$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: OjC4de6P2VicL1tVfDJ802gmVLClasGbqlsSMmcqmzc= Subject key identifier: 2A:6C:16:74:CF:A7:9C:D6:8C:64:96:E9:D5:18:44:8B:4F:A3:73:80 Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 0451 Signing time: Thu 12 Jun 2025 23:48:07 +0000 Manifest this update: Thu 12 Jun 2025 23:48:06 +0000 Manifest next update: Thu 19 Jun 2025 23:48:06 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: jdiCJts6fVTWAvgj57Q4QX3Xtez5EoBq7dC4n54u/Cg=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: Jun 12 23:48:06 2025 GMT Not After : Jun 19 23:48:06 2025 GMT Subject: CN=684b6736-18f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:30:c2:2e:65:58:b1:0c:a9:6a:3e:df:10: 74:3a:ed:7d:8d:f4:e0:51:8a:15:b2:f7:c6:b1:c3: d2:c3:4b:07:f6:6e:ee:7a:55:da:a8:da:02:a8:0c: b8:0f:ef:5a:28:ba:87:58:ca:de:8e:6b:87:b4:52: 23:37:97:79:76:5e:8c:83:3d:75:d7:83:be:85:fe: 7c:01:0c:aa:d2:47:1b:b3:c5:a5:57:08:ff:a3:44: 34:37:76:6d:36:24:e3:52:b8:9c:44:bc:de:74:4d: ff:49:a1:9b:ec:e9:60:5c:f7:49:86:10:9f:77:3b: d4:66:72:c2:c5:59:fd:86:89:48:64:bd:27:12:b6: 3f:c2:db:0a:c4:96:08:b3:64:f4:61:83:55:24:11: 32:a7:91:c6:01:2b:d6:9e:70:ca:e9:7c:8b:d9:d5: f5:20:96:a5:60:fe:c6:d1:fb:32:a1:da:70:92:4b: 0c:bf:6a:7a:aa:d9:e5:e5:da:a6:64:a8:55:b5:b3: a0:dd:36:db:25:3c:6a:4f:4a:6c:e9:cd:f2:a9:4b: d1:39:06:af:52:05:bd:d0:c7:d7:e3:8c:8a:75:d7: f3:f0:ca:f7:bd:be:66:70:13:1f:67:f5:5e:ef:6d: 63:bb:6a:30:fa:04:ac:63:13:f9:a0:d2:86:d2:30: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6C:16:74:CF:A7:9C:D6:8C:64:96:E9:D5:18:44:8B:4F:A3:73:80 X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6e:2a:a8:03:27:16:47:f5:38:34:22:00:9e:76:20:65:3f: 79:36:30:2a:d4:19:49:ee:72:ad:42:bd:b8:ae:db:3c:26:15: 21:35:05:af:d7:82:97:f6:9b:c3:ae:f0:d4:4b:64:2d:33:0e: d9:7f:48:8e:45:c5:79:0e:1c:76:96:61:c3:a2:30:09:5d:bc: 4d:17:f9:35:bc:60:6a:2e:64:ab:ce:90:f4:3b:d8:9a:39:9b: a2:c8:99:5c:95:2c:73:41:a1:ec:bf:f3:76:f1:00:47:32:26: 0f:1e:1f:09:89:32:ff:bf:60:9f:03:74:fa:c1:c4:b6:fc:8e: af:d8:06:78:02:fe:9a:25:b2:9b:c2:fd:25:b9:af:bc:46:7e: bb:c2:1c:e9:45:c9:fe:8b:38:65:4a:79:e5:a3:fe:63:70:92: c3:5d:b8:59:34:82:be:3b:d3:a2:d2:08:12:ee:7b:f6:d5:f3: 2d:f2:89:ec:45:0a:8e:51:a4:fd:56:99:4a:04:62:c0:3a:4e: 52:5d:44:63:2d:ee:04:10:aa:e1:7c:f7:85:ed:ba:05:3e:e5: 46:2c:fc:d4:9f:a4:7f:cb:7e:2e:87:44:c5:eb:59:d8:9b:29: b8:c2:a1:8b:1e:d3:58:14:46:5e:48:17:bf:a6:30:80:58:9d: be:ce:a9:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjUwNjEyMjM0ODA2WhcNMjUwNjE5MjM0ODA2WjAYMRYwFAYD VQQDEw02ODRiNjczNi0xOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Igwwi5lWLEMqWo+3xB0Ou19jfTgUYoVsvfGscPSw0sH9m7uelXaqNoCqAy4 D+9aKLqHWMrejmuHtFIjN5d5dl6Mgz1114O+hf58AQyq0kcbs8WlVwj/o0Q0N3Zt NiTjUricRLzedE3/SaGb7OlgXPdJhhCfdzvUZnLCxVn9holIZL0nErY/wtsKxJYI s2T0YYNVJBEyp5HGASvWnnDK6XyL2dX1IJalYP7G0fsyodpwkksMv2p6qtnl5dqm ZKhVtbOg3TbbJTxqT0ps6c3yqUvROQavUgW90MfX44yKddfz8Mr3vb5mcBMfZ/Ve 721ju2ow+gSsYxP5oNKG0jDCGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpsFnTP p5zWjGSW6dUYRItPo3OAMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwbiqoAycWR/U4NCIAnnYgZT95NjAq1BlJ7nKtQr24rts8JhUhNQWv 14KX9pvDrvDUS2QtMw7Zf0iORcV5Dhx2lmHDojAJXbxNF/k1vGBqLmSrzpD0O9ia OZuiyJlclSxzQaHsv/N28QBHMiYPHh8JiTL/v2CfA3T6wcS2/I6v2AZ4Av6aJbKb wv0lua+8Rn67whzpRcn+izhlSnnlo/5jcJLDXbhZNIK+O9Oi0ggS7nv21fMt8ons RQqOUaT9VplKBGLAOk5SXURjLe4EEKrhfPeF7boFPuVGLPzUn6R/y34uh0TF61nY mym4wqGLHtNYFEZeSBe/pjCAWJ2+zqlS -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:18 2025 by rpki-client