$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: pASKtNTfT6n3aR6+gvaqp72dFDPvEJo9w6XJsMQuVNU= Subject key identifier: 66:DC:02:3F:16:EA:6D:9C:AE:63:9E:35:4E:E5:E9:51:75:EE:F7:08 Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 04A3 Signing time: Mon 11 Aug 2025 00:06:40 +0000 Manifest this update: Mon 11 Aug 2025 00:06:39 +0000 Manifest next update: Mon 18 Aug 2025 00:06:39 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: Wg2LCvpaRMVP3a++jHhVEfNqV6AyjRejp0kMIjjP85E=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Aug 11 00:06:39 2025 GMT Not After : Aug 18 00:06:39 2025 GMT Subject: CN=6899340f-a883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:4a:27:e0:31:58:d6:0b:51:46:f2:b7:86: 11:03:e6:a3:81:54:94:74:d9:1a:f4:f1:2a:97:7d: fe:b6:37:c6:b4:21:cc:13:99:29:4d:ff:91:74:f9: d9:2b:be:82:88:88:4e:08:50:52:c4:d4:43:1c:b0: af:87:a3:a9:fb:d7:ac:0c:67:7e:bf:01:13:a4:ce: 87:21:49:ab:14:bf:d8:97:15:a6:3d:7a:60:21:dc: a7:10:ff:d7:5d:4f:aa:7d:52:b0:5b:8b:55:52:90: c4:6b:23:db:55:ad:6b:45:5d:06:4d:39:03:4f:c5: 48:54:af:01:06:74:d8:33:b1:16:53:c2:73:54:23: c0:02:1b:65:a1:a0:58:42:4a:ac:42:21:c9:c3:18: ba:57:dc:99:37:19:5f:49:98:ee:39:a8:da:51:cb: 7a:fe:df:7c:ee:f2:16:c5:1d:3a:72:3b:54:49:8d: d2:b6:4b:5c:98:89:99:36:4d:05:33:84:58:b9:f8: 27:ee:ee:55:3e:06:d5:e8:51:7f:e3:e1:e8:3a:a1: eb:39:b4:42:c3:bf:14:c9:98:51:96:92:dd:69:53: a6:f5:79:5a:7e:5b:74:d9:57:54:b3:8d:ae:8f:91: ef:6e:a5:ec:41:83:32:3a:77:9b:60:63:01:77:8d: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DC:02:3F:16:EA:6D:9C:AE:63:9E:35:4E:E5:E9:51:75:EE:F7:08 X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:59:2c:17:8e:80:bc:49:eb:d0:0f:1c:c6:79:44:ee:17:42: 8d:9e:67:04:24:c0:03:30:d9:70:57:2a:0d:5a:17:dd:cd:ce: 2a:27:08:29:c4:d6:ac:3f:71:0d:cb:85:72:a7:e9:0b:c3:9d: e8:2b:60:13:57:2b:b7:47:8e:94:ac:08:07:8b:ab:f0:6e:f5: a0:ba:3e:10:a6:21:d4:9f:1f:06:d1:5f:2c:1a:cf:15:e5:d4: 2c:21:d4:bd:61:43:96:5a:a2:08:c9:2b:af:c0:2b:32:9a:6b: a1:2e:51:e3:d4:0d:b1:f8:d6:16:71:db:d8:22:f0:01:d3:c7: 29:36:ea:9e:1d:c2:1f:ba:30:fc:5b:22:2f:0e:85:98:ae:70: 30:5b:35:3e:7b:3c:69:04:95:51:95:0a:48:e4:47:c4:ac:a0: b7:4f:33:1e:ec:dd:9f:43:79:b0:9b:ab:ab:4d:58:6b:b7:0f: 24:14:d1:12:df:f6:3f:88:d5:d4:7c:23:28:24:e9:db:e3:f0: d1:39:0c:bb:94:1d:18:76:ea:76:bf:f2:35:80:a6:13:68:85: 03:e8:dc:bf:ed:48:7d:82:08:26:16:05:83:03:f2:8f:2e:00: db:be:ad:79:40:5c:8c:db:f0:0b:5b:ff:8d:9f:2b:6b:e9:72: 27:32:b7:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUwODExMDAwNjM5WhcNMjUwODE4MDAwNjM5WjAYMRYwFAYD VQQDEw02ODk5MzQwZi1hODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjFKJ+AxWNYLUUbyt4YRA+ajgVSUdNka9PEql33+tjfGtCHME5kpTf+RdPnZ K76CiIhOCFBSxNRDHLCvh6Op+9esDGd+vwETpM6HIUmrFL/YlxWmPXpgIdynEP/X XU+qfVKwW4tVUpDEayPbVa1rRV0GTTkDT8VIVK8BBnTYM7EWU8JzVCPAAhtloaBY QkqsQiHJwxi6V9yZNxlfSZjuOajaUct6/t987vIWxR06cjtUSY3StktcmImZNk0F M4RYufgn7u5VPgbV6FF/4+HoOqHrObRCw78UyZhRlpLdaVOm9Xlaflt02VdUs42u j5HvbqXsQYMyOnebYGMBd42YBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbcAj8W 6m2crmOeNU7l6VF17vcIMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuWSwXjoC8SevQDxzGeUTuF0KNnmcEJMADMNlwVyoNWhfdzc4qJwgp xNasP3ENy4Vyp+kLw53oK2ATVyu3R46UrAgHi6vwbvWguj4QpiHUnx8G0V8sGs8V 5dQsIdS9YUOWWqIIySuvwCsymmuhLlHj1A2x+NYWcdvYIvAB08cpNuqeHcIfujD8 WyIvDoWYrnAwWzU+ezxpBJVRlQpI5EfErKC3TzMe7N2fQ3mwm6urTVhrtw8kFNES 3/Y/iNXUfCMoJOnb4/DROQy7lB0Ydup2v/I1gKYTaIUD6Ny/7Uh9gggmFgWDA/KP LgDbvq15QFyM2/ALW/+Nnytr6XInMrcK -----END CERTIFICATE-----Generated at Tue Aug 12 14:41:36 2025 by rpki-client