$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: ANcTU44WoNI3fy9+Jg6/qJ/ojQtB7h4rTiLtxU6IkMg= Subject key identifier: 1A:17:F7:98:38:50:D3:F3:CA:F8:23:83:49:8E:64:17:06:B8:71:F3 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 089B Signing time: Thu 12 Jun 2025 20:19:21 +0000 Manifest this update: Thu 12 Jun 2025 20:19:21 +0000 Manifest next update: Thu 19 Jun 2025 20:19:21 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: acUqhvxoXj/veLcSsjlHFU4FNJCstYkK5fkZvxoGr4E=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Jun 12 20:19:21 2025 GMT Not After : Jun 19 20:19:21 2025 GMT Subject: CN=684b3649-b25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:7a:46:e9:53:69:3d:7b:07:28:14:f7:9b: 41:cd:1c:fb:ed:51:60:cd:20:19:eb:55:7f:ff:29: 30:c9:e9:de:76:71:68:7b:69:a0:d1:48:07:e2:f7: a5:09:18:d0:38:76:35:46:25:20:64:05:dc:2a:bb: a8:76:b7:f7:8d:19:c9:b6:88:55:13:54:7f:fd:00: 9a:60:7b:8a:b5:60:88:ff:b1:1a:dc:64:ba:ec:72: 62:f1:18:35:a1:6e:ae:ef:5f:e1:f4:f6:17:b2:24: f2:b8:1a:39:db:ce:2c:ed:a9:20:03:2e:e2:5b:c6: d4:b4:ac:87:83:b8:89:12:f0:b0:e2:79:8e:03:c8: e4:7b:25:f6:52:58:6e:3d:83:0b:02:d4:8a:61:dd: 49:80:f4:b1:ca:98:3e:b6:a3:25:7c:f5:e2:4b:e0: 4b:cc:02:5a:60:3d:a2:08:9c:26:e5:78:47:31:e4: 10:7a:ea:8d:cf:ea:8c:4f:d9:39:8f:a5:5c:db:31: 2a:c7:11:f4:e7:76:8c:ba:b1:2c:5d:79:39:a0:a0: af:09:4a:2e:b6:cf:57:4e:dc:13:6f:34:2b:75:6b: 56:be:03:91:b4:98:cb:04:d2:cb:6a:47:82:36:88: 5b:51:c8:9e:71:31:14:67:82:47:6c:03:6e:9d:9c: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:17:F7:98:38:50:D3:F3:CA:F8:23:83:49:8E:64:17:06:B8:71:F3 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bd:23:a6:d2:96:ac:0a:c9:71:bd:85:c9:7b:91:10:c1:38: 58:19:d9:52:c7:50:37:69:d6:e8:76:de:b8:16:be:fa:e3:39: 48:73:6b:a9:e6:76:72:c1:66:8f:d2:6a:e4:1c:de:c8:89:71: ef:15:73:a8:0a:f7:2b:78:05:b8:63:49:c3:86:6a:8b:8f:d7: 68:27:94:27:57:31:94:24:7d:c9:fd:b7:94:07:cf:8e:d6:0c: 30:c5:22:83:f2:0d:a5:11:28:cb:b4:0c:a3:28:31:a4:3e:2d: ed:72:2a:46:60:81:5f:07:82:8e:8f:97:f3:29:b8:f9:53:ba: 59:ba:19:91:9a:3d:10:48:90:13:86:32:18:3a:a1:81:40:8c: 48:39:25:58:64:e9:14:07:ad:f2:58:91:ae:4f:62:ec:9e:b9: 28:a9:07:f7:e9:69:54:1a:a0:00:cf:5b:5c:cd:56:58:25:6c: 5d:c9:6f:a6:3f:1d:85:77:43:e0:62:db:67:90:53:d0:62:77: e4:03:df:c0:b9:ef:cf:c1:19:1f:3f:24:b4:2e:29:d8:d6:3d: 69:db:fd:92:15:6e:7e:90:e0:6d:19:1c:46:35:dd:c2:83:6d: 9b:68:ee:70:a7:50:c4:1e:4a:f8:50:e6:1e:7d:7b:70:63:aa: 40:27:7d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwNjEyMjAxOTIxWhcNMjUwNjE5MjAxOTIxWjAYMRYwFAYD VQQDEw02ODRiMzY0OS1iMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuh6RulTaT17BygU95tBzRz77VFgzSAZ61V//ykwyenednFoe2mg0UgH4vel CRjQOHY1RiUgZAXcKruodrf3jRnJtohVE1R//QCaYHuKtWCI/7Ea3GS67HJi8Rg1 oW6u71/h9PYXsiTyuBo5284s7akgAy7iW8bUtKyHg7iJEvCw4nmOA8jkeyX2Ulhu PYMLAtSKYd1JgPSxypg+tqMlfPXiS+BLzAJaYD2iCJwm5XhHMeQQeuqNz+qMT9k5 j6Vc2zEqxxH053aMurEsXXk5oKCvCUouts9XTtwTbzQrdWtWvgORtJjLBNLLakeC NohbUciecTEUZ4JHbANunZxvwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoX95g4 UNPzyvgjg0mOZBcGuHHzMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0vSOm0pasCslxvYXJe5EQwThYGdlSx1A3adbodt64Fr764zlIc2up 5nZywWaP0mrkHN7IiXHvFXOoCvcreAW4Y0nDhmqLj9doJ5QnVzGUJH3J/beUB8+O 1gwwxSKD8g2lESjLtAyjKDGkPi3tcipGYIFfB4KOj5fzKbj5U7pZuhmRmj0QSJAT hjIYOqGBQIxIOSVYZOkUB63yWJGuT2LsnrkoqQf36WlUGqAAz1tczVZYJWxdyW+m Px2Fd0PgYttnkFPQYnfkA9/Aue/PwRkfPyS0LinY1j1p2/2SFW5+kOBtGRxGNd3C g22baO5wp1DEHkr4UOYefXtwY6pAJ32V -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:34 2025 by rpki-client