$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: 9ESaJ+Sh/HiMkTBNAL6qaBznnsrgqQs81Yc/5pz8+C8= Subject key identifier: DA:E9:31:43:BB:27:65:CD:14:17:D8:32:D6:26:AD:19:E3:D6:73:D4 Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 0439 Signing time: Fri 25 Apr 2025 00:04:22 +0000 Manifest this update: Fri 25 Apr 2025 00:04:21 +0000 Manifest next update: Fri 02 May 2025 00:04:21 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: pQhYyhHyuvPP3mDERH+2l5Xm+jnf4nTXKPbo9JBt2j8=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: Apr 25 00:04:21 2025 GMT Not After : May 2 00:04:21 2025 GMT Subject: CN=680ad186-f0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:64:76:7a:5d:ee:ec:09:bf:6a:28:37:ed: e2:0c:5f:ea:12:14:e5:07:5c:d8:0b:6d:4f:d7:cb: 07:64:11:95:ff:4b:37:29:1e:7b:c1:a4:47:f8:10: cd:a4:9e:af:9a:9b:be:58:d3:5b:fb:73:f9:1e:e8: f6:23:c1:d6:f8:f0:f9:f1:4b:ea:18:7a:cb:97:59: a9:d9:de:c7:70:2a:51:93:85:db:59:f1:27:13:03: 64:4b:9a:30:d9:ba:f2:09:24:07:f2:da:85:61:d5: 85:ee:f6:1b:02:fb:12:1f:ee:bb:2d:c3:2b:fa:f4: 64:5d:bf:11:57:95:68:34:80:07:86:86:dd:96:33: 20:77:6c:76:a0:94:07:9f:b2:d2:b6:46:9d:b7:c3: aa:6d:73:50:83:31:ba:8d:ea:05:b9:a3:bf:00:4a: 71:21:96:27:4b:87:b5:68:62:e1:e5:32:8b:62:c2: 1e:e9:87:b3:5c:88:a4:09:20:cb:de:f3:8b:00:af: 9a:6f:d4:63:eb:7f:c5:1d:dd:18:84:0a:b6:bd:00: 6f:28:ed:26:e4:32:60:e9:f9:04:8b:d3:c7:66:0d: a7:0b:2c:04:14:43:87:3c:35:8e:fd:61:e8:37:b0: 18:29:bb:07:eb:1e:dd:72:7d:72:69:b5:ee:88:47: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E9:31:43:BB:27:65:CD:14:17:D8:32:D6:26:AD:19:E3:D6:73:D4 X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0e:da:1b:e7:0b:dc:67:fc:d9:ae:df:4e:76:ce:7b:a6:7d: 1d:55:e5:7e:e0:6d:1a:9a:73:56:f8:1b:f0:03:4e:0a:f2:a6: d0:79:c4:84:51:76:84:0b:c8:23:25:8c:6d:10:27:a4:42:9a: 53:c3:c4:5c:65:54:f5:85:23:9e:19:66:7c:db:bd:1d:4c:16: d4:91:9f:ed:df:d5:35:31:ae:55:e2:c0:02:c5:0d:3a:86:08: 19:5f:4b:72:5c:dd:37:52:46:1b:f3:cd:75:c8:f3:4b:1b:39: af:0f:0f:e4:16:65:ae:4f:77:e8:04:85:67:3d:20:9e:30:62: 69:ce:26:4b:70:c9:46:11:6c:88:5c:6e:ef:56:07:50:9a:4d: af:d0:1c:e7:11:91:51:5d:4e:2e:ec:75:cd:c8:df:83:2c:ac: 3f:96:9c:93:f1:d3:9c:0b:44:0e:96:85:87:e2:62:d3:c8:9e: 13:02:7c:68:1c:b3:43:5e:78:27:2f:60:76:fe:81:00:a0:bb: 4a:d1:89:e7:be:79:3f:40:5b:7d:28:1e:01:e1:e0:bf:a5:da: bd:fb:ad:f9:b3:03:13:38:1b:bd:29:13:fe:57:18:fa:9c:df: 0c:d1:b5:e4:5e:ce:74:b7:0f:09:12:cc:16:f9:47:6c:01:5c: df:86:67:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjUwNDI1MDAwNDIxWhcNMjUwNTAyMDAwNDIxWjAYMRYwFAYD VQQDEw02ODBhZDE4Ni1mMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyw5kdnpd7uwJv2ooN+3iDF/qEhTlB1zYC21P18sHZBGV/0s3KR57waRH+BDN pJ6vmpu+WNNb+3P5Huj2I8HW+PD58UvqGHrLl1mp2d7HcCpRk4XbWfEnEwNkS5ow 2bryCSQH8tqFYdWF7vYbAvsSH+67LcMr+vRkXb8RV5VoNIAHhobdljMgd2x2oJQH n7LStkadt8OqbXNQgzG6jeoFuaO/AEpxIZYnS4e1aGLh5TKLYsIe6YezXIikCSDL 3vOLAK+ab9Rj63/FHd0YhAq2vQBvKO0m5DJg6fkEi9PHZg2nCywEFEOHPDWO/WHo N7AYKbsH6x7dcn1yabXuiEdsgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrpMUO7 J2XNFBfYMtYmrRnj1nPUMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmDtob5wvcZ/zZrt9Ods57pn0dVeV+4G0amnNW+BvwA04K8qbQecSE UXaEC8gjJYxtECekQppTw8RcZVT1hSOeGWZ8270dTBbUkZ/t39U1Ma5V4sACxQ06 hggZX0tyXN03UkYb8811yPNLGzmvDw/kFmWuT3foBIVnPSCeMGJpziZLcMlGEWyI XG7vVgdQmk2v0BznEZFRXU4u7HXNyN+DLKw/lpyT8dOcC0QOloWH4mLTyJ4TAnxo HLNDXngnL2B2/oEAoLtK0Ynnvnk/QFt9KB4B4eC/pdq9+635swMTOBu9KRP+Vxj6 nN8M0bXkXs50tw8JEswW+UdsAVzfhmdJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:47 2025 by rpki-client