$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json) Hash identifier: RI/4WpEGDsmzYqSiD1TJDpFL6VSyqMiu4jzpf/0IkA4= Subject key identifier: B9:26:9E:DD:BB:90:DD:44:D2:49:16:DC:30:BA:71:B5:BB:63:CD:B7 Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft Manifest number: 0E Signing time: Sat 21 Jun 2025 07:06:28 +0000 Manifest this update: Sat 21 Jun 2025 07:06:27 +0000 Manifest next update: Sat 28 Jun 2025 07:06:27 +0000 Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: 8M2pIpH931Q4lAwf2S3volhu+b/4rqYnEy6TxtCEvCE=) 2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: qhyVTwwEqxyTdaMk7ejochFJVyO6XKIlCbt0eSHtSs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 07:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Validity Not Before: Jun 21 07:06:27 2025 GMT Not After : Jun 28 07:06:27 2025 GMT Subject: CN=685659f3-b4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:0f:6b:81:51:18:6c:62:15:a4:0f:36:b1: fa:c2:a3:a3:3c:29:4c:bf:48:4e:be:67:c5:43:a4: 29:9d:fa:94:e3:7e:dc:12:77:ef:7e:05:a9:67:29: 3b:ec:22:75:44:b0:d4:b9:b0:59:05:4f:2d:cd:2c: d2:ae:f9:62:77:19:5d:93:c5:55:b4:a2:ea:34:56: 60:c8:db:af:04:51:77:09:da:30:34:ac:77:fd:42: ab:f3:33:25:69:d0:9c:b5:bb:39:4b:47:0a:ae:fc: de:9d:77:1b:ee:e7:59:54:eb:ff:de:51:e5:6a:d8: 13:2c:92:fe:89:63:5c:d6:7c:c0:df:e4:f5:4c:09: ef:14:c9:2f:44:85:00:c1:16:8f:f9:13:dd:c6:d7: c2:aa:66:f9:43:68:a4:ea:07:41:13:11:08:5d:8a: ab:1a:21:e8:58:df:d9:24:8d:17:5e:e1:78:1a:a4: 0a:7a:19:4b:ae:94:7b:20:1d:d8:f9:4c:f0:a0:4a: 14:79:7a:0e:da:7a:f7:06:39:cd:a9:36:bd:38:e4: 7d:d7:b3:e7:c1:7d:9c:00:24:e2:3d:f3:7a:75:55: 82:bf:f6:42:09:3e:8b:2a:30:33:88:2c:e9:a6:f0: 1b:1e:14:30:31:3b:7d:da:27:8e:3c:aa:0a:4f:b0: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:26:9E:DD:BB:90:DD:44:D2:49:16:DC:30:BA:71:B5:BB:63:CD:B7 X509v3 Authority Key Identifier: keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:19:34:05:dc:af:dd:ac:2e:30:66:46:c0:1d:58:5e:d0:10: 3d:c2:ee:84:ee:36:7c:13:59:16:6a:a8:b3:0d:81:72:e2:67: 5d:c8:b0:c2:26:0c:c9:47:59:2d:3d:93:35:8d:04:01:dc:91: fe:02:47:27:26:e8:68:8a:d3:75:55:51:9b:a1:87:77:aa:0a: 0c:c9:90:1d:df:6f:d5:f7:bc:5c:ab:b7:6c:cb:ed:2c:c6:97: d6:31:16:fa:24:09:7a:7d:af:2c:47:47:b4:6d:ae:5c:c8:32: 92:70:67:46:ed:cc:cf:f9:74:db:bf:c9:55:68:39:79:d5:39: 3f:ac:18:7d:35:8d:33:c7:f1:a5:d0:e3:22:f6:09:34:cd:28: 87:c6:c5:91:da:1a:0b:7e:8c:e7:7e:02:24:db:08:0b:19:aa: e9:be:b0:31:67:5a:38:29:2e:dd:fb:53:81:e4:e5:bf:11:2b: 07:b8:f5:cb:f8:a5:2f:17:43:11:5b:33:92:51:d0:b2:63:f7: 4a:fe:e2:5c:70:14:67:f6:99:04:48:d2:13:5b:71:9d:d4:26: b0:f6:6c:ac:3b:a1:97:99:b5:99:72:78:db:9f:99:0f:17:ed: 27:ee:15:c8:fa:81:1f:f2:80:93:8a:b3:19:30:4a:e1:cf:5a: 1e:cb:bf:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMkQzRTNGQkJDN0MyQjEyQ0Q1MzRDOEI5RUQzNzg2RkI2 QUE1NTUwNjAeFw0yNTA2MjEwNzA2MjdaFw0yNTA2MjgwNzA2MjdaMBgxFjAUBgNV BAMTDTY4NTY1OWYzLWI0YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEhA9rgVEYbGIVpA82sfrCo6M8KUy/SE6+Z8VDpCmd+pTjftwSd+9+BalnKTvs InVEsNS5sFkFTy3NLNKu+WJ3GV2TxVW0ouo0VmDI268EUXcJ2jA0rHf9QqvzMyVp 0Jy1uzlLRwqu/N6ddxvu51lU6//eUeVq2BMskv6JY1zWfMDf5PVMCe8UyS9EhQDB Fo/5E93G18KqZvlDaKTqB0ETEQhdiqsaIehY39kkjRde4XgapAp6GUuulHsgHdj5 TPCgShR5eg7aevcGOc2pNr045H3Xs+fBfZwAJOI983p1VYK/9kIJPosqMDOILOmm 8BseFDAxO33aJ448qgpPsA67AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuSae3buQ 3UTSSRbcMLpxtbtjzbcwHwYDVR0jBBgwFoAULT4/u8fCsSzVNMi57TeG+2qlVQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzZBMkNFODgyNDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6Vk5NaTU3VGVHLTJxbFZR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFQ0X3U4ZkNzU3pWTk1pNTdUZUctMnFsVlFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzZBMkNFODgyNDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6 Vk5NaTU3VGVHLTJxbFZRWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ8ZNAXcr92sLjBmRsAdWF7QED3C7oTuNnwTWRZqqLMNgXLiZ13IsMIm DMlHWS09kzWNBAHckf4CRycm6GiK03VVUZuhh3eqCgzJkB3fb9X3vFyrt2zL7SzG l9YxFvokCXp9ryxHR7RtrlzIMpJwZ0btzM/5dNu/yVVoOXnVOT+sGH01jTPH8aXQ 4yL2CTTNKIfGxZHaGgt+jOd+AiTbCAsZqum+sDFnWjgpLt37U4Hk5b8RKwe49cv4 pS8XQxFbM5JR0LJj90r+4lxwFGf2mQRI0hNbcZ3UJrD2bKw7oZeZtZlyeNufmQ8X 7SfuFcj6gR/ygJOKsxkwSuHPWh7Lv3E= -----END CERTIFICATE-----Generated at Sun Jun 22 17:24:41 2025 by rpki-client