd:44:d9:0a:92:92:3a:d1:e0:1d:14:af:56:75:92: e4:19:52:e6:7e:7c:4a:cb:b1:dd:61:24:13:42:07:77:d6:fd: c1:1a:0e:6a:a0:b1:c1:55:cb:fd:74:92:e1:d9:9e:14:91:d5: 62:6d:b3:fc:a3:6f:63:f4:30:d8:bd:39:31:9d:a1:6e:ea:ed: 04:66:c0:00:ac:9d:a9:09:ee:97:d3:a7:24:30:5e:e3:cb:e9: 46:3b:a9:40:32:43:c8:9e:90:a7:c0:0b:e2:76:38:0d:8c:4e: 6b:d7:96:01:1c:a0:3b:05:1e:26:6a:c0:ea:3e:fd:dd:eb:c3: 9d:23:67:7e:6e:1f:e2:a5:39:7e:6a:c4:85:0d:ad:df:67:fd: 04:1b:ec:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUwNjEyMjMzODI3WhcNMjUwNjE5MjMzODI3WjAYMRYwFAYD VQQDEw02ODRiNjRmNC1kMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lsiSzobRvC4adTPPM7LEROSEZWqhTJOppKzgGR6E7czzN8EgJfXqgTzcywQ DIHrygZnIgLf6ejd7ZitFeX0vRlXy+kvvwaYfn7QGq+MMVFPN7KU/h/+AoM1MEKC C6rzk74tj6DhKoSivJnftO+mbcDR5xqlTNCJ4i11VTLrCxN1VBmwSDhKwXXsD449 Hjpb38YO6R0OqHcUo4mvQlCDw47jtbPcs6zuDpZpFf8vKuyqMsYK2bQ/ZJ4xiz0K sEZnftd+63wC1qt14zDR2ooyR29j5qy4XxaPfA9ApENrB5xcI24IzzM/6+mQ3QDq D4LYixPkwRDOpZq0elQZwD3gjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfkWFJy UB7A76yWwu0edTnunp5eMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApY2Poe4JPRC+jR3kQTNFcIMtq2EzTxMGTBJcp+LnmAXimjPJTESr/ giQUZYNBBXeMR0LvT1OMeeeJ4c+BFodq1xkINl6F0Tcm+vD4GfmKM5c4hoFmatUR 7wsI8d7iNha6y8D0bHHyWmmxnW5CNGfdRNkKkpI60eAdFK9WdZLkGVLmfnxKy7Hd YSQTQgd31v3BGg5qoLHBVcv9dJLh2Z4UkdVibbP8o29j9DDYvTkxnaFu6u0EZsAA rJ2pCe6X06ckMF7jy+lGO6lAMkPInpCnwAvidjgNjE5r15YBHKA7BR4masDqPv3d 68OdI2d+bh/ipTl+asSFDa3fZ/0EG+z+ -----END CERTIFICATE-----Generated at Fri Jun 13 10:07:14 2025 by rpki-client