$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json) Hash identifier: Mg73B4axHnm7DECZts/eIflduC7Gwr0oPBch7vcI3ic= Subject key identifier: 19:B4:F0:B8:7C:0E:6E:25:CB:4D:F4:99:CC:A9:01:9E:85:16:98:88 Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft Manifest number: 77 Signing time: Sat 31 May 2025 06:19:56 +0000 Manifest this update: Sat 31 May 2025 06:19:56 +0000 Manifest next update: Sat 07 Jun 2025 06:19:56 +0000 Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: MwY9cYv3lHKYToQ6A5pMQEUM3+GI10d4TinBTjljTCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Validity Not Before: May 31 06:19:56 2025 GMT Not After : Jun 7 06:19:56 2025 GMT Subject: CN=683a9f8c-25ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:dc:c3:7d:5b:f4:8a:07:68:b0:e7:f0:ca: 0c:35:4a:38:51:ed:ca:8b:a1:c5:64:a1:76:3a:fd: 18:d0:11:67:8e:cc:f4:ab:94:df:26:bc:1a:dc:d4: 00:c4:bb:bf:ab:36:3a:48:5e:1e:88:d9:f6:b0:68: 94:ed:45:3e:0e:35:a0:4c:c3:36:d2:03:05:24:0b: ff:a8:89:f1:33:96:9c:7a:22:31:77:d0:b3:4e:94: 4a:d7:41:34:e6:6f:1c:a5:2c:58:da:bd:d4:3c:c0: 74:a7:98:66:d0:58:e8:f2:98:93:15:21:b5:cf:8f: ef:56:24:43:19:5a:5f:5d:da:5e:e3:16:07:c9:dd: ee:f1:08:d8:a2:62:dc:06:89:49:d3:b4:78:d1:51: c3:1c:d0:7d:6d:4e:d2:42:d7:2b:d2:a7:95:47:9b: af:76:d0:f7:b6:e7:12:6c:fe:6c:37:5c:c4:16:cb: 38:2c:f0:23:8d:e7:d7:be:fd:f0:10:8b:c0:43:92: c2:e3:73:2e:bb:8b:6e:a9:52:b5:5f:6c:60:6d:e4: 2c:98:52:a3:34:99:cd:3c:8f:1e:64:bb:4b:39:9e: 53:1c:1e:ce:8a:55:69:e7:d9:25:d6:e2:6e:ea:89: a4:b3:2c:3e:09:6b:bf:cc:b8:7f:52:b2:11:69:21: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B4:F0:B8:7C:0E:6E:25:CB:4D:F4:99:CC:A9:01:9E:85:16:98:88 X509v3 Authority Key Identifier: keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a6:40:60:52:ae:64:65:97:b3:78:79:bc:d9:3f:e5:0d:8d: 1f:4b:6d:98:ff:5c:e1:7f:a6:3f:97:53:05:50:f0:5c:25:cf: fe:02:18:12:4e:6f:37:82:bd:91:6d:a4:6d:80:1a:1b:fa:23: fe:7b:96:72:b0:5e:7c:3c:db:ab:d3:ee:dd:10:cd:74:db:ed: 46:20:1c:8a:c4:c7:87:3a:c9:7b:ee:c7:c5:2b:95:80:94:2d: 0f:5d:b5:06:97:e1:e1:81:27:e1:ec:33:78:f1:25:64:dd:9c: 0d:8f:58:77:d5:23:af:1e:3f:5c:b7:f9:84:1c:d7:b2:f5:c9: 41:2f:fb:af:2d:3b:7d:9a:5f:68:e6:a1:7c:8e:21:86:d2:d0: b4:c9:e0:1d:65:c5:12:b2:1f:94:25:b7:c3:84:a4:d0:84:bd: 88:4c:66:6c:1a:a2:2e:f6:a0:03:af:42:38:5b:51:1a:b5:87: 03:ff:cd:b6:91:f0:5e:a6:f0:3b:11:4b:05:86:66:00:8f:aa: 72:a3:f6:c5:d9:e0:e1:03:92:d1:f1:10:a0:da:30:5d:66:31: 64:d2:79:45:a6:f4:54:6f:db:76:98:dd:cb:34:94:68:11:5b: 60:cb:61:6e:7a:aa:76:f3:b8:52:37:0b:f9:1a:79:bb:f4:9c: 37:d5:c9:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjNFNzExMC8GA1UEBRMoOTZEMzI1MzkxMTQ2Q0YzQjVEQTNGRTE0NjlGRUMxMjhC NEI2OEM0OTAeFw0yNTA1MzEwNjE5NTZaFw0yNTA2MDcwNjE5NTZaMBgxFjAUBgNV BAMTDTY4M2E5ZjhjLTI1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgm9zDfVv0igdosOfwygw1SjhR7cqLocVkoXY6/RjQEWeOzPSrlN8mvBrc1ADE u7+rNjpIXh6I2fawaJTtRT4ONaBMwzbSAwUkC/+oifEzlpx6IjF30LNOlErXQTTm bxylLFjavdQ8wHSnmGbQWOjymJMVIbXPj+9WJEMZWl9d2l7jFgfJ3e7xCNiiYtwG iUnTtHjRUcMc0H1tTtJC1yvSp5VHm6920Pe25xJs/mw3XMQWyzgs8CON59e+/fAQ i8BDksLjcy67i26pUrVfbGBt5CyYUqM0mc08jx5ku0s5nlMcHs6KVWnn2SXW4m7q iaSzLD4Ja7/MuH9SshFpIYabAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGbTwuHwO biXLTfSZzKkBnoUWmIgwHwYDVR0jBBgwFoAUltMlORFGzztdo/4Uaf7BKLS2jEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2M0U3LzRBQ0I4QkYwODg3 MTExRUZBNzA4RDE3REM0RjlBRTAyL2x0TWxPUkZHenp0ZG9fNFVhZjdCS0xTMmpF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHRNbE9SRkd6enRkb180VWFmN0JLTFMyakVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 M0U3LzRBQ0I4QkYwODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL2x0TWxPUkZHenp0 ZG9fNFVhZjdCS0xTMmpFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOmQGBSrmRll7N4ebzZP+UNjR9LbZj/XOF/pj+XUwVQ8Fwlz/4CGBJO bzeCvZFtpG2AGhv6I/57lnKwXnw826vT7t0QzXTb7UYgHIrEx4c6yXvux8UrlYCU LQ9dtQaX4eGBJ+HsM3jxJWTdnA2PWHfVI68eP1y3+YQc17L1yUEv+68tO32aX2jm oXyOIYbS0LTJ4B1lxRKyH5Qlt8OEpNCEvYhMZmwaoi72oAOvQjhbURq1hwP/zbaR 8F6m8DsRSwWGZgCPqnKj9sXZ4OEDktHxEKDaMF1mMWTSeUWm9FRv23aY3cs0lGgR W2DLYW56qnbzuFI3C/kaebv0nDfVyYg= -----END CERTIFICATE-----Generated at Sat May 31 14:41:33 2025 by rpki-client