$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: UR6658+pwiLofpeHtoLyUSzSlLawKpl1zXX2Q9exgA4= Subject key identifier: C4:A4:40:AB:6E:58:8B:CE:00:14:93:D4:40:6E:1D:EB:CE:F6:C4:AD Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 0474 Signing time: Thu 21 Aug 2025 00:14:54 +0000 Manifest this update: Thu 21 Aug 2025 00:14:54 +0000 Manifest next update: Thu 28 Aug 2025 00:14:54 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: 5HMmJmjuer3QRO7/yvd/FajfsCYNmoTmzo/py5vrktk=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: Aug 21 00:14:54 2025 GMT Not After : Aug 28 00:14:54 2025 GMT Subject: CN=68a664fe-692a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:30:7c:73:32:1e:48:41:2f:2f:84:80:e1: 88:8a:2e:b1:f4:8b:b4:1f:7f:80:b9:11:a4:8b:fa: 5c:72:c0:09:6c:dc:17:3b:98:48:91:40:ed:c1:01: e2:9f:ff:d0:16:c5:cc:28:3b:f1:2c:06:b5:85:a5: f7:0a:cf:82:db:0f:5d:67:26:5a:8c:7d:22:84:23: f1:ef:9b:c5:d4:d8:45:7a:ce:92:da:c0:25:f1:19: 74:21:83:d5:be:98:d5:0d:0b:bb:78:26:2d:d3:f0: 2a:33:4e:9b:35:e9:64:e8:83:9d:27:74:32:0c:b2: 9a:97:44:d5:4c:d0:67:67:05:be:70:22:2b:b5:da: 02:98:c1:02:62:3f:25:c8:eb:75:f6:19:06:d6:fc: 71:60:51:54:1c:8b:63:d9:d0:56:2d:98:6d:32:f9: 90:33:ba:b8:00:d3:02:96:bf:45:1c:11:14:7d:b0: a5:78:1f:07:dc:c5:e6:ff:46:c5:6a:de:e9:3d:b4: 22:bf:94:5a:a8:41:a3:ba:f8:d4:7a:00:92:14:ea: d3:2b:31:21:74:a2:d6:3f:e6:a5:c2:4f:20:f5:3d: ed:f9:2c:b8:d1:90:98:7c:9e:a8:a2:c8:a8:fa:ad: c9:84:61:66:64:8b:0c:9d:09:9e:bd:f6:e4:ee:6f: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A4:40:AB:6E:58:8B:CE:00:14:93:D4:40:6E:1D:EB:CE:F6:C4:AD X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e9:7c:bc:74:4b:0e:51:39:e8:47:6e:67:0f:49:f0:ea:14: e7:e4:de:e7:21:86:5d:e6:72:0a:85:3a:f3:45:87:0d:eb:97: 9c:00:7e:9e:4d:54:30:5a:e9:e5:a0:e9:5d:29:ca:27:1f:3d: cb:b7:61:a1:f8:b8:da:4c:a0:23:c9:e7:fc:fe:1d:fb:ac:15: 1b:95:4b:f6:17:2b:11:fe:fd:e3:dd:d5:c7:d6:27:63:a5:d4: 63:66:31:8c:39:12:25:18:86:97:99:73:b5:34:d6:54:1b:70: 41:cc:24:79:c1:93:75:16:5d:68:86:ff:d6:c7:fa:77:0c:5f: 55:9f:57:76:71:44:14:c7:ce:fd:06:b8:e5:f7:2d:e6:ce:ee: 47:5f:3f:76:d7:b6:7a:f9:7c:24:8c:98:e1:08:ac:7b:22:7c: fa:d9:5e:99:bf:ad:68:f5:30:4d:b4:20:ca:fa:e4:86:55:90: 11:ae:a9:71:2d:39:4f:87:9d:74:75:4a:91:e6:1f:5d:d7:b8: 86:f3:1d:f2:62:c9:f0:b0:67:d9:93:1a:17:f9:e4:59:91:e2: a2:86:d9:2d:07:0b:28:cd:e0:fa:33:3e:58:44:23:f1:25:9a: 9c:8c:53:57:9a:69:2d:f6:12:89:40:00:db:c3:13:19:52:24: f7:8e:8f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjUwODIxMDAxNDU0WhcNMjUwODI4MDAxNDU0WjAYMRYwFAYD VQQDEw02OGE2NjRmZS02OTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsswwfHMyHkhBLy+EgOGIii6x9Iu0H3+AuRGki/pccsAJbNwXO5hIkUDtwQHi n//QFsXMKDvxLAa1haX3Cs+C2w9dZyZajH0ihCPx75vF1NhFes6S2sAl8Rl0IYPV vpjVDQu7eCYt0/AqM06bNelk6IOdJ3QyDLKal0TVTNBnZwW+cCIrtdoCmMECYj8l yOt19hkG1vxxYFFUHItj2dBWLZhtMvmQM7q4ANMClr9FHBEUfbCleB8H3MXm/0bF at7pPbQiv5RaqEGjuvjUegCSFOrTKzEhdKLWP+alwk8g9T3t+Sy40ZCYfJ6oosio +q3JhGFmZIsMnQmevfbk7m9xnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSkQKtu WIvOABST1EBuHevO9sStMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY6Xy8dEsOUTnoR25nD0nw6hTn5N7nIYZd5nIKhTrzRYcN65ecAH6e TVQwWunloOldKconHz3Lt2Gh+LjaTKAjyef8/h37rBUblUv2FysR/v3j3dXH1idj pdRjZjGMORIlGIaXmXO1NNZUG3BBzCR5wZN1Fl1ohv/Wx/p3DF9Vn1d2cUQUx879 Brjl9y3mzu5HXz9217Z6+XwkjJjhCKx7Inz62V6Zv61o9TBNtCDK+uSGVZARrqlx LTlPh510dUqR5h9d17iG8x3yYsnwsGfZkxoX+eRZkeKihtktBwsozeD6Mz5YRCPx JZqcjFNXmmkt9hKJQADbwxMZUiT3jo82 -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:07 2025 by rpki-client