$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: T3WGyG+X6egP+JQb4fx7uA0beDwxAY3YTdb6Jj4nPZs= Subject key identifier: D8:C5:62:B0:E7:13:0A:BE:A4:F7:D8:E6:D1:CE:B1:84:5E:91:D7:DE Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0414 Signing time: Sat 31 May 2025 00:38:51 +0000 Manifest this update: Sat 31 May 2025 00:38:51 +0000 Manifest next update: Sat 07 Jun 2025 00:38:51 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: PXJLsEi//ZJ7Je/gLoKe44n03ZVqx8pgiJ3hriARQlo=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) 3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 4: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: May 31 00:38:51 2025 GMT Not After : Jun 7 00:38:51 2025 GMT Subject: CN=683a4f9b-89fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:e3:7e:3d:64:ad:e9:a1:05:d5:6d:bf:07: f7:da:72:6a:e2:89:ea:e4:55:a0:8e:1d:16:58:36: 0d:d0:85:22:ea:18:cb:32:d2:ca:b3:73:b3:7d:47: b4:1c:b8:c1:e3:6a:05:19:b8:2b:54:df:cf:6d:2d: a6:08:a1:e0:62:d9:9c:60:8f:5f:71:e8:fe:f4:30: 8d:ef:a5:7c:d2:17:36:2d:35:06:52:89:8d:92:43: b2:3f:58:99:a7:59:e7:66:cb:cd:93:56:7c:70:c4: 0b:71:1e:91:e7:1f:bc:74:bc:68:07:43:ee:4e:e7: 8f:2a:51:dd:3d:0a:27:aa:48:cb:16:39:6d:d8:5f: 59:63:e9:57:f5:c2:f6:af:4d:38:3b:54:27:3b:1d: 2a:88:dd:8c:7f:79:6b:29:49:d9:41:d9:8b:0d:33: 3d:b1:b1:c1:31:93:30:8c:6f:cf:6a:a3:8f:7c:a3: 44:c3:aa:49:b8:96:39:7d:7c:20:33:63:aa:77:1c: d4:ad:0e:58:3f:ea:a1:2a:04:3b:cb:45:c8:6f:ce: 8a:a9:f0:16:a4:c7:c7:35:92:6d:89:81:03:bd:42: ac:d5:a9:cb:9a:1d:c0:c9:87:1e:35:4e:8d:7b:70: d8:d3:75:f3:0b:ac:ad:9a:6c:33:8e:08:9a:f5:72: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:62:B0:E7:13:0A:BE:A4:F7:D8:E6:D1:CE:B1:84:5E:91:D7:DE X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5b:e1:1c:0e:69:38:a4:2d:49:06:34:4e:78:ae:9d:20:ed: 7d:74:57:18:27:e7:6d:36:41:1a:9d:ba:7b:33:b2:a2:c3:54: ad:81:17:dd:86:0a:7c:cb:02:a2:48:6f:0a:63:5b:1a:ab:22: 2c:d4:b0:f5:2f:f0:e3:3b:6d:5b:b4:00:e1:47:62:cf:e6:55: 54:20:1c:5b:67:b9:d2:83:14:10:3b:9f:d9:01:51:a1:1b:1c: ad:f0:2a:bd:20:b1:c2:9b:29:fd:ad:7c:36:af:c5:25:03:be: d8:38:91:2d:24:7c:dd:07:3d:59:34:80:f9:b5:4d:3b:6a:cc: 08:68:e9:bd:04:81:08:d9:ef:70:04:3b:71:ba:fc:9a:17:0b: a2:11:45:39:3f:6b:50:ac:87:77:52:7b:1a:6a:bc:1d:d0:f6: b5:78:51:7f:f0:e7:0d:46:c9:9a:28:d3:8d:90:7b:10:36:ab: e9:0a:a5:6f:80:63:20:31:73:93:cd:17:68:90:73:9c:e0:6d: a3:30:b7:d2:41:50:33:d9:06:f7:91:3d:bc:75:e4:86:d0:5a: 9d:52:83:52:12:85:11:f8:87:2c:2a:ff:cd:ca:ac:a8:8f:30: 53:de:a2:c1:d0:c1:b4:35:9d:bf:17:db:ad:d3:3b:ed:14:1d: 2f:31:bd:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwNTMxMDAzODUxWhcNMjUwNjA3MDAzODUxWjAYMRYwFAYD VQQDEw02ODNhNGY5Yi04OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtzjfj1kremhBdVtvwf32nJq4onq5FWgjh0WWDYN0IUi6hjLMtLKs3OzfUe0 HLjB42oFGbgrVN/PbS2mCKHgYtmcYI9fcej+9DCN76V80hc2LTUGUomNkkOyP1iZ p1nnZsvNk1Z8cMQLcR6R5x+8dLxoB0PuTuePKlHdPQonqkjLFjlt2F9ZY+lX9cL2 r004O1QnOx0qiN2Mf3lrKUnZQdmLDTM9sbHBMZMwjG/PaqOPfKNEw6pJuJY5fXwg M2OqdxzUrQ5YP+qhKgQ7y0XIb86KqfAWpMfHNZJtiYEDvUKs1anLmh3AyYceNU6N e3DY03XzC6ytmmwzjgia9XK+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjFYrDn Ewq+pPfY5tHOsYRekdfeMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxW+EcDmk4pC1JBjROeK6dIO19dFcYJ+dtNkEanbp7M7Kiw1StgRfd hgp8ywKiSG8KY1saqyIs1LD1L/DjO21btADhR2LP5lVUIBxbZ7nSgxQQO5/ZAVGh Gxyt8Cq9ILHCmyn9rXw2r8UlA77YOJEtJHzdBz1ZNID5tU07aswIaOm9BIEI2e9w BDtxuvyaFwuiEUU5P2tQrId3Unsaarwd0Pa1eFF/8OcNRsmaKNONkHsQNqvpCqVv gGMgMXOTzRdokHOc4G2jMLfSQVAz2Qb3kT28deSG0FqdUoNSEoUR+IcsKv/Nyqyo jzBT3qLB0MG0NZ2/F9ut0zvtFB0vMb0P -----END CERTIFICATE-----Generated at Sat May 31 17:32:54 2025 by rpki-client