$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: RZnCeJdcCNYuj/f99O0RUAOHgunhZZrcdjbKfG09Cbc= Subject key identifier: EC:63:4A:0A:40:46:79:AF:F9:F8:8D:A0:87:4C:82:97:A3:26:E8:E5 Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 044A Signing time: Sat 31 May 2025 00:26:55 +0000 Manifest this update: Sat 31 May 2025 00:26:54 +0000 Manifest next update: Sat 07 Jun 2025 00:26:54 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: MDrWZYn4GanusbnVYqQB7uT+gDlCtdY5Tf1MFM/96qE=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: May 31 00:26:54 2025 GMT Not After : Jun 7 00:26:54 2025 GMT Subject: CN=683a4cce-8fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:7e:e0:d8:52:32:22:34:e7:41:e9:b1:d1: f4:37:b9:f1:5e:c0:20:cb:6b:0d:e5:a9:5f:fb:86: bf:80:e1:e7:2e:22:07:94:3b:c3:fc:ac:61:2d:c6: d0:d6:44:92:39:15:23:55:07:06:7e:25:f9:66:c6: 3b:bf:c4:97:bf:24:d8:65:48:b8:c0:c4:2a:a0:0c: 65:72:6e:90:c4:dd:12:eb:1f:d1:21:44:7a:60:84: 43:cb:50:59:6a:8b:d6:7a:9f:8f:f1:25:53:e4:9b: 65:b5:91:f5:c3:66:7d:80:5b:38:9f:74:90:5a:77: 45:c2:7c:88:d2:52:b2:83:82:b4:3c:e4:c5:ff:d5: 2c:d9:51:67:62:f5:5b:6a:59:cb:16:a3:f3:55:55: e5:18:f8:40:c8:48:52:50:66:87:e1:69:7a:12:63: 50:bb:7b:5f:e5:af:56:ab:21:ad:c6:bf:b9:03:b8: 38:2e:99:69:ff:5e:94:c9:22:3b:9c:37:f3:07:a0: 60:3f:75:7a:24:7f:90:a1:a1:9b:88:a8:15:8c:22: d3:98:3a:c8:bc:09:9a:b6:67:79:7d:c4:24:0c:da: a3:48:97:a8:4d:84:bd:09:2e:96:a4:62:e9:0e:be: 2c:04:35:30:16:e0:9c:6b:f3:86:a3:cf:27:85:51: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:63:4A:0A:40:46:79:AF:F9:F8:8D:A0:87:4C:82:97:A3:26:E8:E5 X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d8:bd:9c:42:f7:01:90:6c:05:01:0c:81:ed:09:77:23:2a: b2:6e:cd:92:19:a5:ef:cf:3e:33:75:f8:d7:16:8e:ce:42:eb: a4:f0:e6:54:a0:97:40:e4:5c:79:4f:17:91:47:9b:74:02:c7: 27:89:0e:61:74:85:41:42:ae:3d:d8:86:12:22:5c:85:ae:ed: 57:bd:36:57:bc:8d:7e:14:c5:e4:30:6f:07:4f:fd:28:51:4b: 9f:3b:57:24:49:7f:f5:10:c3:c8:c2:72:b5:8d:47:04:92:83: 82:20:d3:8a:82:a8:20:fa:a5:52:48:bc:b5:3c:ed:eb:89:8e: 25:9e:88:17:f0:45:f0:75:67:39:d9:fb:56:76:21:cb:d5:49: fc:57:03:06:2d:df:bd:6e:47:e1:8f:60:3f:52:9f:46:e3:14: 45:b9:72:ba:45:60:e0:bd:47:b3:b6:69:fc:67:c2:bb:70:18: d8:42:b3:db:fa:82:f6:99:b4:cd:1f:fa:f1:28:65:35:a0:42: 15:e2:f9:ff:a3:0a:79:92:21:fc:ec:a8:1d:d8:f4:cf:0f:63: 37:77:e3:6c:2d:05:49:68:60:db:2b:d7:c0:2e:86:35:89:b7: 9d:47:c7:c1:66:54:60:f1:0e:32:d8:1b:55:b4:e2:36:04:87: 6a:f0:60:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjUwNTMxMDAyNjU0WhcNMjUwNjA3MDAyNjU0WjAYMRYwFAYD VQQDEw02ODNhNGNjZS04ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SJ+4NhSMiI050HpsdH0N7nxXsAgy2sN5alf+4a/gOHnLiIHlDvD/KxhLcbQ 1kSSORUjVQcGfiX5ZsY7v8SXvyTYZUi4wMQqoAxlcm6QxN0S6x/RIUR6YIRDy1BZ aovWep+P8SVT5JtltZH1w2Z9gFs4n3SQWndFwnyI0lKyg4K0POTF/9Us2VFnYvVb alnLFqPzVVXlGPhAyEhSUGaH4Wl6EmNQu3tf5a9WqyGtxr+5A7g4Lplp/16UySI7 nDfzB6BgP3V6JH+QoaGbiKgVjCLTmDrIvAmatmd5fcQkDNqjSJeoTYS9CS6WpGLp Dr4sBDUwFuCca/OGo88nhVFoawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxjSgpA Rnmv+fiNoIdMgpejJujlMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2L2cQvcBkGwFAQyB7Ql3Iyqybs2SGaXvzz4zdfjXFo7OQuuk8OZU oJdA5Fx5TxeRR5t0AscniQ5hdIVBQq492IYSIlyFru1XvTZXvI1+FMXkMG8HT/0o UUufO1ckSX/1EMPIwnK1jUcEkoOCINOKgqgg+qVSSLy1PO3riY4lnogX8EXwdWc5 2ftWdiHL1Un8VwMGLd+9bkfhj2A/Up9G4xRFuXK6RWDgvUeztmn8Z8K7cBjYQrPb +oL2mbTNH/rxKGU1oEIV4vn/owp5kiH87Kgd2PTPD2M3d+NsLQVJaGDbK9fALoY1 ibedR8fBZlRg8Q4y2BtVtOI2BIdq8GAQ -----END CERTIFICATE-----Generated at Sat May 31 17:45:01 2025 by rpki-client