$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: l3CcUkC725uemoZRuCTuycT7TgmrsVziNUQdx2ftMPI= Subject key identifier: 66:F9:34:7D:6E:AC:83:29:6B:64:17:C4:04:16:8E:2B:9D:E0:26:19 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0C96 Signing time: Thu 24 Apr 2025 18:07:56 +0000 Manifest this update: Thu 24 Apr 2025 18:07:56 +0000 Manifest next update: Thu 01 May 2025 18:07:56 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: 6bwcSQm1qcSXVrpPNHoBT9GGUdhczgldFJNvl2zzsnM=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: VEw9MLhojPtBj7/yVbdylAjgIZeL4XHegjDH9vdhq/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Apr 24 18:07:56 2025 GMT Not After : May 1 18:07:56 2025 GMT Subject: CN=680a7dfc-16cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:6a:5c:db:f5:08:dc:3b:b0:20:cb:29:e0: c7:39:57:69:31:c2:9b:5f:93:30:fb:e1:e6:8b:7f: 2c:a8:8d:78:34:d6:0f:95:83:1f:5a:a6:4e:f8:6b: 1c:51:8c:3f:12:39:08:ec:75:ce:1e:e0:c8:44:39: 60:87:cd:25:8c:aa:94:27:d0:9a:2b:5e:20:5a:ac: 94:fd:de:60:39:76:4d:ca:7f:63:3f:13:22:aa:1e: c9:bf:ad:94:0c:3e:c7:e5:42:91:dd:3e:23:a9:ad: 3e:2d:7b:7c:8e:c3:84:e6:16:6a:7d:ac:55:4f:33: 66:c3:a7:82:51:72:07:24:59:7c:c5:30:88:68:7b: ae:d4:75:52:14:ee:15:a2:ec:12:a6:bb:25:f9:8c: f6:1d:fa:e1:f8:67:bf:cc:8c:f9:70:e7:72:98:17: 5e:2e:d6:af:82:f9:b7:48:5a:46:2f:13:f3:ce:a4: 13:30:cc:ca:34:73:e8:bb:ae:77:0b:bd:a1:f8:d2: d9:c9:40:16:31:31:33:52:36:6b:f8:0c:81:21:d1: 1c:c0:a5:33:cf:55:0a:81:26:9f:cc:78:12:ed:e0: a4:71:7e:7e:6a:15:a9:ea:df:81:15:80:86:cf:8b: e5:08:10:de:cd:c1:13:b1:d5:70:e6:ac:30:bc:a7: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:34:7D:6E:AC:83:29:6B:64:17:C4:04:16:8E:2B:9D:E0:26:19 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:43:10:6b:94:fc:0e:20:aa:3d:cd:c8:ad:bd:00:47:8c:b4: 39:86:d2:e7:04:c6:8d:04:cb:98:ea:82:c8:74:bf:74:9d:97: 9e:e6:7c:d2:d8:b1:31:ca:a2:2f:ad:b6:f8:9f:69:56:eb:cf: aa:de:35:2c:06:bc:9b:5b:56:1f:f9:6a:20:5b:6f:75:9d:97: 9f:73:f1:33:23:e4:76:80:55:1d:6d:f9:5c:ab:af:c5:1e:3d: 01:fb:23:a2:d2:6f:99:f0:b1:b0:cf:c6:e3:f8:0f:5e:0b:9d: 1c:96:5a:75:47:6a:c9:f8:89:28:b1:50:23:b5:f2:c9:70:49: 1d:2d:9f:60:ab:7e:7a:56:05:53:9d:a3:f5:ad:dd:56:67:8d: f3:39:cc:74:3d:c8:94:71:d0:ed:9f:f7:bb:e3:ca:77:c7:41: e8:8c:ea:93:91:2a:4d:4b:39:e6:fc:3e:1b:5a:c7:b6:9e:7a: 78:d7:39:9a:f4:30:77:a4:cf:3b:bd:01:85:78:f9:af:85:82: 89:10:90:6b:c5:30:c2:bf:ea:83:26:ca:c4:d8:ef:1f:fc:bc: 41:6e:f8:75:94:28:75:d3:49:08:f0:8e:1f:84:50:ed:b0:bf: 28:8b:d6:de:67:94:76:02:de:0f:e7:98:05:d4:1e:fd:47:4e: 6a:9b:85:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwNDI0MTgwNzU2WhcNMjUwNTAxMTgwNzU2WjAYMRYwFAYD VQQDEw02ODBhN2RmYy0xNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfFqXNv1CNw7sCDLKeDHOVdpMcKbX5Mw++Hmi38sqI14NNYPlYMfWqZO+Gsc UYw/EjkI7HXOHuDIRDlgh80ljKqUJ9CaK14gWqyU/d5gOXZNyn9jPxMiqh7Jv62U DD7H5UKR3T4jqa0+LXt8jsOE5hZqfaxVTzNmw6eCUXIHJFl8xTCIaHuu1HVSFO4V ouwSprsl+Yz2Hfrh+Ge/zIz5cOdymBdeLtavgvm3SFpGLxPzzqQTMMzKNHPou653 C72h+NLZyUAWMTEzUjZr+AyBIdEcwKUzz1UKgSafzHgS7eCkcX5+ahWp6t+BFYCG z4vlCBDezcETsdVw5qwwvKccMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb5NH1u rIMpa2QXxAQWjiud4CYZMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEQxBrlPwOIKo9zcitvQBHjLQ5htLnBMaNBMuY6oLIdL90nZee5nzS 2LExyqIvrbb4n2lW68+q3jUsBrybW1Yf+WogW291nZefc/EzI+R2gFUdbflcq6/F Hj0B+yOi0m+Z8LGwz8bj+A9eC50cllp1R2rJ+IkosVAjtfLJcEkdLZ9gq356VgVT naP1rd1WZ43zOcx0PciUcdDtn/e748p3x0HojOqTkSpNSznm/D4bWse2nnp41zma 9DB3pM87vQGFePmvhYKJEJBrxTDCv+qDJsrE2O8f/LxBbvh1lCh100kI8I4fhFDt sL8oi9beZ5R2At4P55gF1B79R05qm4WX -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:10 2025 by rpki-client