$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: qDREDJD4qTMOVeoAxic6atnOorMYt7pLp2W+Z6lI0BY= Subject key identifier: CE:DA:5F:39:8D:F1:71:21:D6:C0:FB:7A:11:1B:BE:4C:EE:0D:57:FA Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 0883 Signing time: Thu 24 Apr 2025 20:29:48 +0000 Manifest this update: Thu 24 Apr 2025 20:29:47 +0000 Manifest next update: Thu 01 May 2025 20:29:47 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: Cf+Ik0uQjRQLoIgJ+E4cQF7eAszr6e4Scx9piWq8dNE=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Apr 24 20:29:47 2025 GMT Not After : May 1 20:29:47 2025 GMT Subject: CN=680a9f3c-4242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:ad:d0:85:f5:a3:ff:10:43:7c:f4:0d:c4: 2f:8d:a6:03:d4:51:4f:5b:2f:7d:b4:4b:ff:7a:88: af:01:34:85:ee:03:34:5d:e1:83:d6:05:c9:de:ba: 3d:cd:6c:ce:6d:42:d6:51:1b:2d:70:40:8c:5a:ba: 7b:c4:71:1b:a1:7a:a2:53:fc:09:f9:bd:be:dc:09: bf:bb:6d:41:6d:5f:40:47:2b:1c:f1:da:e1:08:7e: 07:36:83:fe:32:2f:74:40:81:4f:5c:7d:22:82:da: f9:eb:a8:08:8a:d5:8e:4e:24:39:19:58:50:d2:5f: 70:02:7e:29:c4:81:8b:c6:84:e2:6b:c5:81:be:a7: 9f:84:79:b4:7c:18:b1:53:fd:7c:15:76:17:d7:82: 2f:45:58:18:b7:22:9c:02:8b:0e:58:b5:55:ec:20: 72:e3:85:20:2d:b7:5c:a7:0a:06:85:d1:d1:de:50: 8a:9a:ea:49:e1:25:12:c2:20:4b:5e:af:84:a0:14: ac:af:51:25:92:34:6e:07:72:a1:f8:e6:93:ac:0d: da:6c:61:a6:64:84:05:58:3b:ba:dc:7a:7c:d6:ba: 55:79:0b:ae:82:70:7b:cc:34:fb:3c:7f:4d:81:a5: e1:b3:19:c3:8e:7b:f6:fc:40:82:f8:06:d8:78:f9: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DA:5F:39:8D:F1:71:21:D6:C0:FB:7A:11:1B:BE:4C:EE:0D:57:FA X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:05:62:63:a9:4f:c1:83:4b:f5:05:15:5a:3b:40:8d:02:1a: 10:e4:cd:d1:44:fa:18:81:be:66:cb:2e:02:d1:c8:a5:04:d5: 04:a7:60:d1:99:e1:8a:89:d6:7f:84:78:d5:44:89:03:fe:a9: 86:b4:5a:93:fd:d9:3b:00:69:09:ca:c2:8d:4e:7d:45:85:5f: b3:50:7e:24:79:7a:92:50:7e:66:67:4b:9f:32:13:3f:5d:1d: cf:3b:a0:c6:93:78:d6:0e:32:a7:65:7b:df:65:59:18:ba:b7: f9:97:eb:20:23:d5:9b:ed:3a:c1:fa:af:13:ce:6d:4d:c2:2a: 70:34:7c:8d:76:46:ae:27:16:e0:30:e4:dd:3b:bc:3d:6b:da: 6c:e8:ac:bc:19:ff:3e:12:1b:cc:f3:60:a6:50:a6:d9:e3:b2: f5:86:b5:33:e2:e6:95:4c:dd:38:e7:88:a4:60:19:8a:6e:6e: 5b:35:3b:05:45:19:f4:c3:98:40:7f:cd:ed:08:2e:43:cc:f4: d8:cd:35:0d:58:ba:fb:4e:1a:4b:ff:1c:19:0f:5e:4e:36:05: 85:69:e4:9a:4a:94:c5:23:1a:02:bd:d8:7d:7a:dd:56:19:9a: ed:71:5e:63:c3:3c:9e:39:10:06:14:f0:32:ca:ac:15:59:58: 37:2e:28:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjUwNDI0MjAyOTQ3WhcNMjUwNTAxMjAyOTQ3WjAYMRYwFAYD VQQDEw02ODBhOWYzYy00MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdit0IX1o/8QQ3z0DcQvjaYD1FFPWy99tEv/eoivATSF7gM0XeGD1gXJ3ro9 zWzObULWURstcECMWrp7xHEboXqiU/wJ+b2+3Am/u21BbV9ARysc8drhCH4HNoP+ Mi90QIFPXH0igtr566gIitWOTiQ5GVhQ0l9wAn4pxIGLxoTia8WBvqefhHm0fBix U/18FXYX14IvRVgYtyKcAosOWLVV7CBy44UgLbdcpwoGhdHR3lCKmupJ4SUSwiBL Xq+EoBSsr1ElkjRuB3Kh+OaTrA3abGGmZIQFWDu63Hp81rpVeQuugnB7zDT7PH9N gaXhsxnDjnv2/ECC+AbYePlXLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7aXzmN 8XEh1sD7ehEbvkzuDVf6MB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCBWJjqU/Bg0v1BRVaO0CNAhoQ5M3RRPoYgb5myy4C0cilBNUEp2DR meGKidZ/hHjVRIkD/qmGtFqT/dk7AGkJysKNTn1FhV+zUH4keXqSUH5mZ0ufMhM/ XR3PO6DGk3jWDjKnZXvfZVkYurf5l+sgI9Wb7TrB+q8Tzm1NwipwNHyNdkauJxbg MOTdO7w9a9ps6Ky8Gf8+EhvM82CmUKbZ47L1hrUz4uaVTN0454ikYBmKbm5bNTsF RRn0w5hAf83tCC5DzPTYzTUNWLr7ThpL/xwZD15ONgWFaeSaSpTFIxoCvdh9et1W GZrtcV5jwzyeORAGFPAyyqwVWVg3LihC -----END CERTIFICATE-----Generated at Sat Apr 26 17:14:13 2025 by rpki-client