$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: LCnN37lYtpHnUaRf8TFIhfEOzLpx4DgzAFr39FUtkYU= Subject key identifier: E4:65:36:D8:FF:CE:1A:B6:A2:7F:77:67:CB:55:64:C2:EA:44:D9:2A Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0B8C Signing time: Sun 08 Jun 2025 18:49:09 +0000 Manifest this update: Sun 08 Jun 2025 18:49:08 +0000 Manifest next update: Sun 15 Jun 2025 18:49:08 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: I+0NrYlje3pzLy1zWg3LtuCzsRxepBCvXitxSFsowK0=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Jun 8 18:49:08 2025 GMT Not After : Jun 15 18:49:08 2025 GMT Subject: CN=6845db24-588f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ff:31:c6:a8:90:7a:26:f7:66:fb:55:28:3d: 6b:f7:65:9f:ea:58:e8:8e:e3:22:6b:27:23:d9:e6: 3a:0f:fa:bc:8e:6e:71:99:10:09:b8:16:5c:35:74: 1c:b6:6b:75:2a:a2:01:db:a4:41:56:37:2c:bb:5a: 77:05:4a:8e:0b:b0:69:05:d3:8d:24:4a:d6:82:76: c7:51:d7:ad:3b:14:bf:a5:3c:a5:0a:2c:8d:ac:27: e4:1b:08:3b:ef:30:29:38:06:97:5d:78:fc:1e:34: f7:3f:2d:36:a1:50:0d:12:a2:ae:91:be:37:31:4f: ec:1a:e4:9f:5e:b9:54:4a:f8:bb:b2:e7:b2:ee:c5: df:e6:63:18:ba:8c:4b:39:52:ed:ae:6d:de:2d:fd: 3b:df:3a:0b:a9:4b:1e:7f:b9:9f:a6:72:c9:a0:e9: 27:0c:0a:f8:5b:7c:75:70:c4:d9:62:61:06:66:49: ec:99:2c:95:6d:6c:01:e9:1a:7e:26:d9:5f:13:61: 08:c2:3c:ee:02:7a:57:82:0c:0f:e5:f1:ac:ea:7f: 9e:54:1e:90:8a:dd:7f:23:a5:47:38:b9:0f:94:60: 52:aa:fd:bf:98:30:5c:f7:77:7d:be:53:5e:5b:83: d8:8a:b8:a2:c8:26:e3:f7:90:1c:b4:8f:02:3c:a8: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:65:36:D8:FF:CE:1A:B6:A2:7F:77:67:CB:55:64:C2:EA:44:D9:2A X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:dd:4f:76:29:b7:2b:a3:05:ba:a8:ec:e5:c3:5c:78:14:e3: 4e:40:d5:28:c6:45:b7:a3:8f:ba:81:4c:63:85:b3:07:7a:42: 60:47:f2:ba:20:79:c0:bf:39:43:80:83:15:ee:a6:27:96:b6: e9:c1:00:b0:c6:15:71:8f:83:5b:68:4b:13:7e:08:24:47:ed: 8f:cb:c2:d6:1f:bc:b1:55:23:2b:05:e8:88:ce:c3:78:4d:d9: ec:44:55:5a:95:71:79:0f:ba:cb:c6:97:a1:aa:ac:ab:04:a5: 45:f9:7e:75:05:51:bb:13:52:37:40:e4:15:88:1d:79:ee:4e: 0d:6e:e4:1b:1c:19:63:c8:4f:fe:9b:61:19:ae:a0:f3:d3:f2: 61:5f:60:43:a4:29:78:89:81:24:4d:8b:08:ae:3f:05:7f:79: 4f:71:7b:2f:ab:1e:d7:10:db:ee:13:63:a8:5a:84:00:51:3b: ed:34:00:e3:a7:af:7c:98:22:c3:f0:9d:fe:1c:1f:b0:79:0b: 8b:e7:c0:47:1b:18:81:58:5b:e5:55:df:35:0a:8d:0f:5e:c3: 52:5b:aa:11:e4:dd:10:6e:de:73:f5:3b:1e:9f:9d:39:39:3f: bc:a0:b8:8a:db:d4:db:e9:ae:56:a7:d9:d3:5b:b3:fd:7a:28: d3:e2:4a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUwNjA4MTg0OTA4WhcNMjUwNjE1MTg0OTA4WjAYMRYwFAYD VQQDEw02ODQ1ZGIyNC01ODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/8xxqiQeib3ZvtVKD1r92Wf6ljojuMiaycj2eY6D/q8jm5xmRAJuBZcNXQc tmt1KqIB26RBVjcsu1p3BUqOC7BpBdONJErWgnbHUdetOxS/pTylCiyNrCfkGwg7 7zApOAaXXXj8HjT3Py02oVANEqKukb43MU/sGuSfXrlUSvi7suey7sXf5mMYuoxL OVLtrm3eLf073zoLqUsef7mfpnLJoOknDAr4W3x1cMTZYmEGZknsmSyVbWwB6Rp+ JtlfE2EIwjzuAnpXggwP5fGs6n+eVB6Qit1/I6VHOLkPlGBSqv2/mDBc93d9vlNe W4PYiriiyCbj95ActI8CPKgOeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORlNtj/ zhq2on93Z8tVZMLqRNkqMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc3U92KbcrowW6qOzlw1x4FONOQNUoxkW3o4+6gUxjhbMHekJgR/K6 IHnAvzlDgIMV7qYnlrbpwQCwxhVxj4NbaEsTfggkR+2Py8LWH7yxVSMrBeiIzsN4 TdnsRFValXF5D7rLxpehqqyrBKVF+X51BVG7E1I3QOQViB157k4NbuQbHBljyE/+ m2EZrqDz0/JhX2BDpCl4iYEkTYsIrj8Ff3lPcXsvqx7XENvuE2OoWoQAUTvtNADj p698mCLD8J3+HB+weQuL58BHGxiBWFvlVd81Co0PXsNSW6oR5N0Qbt5z9Tsen505 OT+8oLiK29Tb6a5Wp9nTW7P9eijT4krC -----END CERTIFICATE-----Generated at Mon Jun 9 08:33:02 2025 by rpki-client