$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: UEKUh/UEWd11d0GsSivwv4VUN5sePEAtpU55bwDITDs= Subject key identifier: EA:20:F4:3C:A6:11:89:78:13:90:3C:91:95:0C:C6:F8:D2:79:D0:69 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 08BB Signing time: Sun 10 Aug 2025 20:30:47 +0000 Manifest this update: Sun 10 Aug 2025 20:30:47 +0000 Manifest next update: Sun 17 Aug 2025 20:30:47 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: gp4mY5NK/lYeh4y0jatgrrbdKON6mjiXNROVRR/WS+o=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: RhxFTOuJ/e6uIZTp4AHpESYI5KzhXykHlA9CqyGvafI=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: u5cH8Cct4Kcc1phETe1wMMgP4HVQBU2rSY+p4Vm2lKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Aug 10 20:30:47 2025 GMT Not After : Aug 17 20:30:47 2025 GMT Subject: CN=68990177-e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:ea:a7:3f:ff:ef:00:4c:e3:85:f9:0b:04: 5b:c8:38:d0:4c:28:3e:01:f1:16:ea:58:42:29:e1: 44:2d:31:6d:ba:ea:36:48:72:68:cd:34:82:f4:21: 81:93:ec:49:c1:be:41:17:ee:84:86:b2:72:70:c9: ec:5a:21:ef:2c:2b:88:a2:81:08:8f:c6:86:5c:54: 7b:88:9f:85:f6:e8:2b:b2:d2:6d:9c:2f:b6:f6:e4: 24:5c:e1:91:d3:07:a2:03:c3:42:4f:36:8c:40:15: d3:ed:70:e1:80:2d:74:a9:5d:f7:f5:b3:80:ee:58: a7:cc:98:d1:21:c9:ac:d9:4f:29:c2:28:7a:17:9e: cf:91:af:23:86:18:e7:01:eb:81:bc:41:2d:dc:c6: 13:a7:53:af:ba:76:01:7e:12:8b:4e:4a:c1:65:ac: f1:3e:83:61:8f:c7:e8:0c:1a:a5:13:cd:37:e7:dd: f7:16:7c:d9:02:41:9c:54:42:65:fd:01:9d:05:72: 5c:3b:78:f9:5e:f8:4b:c2:fe:72:91:4d:82:2e:0e: 27:73:1c:a0:1f:ff:4f:bb:e0:96:58:d6:0d:f8:ce: f5:0a:51:b9:e5:ed:d3:33:50:b5:e0:ac:cc:97:53: ab:ab:1e:51:b5:f3:cc:b1:40:38:b1:97:89:52:cd: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:20:F4:3C:A6:11:89:78:13:90:3C:91:95:0C:C6:F8:D2:79:D0:69 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b4:cc:ba:59:b6:f1:55:69:3c:5c:b7:a8:f1:5a:67:2f:a9: 78:03:a4:82:ab:4e:5c:1b:2e:cb:7d:2f:ec:a9:b3:8c:ca:ba: 78:82:11:45:b1:7d:05:45:f5:e3:f9:5f:5f:7e:c2:6e:02:28: 2a:db:5a:e7:9b:e0:04:0e:f3:b9:cd:5b:db:1f:24:f8:a1:89: 12:ac:f7:e6:05:50:4a:4e:0c:da:19:ff:ef:17:ef:e8:74:18: 9f:a8:0f:2f:00:80:47:3a:55:7f:d6:d3:ef:11:72:d9:88:c8: 35:4e:2b:61:c1:f6:02:fa:c8:f9:ad:8c:e1:3e:fc:ee:19:67: 5b:f4:ab:c0:dd:87:61:94:92:78:9e:f6:71:e6:4d:f2:3f:24: 29:8f:c8:69:53:d2:4a:6a:3f:73:4a:b7:bf:a2:2d:d0:3a:c2: e3:b6:50:6d:85:50:30:7a:e0:87:28:51:87:b7:bb:11:e2:3c: 81:da:ec:56:09:93:d2:4f:57:86:77:11:3f:6d:c5:9d:21:59: 2d:7a:a7:cd:37:b0:b0:b1:23:c0:c2:55:32:cb:96:0b:72:b3: c7:6d:37:3b:79:3a:c4:e6:63:61:7a:80:ca:09:92:02:de:9c: 18:37:27:23:8d:55:cf:bf:98:48:ca:7a:ff:b0:7f:c4:fa:28: 3d:4c:b9:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwODEwMjAzMDQ3WhcNMjUwODE3MjAzMDQ3WjAYMRYwFAYD VQQDEw02ODk5MDE3Ny1lNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mHqpz//7wBM44X5CwRbyDjQTCg+AfEW6lhCKeFELTFtuuo2SHJozTSC9CGB k+xJwb5BF+6EhrJycMnsWiHvLCuIooEIj8aGXFR7iJ+F9ugrstJtnC+29uQkXOGR 0weiA8NCTzaMQBXT7XDhgC10qV339bOA7linzJjRIcms2U8pwih6F57Pka8jhhjn AeuBvEEt3MYTp1OvunYBfhKLTkrBZazxPoNhj8foDBqlE8035933FnzZAkGcVEJl /QGdBXJcO3j5XvhLwv5ykU2CLg4ncxygH/9Pu+CWWNYN+M71ClG55e3TM1C14KzM l1Orqx5RtfPMsUA4sZeJUs2yEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOog9Dym EYl4E5A8kZUMxvjSedBpMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxtMy6WbbxVWk8XLeo8VpnL6l4A6SCq05cGy7LfS/sqbOMyrp4ghFF sX0FRfXj+V9ffsJuAigq21rnm+AEDvO5zVvbHyT4oYkSrPfmBVBKTgzaGf/vF+/o dBifqA8vAIBHOlV/1tPvEXLZiMg1TithwfYC+sj5rYzhPvzuGWdb9KvA3YdhlJJ4 nvZx5k3yPyQpj8hpU9JKaj9zSre/oi3QOsLjtlBthVAweuCHKFGHt7sR4jyB2uxW CZPST1eGdxE/bcWdIVkteqfNN7CwsSPAwlUyy5YLcrPHbTc7eTrE5mNheoDKCZIC 3pwYNycjjVXPv5hIynr/sH/E+ig9TLl2 -----END CERTIFICATE-----Generated at Mon Aug 11 09:30:32 2025 by rpki-client