$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: eYhWovjGvEJhA7Xr88Mo428Kfo7a4Zpp3OpQbAiFu6U= Subject key identifier: 99:3E:57:D5:DF:F7:05:AA:59:53:CF:41:E2:90:03:3A:BF:77:00:B9 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CB4 Signing time: Wed 18 Jun 2025 18:04:05 +0000 Manifest this update: Wed 18 Jun 2025 18:04:04 +0000 Manifest next update: Wed 25 Jun 2025 18:04:04 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: z+1/NFC0NbHaeweOeJQdoF7eLWmI/bVlTwXBLzCo/QI=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Jun 18 18:04:04 2025 GMT Not After : Jun 25 18:04:04 2025 GMT Subject: CN=6852ff94-4b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:1b:7d:af:3e:4a:ca:2f:c3:1b:a2:6a:5d: 86:df:a3:24:35:d7:8f:4c:99:58:4e:d9:66:8c:5e: 94:b2:09:d1:08:90:41:28:04:69:49:15:81:e7:86: ba:4b:21:00:0e:15:02:72:df:da:bf:29:da:53:8f: a4:8a:da:56:f4:34:d4:bb:12:35:70:c4:f2:b4:45: f7:4a:81:94:ca:47:1f:5a:ad:e9:bd:a8:7e:dc:62: 7f:3a:6d:0e:65:44:bb:82:92:db:c5:96:4c:b9:7b: 7c:17:9f:94:6c:4d:bd:7d:a3:cf:08:5b:98:21:8b: 86:16:bf:3d:68:f9:1a:89:b1:d5:af:d9:95:48:38: 96:54:e9:80:51:e9:5b:5c:dc:b4:64:b3:56:30:79: 16:0e:85:cd:71:4d:3c:f9:2c:64:df:bd:d1:94:cd: 62:be:c6:2e:4c:29:f5:65:db:29:1d:5e:ca:3a:a7: 99:fe:9a:07:20:1c:02:b0:5b:7f:85:22:78:98:ae: 72:f1:f4:d4:d7:ce:b8:be:41:58:df:4e:de:52:59: f1:59:5e:31:82:13:66:02:00:64:79:e4:cc:c4:0c: c0:82:91:aa:9c:e4:a9:19:e6:c5:6e:e2:84:f9:08: c9:6d:15:b7:ac:1a:05:6c:f8:83:f8:a1:8e:37:a2: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:57:D5:DF:F7:05:AA:59:53:CF:41:E2:90:03:3A:BF:77:00:B9 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7e:05:d1:9d:72:7b:6c:82:1c:16:29:1e:de:5a:42:d2:98: 73:b9:72:17:9d:8f:4b:ec:d4:97:ec:c3:1d:f9:1d:24:07:9b: 03:ec:e1:9f:06:dc:62:4b:22:46:7f:d7:f0:ef:77:74:f8:62: 4b:19:ff:70:df:a2:ce:98:41:7f:63:73:da:b2:5d:d2:31:d8: b1:e0:27:93:52:ee:56:4c:88:e7:14:72:2a:bf:8c:35:60:ee: b8:9a:7b:64:61:19:3c:d1:d2:92:b8:2b:f3:03:43:92:66:dc: f7:84:5c:cb:5e:84:3e:50:32:9e:35:07:8e:7a:dd:1d:51:41: 37:ae:15:eb:78:4b:8c:39:aa:5f:a4:9c:a0:4b:dd:6e:e5:64: 44:79:b9:2a:13:38:93:c8:4e:e5:f1:5c:91:9b:2c:13:20:3e: 33:89:d4:88:ed:d1:e2:6b:6d:62:95:9e:56:99:a6:41:43:d7: fb:21:d9:70:d6:ec:8c:87:69:8f:1d:d0:86:e0:08:ff:94:19: 2f:91:9c:50:79:cc:c9:92:fd:a2:54:f3:c6:20:64:78:28:46: a4:6b:b0:75:c9:a0:a9:d6:73:ef:5f:6b:e2:51:b1:a9:29:a1: b8:dc:d8:90:d6:88:9e:a1:d7:1f:23:13:53:c5:ed:98:e9:ff: c9:12:d8:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwNjE4MTgwNDA0WhcNMjUwNjI1MTgwNDA0WjAYMRYwFAYD VQQDEw02ODUyZmY5NC00YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRgbfa8+Ssovwxuial2G36MkNdePTJlYTtlmjF6UsgnRCJBBKARpSRWB54a6 SyEADhUCct/avynaU4+kitpW9DTUuxI1cMTytEX3SoGUykcfWq3pvah+3GJ/Om0O ZUS7gpLbxZZMuXt8F5+UbE29faPPCFuYIYuGFr89aPkaibHVr9mVSDiWVOmAUelb XNy0ZLNWMHkWDoXNcU08+Sxk373RlM1ivsYuTCn1ZdspHV7KOqeZ/poHIBwCsFt/ hSJ4mK5y8fTU1864vkFY307eUlnxWV4xghNmAgBkeeTMxAzAgpGqnOSpGebFbuKE +QjJbRW3rBoFbPiD+KGON6KwhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJk+V9Xf 9wWqWVPPQeKQAzq/dwC5MB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlfgXRnXJ7bIIcFike3lpC0phzuXIXnY9L7NSX7MMd+R0kB5sD7OGf BtxiSyJGf9fw73d0+GJLGf9w36LOmEF/Y3Pasl3SMdix4CeTUu5WTIjnFHIqv4w1 YO64mntkYRk80dKSuCvzA0OSZtz3hFzLXoQ+UDKeNQeOet0dUUE3rhXreEuMOapf pJygS91u5WREebkqEziTyE7l8VyRmywTID4zidSI7dHia21ilZ5WmaZBQ9f7Idlw 1uyMh2mPHdCG4Aj/lBkvkZxQeczJkv2iVPPGIGR4KEaka7B1yaCp1nPvX2viUbGp KaG43NiQ1oieodcfIxNTxe2Y6f/JEtiZ -----END CERTIFICATE-----Generated at Fri Jun 20 10:35:41 2025 by rpki-client