$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: vfphgOvH5ReX37bmHOm9YklS34mcWQs8x4/o8runytY= Subject key identifier: 6E:F1:19:34:9A:18:75:2D:ED:0A:A3:B8:B2:78:92:5E:3C:A7:B1:DD Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 0894 Signing time: Fri 30 May 2025 20:48:14 +0000 Manifest this update: Fri 30 May 2025 20:48:14 +0000 Manifest next update: Fri 06 Jun 2025 20:48:14 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: HUoly38MgpgOoSiK3PfkudMTuS/2BIEttOgY5yPuUYY=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: May 30 20:48:14 2025 GMT Not After : Jun 6 20:48:14 2025 GMT Subject: CN=683a198e-a141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:3b:c7:41:e6:2c:02:72:b6:5e:70:68:af: 2c:72:27:99:1b:53:13:e8:04:72:1e:70:41:25:fc: b4:73:a6:e1:ac:8e:33:e1:f2:a6:30:42:0d:37:8d: a8:14:8c:a6:7d:69:df:a7:28:8e:04:42:b8:96:14: 91:81:d2:4d:64:3a:f5:c2:05:97:79:c1:8a:50:fc: 60:d2:f8:86:bd:08:26:23:0d:f9:83:af:6e:19:35: 29:01:ef:e7:04:f7:ff:e2:a7:da:dc:0d:b4:9a:3a: 6e:80:92:e0:a8:42:c4:c8:2d:54:08:e5:f6:50:d5: ae:78:a0:53:89:ca:f1:b1:8f:2e:c8:b4:01:4d:be: bc:67:4a:8c:18:c6:5e:a7:bd:e9:51:18:c7:57:8d: 66:b6:ef:0b:0d:da:83:0b:1d:b9:f4:4e:66:a6:80: c0:88:a1:75:a9:34:36:66:46:98:f4:db:f9:ef:46: 7c:12:9f:ac:a5:78:b2:08:8b:2d:54:69:0e:4b:21: 69:9d:99:0a:8e:fa:a2:c1:56:f0:2d:14:03:6b:bc: 3d:d6:4d:80:74:6b:8f:b6:ee:1c:dc:b4:9c:60:2e: 21:f0:2e:83:f6:7f:bc:c2:58:dd:ad:d8:a6:de:a9: 9e:41:03:a9:ac:de:15:5f:f8:0b:e9:7d:55:7b:8d: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F1:19:34:9A:18:75:2D:ED:0A:A3:B8:B2:78:92:5E:3C:A7:B1:DD X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:51:10:67:27:52:fe:9b:e6:8b:0f:a9:07:e2:d9:df:a6:2b: b8:09:26:74:af:87:24:d4:ad:e2:83:2c:88:bd:c2:dd:22:83: 6b:34:0c:43:5d:45:82:47:04:ed:61:56:23:55:d8:13:a1:b3: f9:44:f1:ab:ad:3c:27:e3:ac:6f:66:cf:af:6a:d5:c5:19:c8: 16:93:d2:7e:2c:70:20:e6:b0:74:a0:db:94:09:4a:29:d5:8c: fe:89:6f:ca:2a:29:8c:01:1a:b4:c0:1a:78:48:34:f4:7c:ed: 7a:23:7c:dd:93:3b:b9:37:77:35:ea:c7:8a:c2:f8:84:20:69: 87:57:de:9f:76:bf:a2:0c:7d:fe:b4:ea:a6:88:a2:dd:4e:7a: 2c:d0:35:89:b0:18:e3:35:14:5c:36:77:fe:1a:f8:6d:0d:4f: 6f:ec:61:b4:32:c4:25:ae:7a:54:f4:a8:b2:76:d1:c4:50:1e: b7:08:2f:d3:11:21:11:6e:11:e6:03:32:75:a1:f4:9e:65:4a: bb:8b:54:e3:bc:0b:29:87:2f:4e:13:5f:51:76:f3:c6:9f:76: 41:33:ef:fa:ad:d4:32:46:4d:77:fb:e1:5b:20:c7:92:24:d2: e7:02:e1:eb:07:7d:fb:d5:61:b1:32:9c:3d:70:aa:36:69:25: a8:ab:b0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwNTMwMjA0ODE0WhcNMjUwNjA2MjA0ODE0WjAYMRYwFAYD VQQDEw02ODNhMTk4ZS1hMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjY7x0HmLAJytl5waK8scieZG1MT6ARyHnBBJfy0c6bhrI4z4fKmMEINN42o FIymfWnfpyiOBEK4lhSRgdJNZDr1wgWXecGKUPxg0viGvQgmIw35g69uGTUpAe/n BPf/4qfa3A20mjpugJLgqELEyC1UCOX2UNWueKBTicrxsY8uyLQBTb68Z0qMGMZe p73pURjHV41mtu8LDdqDCx259E5mpoDAiKF1qTQ2ZkaY9Nv570Z8Ep+spXiyCIst VGkOSyFpnZkKjvqiwVbwLRQDa7w91k2AdGuPtu4c3LScYC4h8C6D9n+8wljdrdim 3qmeQQOprN4VX/gL6X1Ve40UOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7xGTSa GHUt7QqjuLJ4kl48p7HdMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8URBnJ1L+m+aLD6kH4tnfpiu4CSZ0r4ck1K3igyyIvcLdIoNrNAxD XUWCRwTtYVYjVdgTobP5RPGrrTwn46xvZs+vatXFGcgWk9J+LHAg5rB0oNuUCUop 1Yz+iW/KKimMARq0wBp4SDT0fO16I3zdkzu5N3c16seKwviEIGmHV96fdr+iDH3+ tOqmiKLdTnos0DWJsBjjNRRcNnf+GvhtDU9v7GG0MsQlrnpU9KiydtHEUB63CC/T ESERbhHmAzJ1ofSeZUq7i1TjvAsphy9OE19RdvPGn3ZBM+/6rdQyRk13++FbIMeS JNLnAuHrB3371WGxMpw9cKo2aSWoq7AD -----END CERTIFICATE-----Generated at Sat May 31 17:48:43 2025 by rpki-client