$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: CeP4eS/rBHOEKSyGar8JgVQxyMVbyjh9D7JwH8vp2ek= Subject key identifier: A5:60:D0:C9:E3:FB:1C:60:4A:A6:8D:9E:7B:73:C9:23:40:11:4C:7A Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0B76 Signing time: Thu 24 Apr 2025 18:58:58 +0000 Manifest this update: Thu 24 Apr 2025 18:58:57 +0000 Manifest next update: Thu 01 May 2025 18:58:57 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: Bq03mm8BFbYBoBRGJngBq13QrWljgwZ5RFLZSHJvm1Q=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Apr 24 18:58:57 2025 GMT Not After : May 1 18:58:57 2025 GMT Subject: CN=680a89f2-a078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:54:19:a8:f0:0b:5b:3b:5c:77:11:ca:54: fc:9b:19:7e:ef:be:3e:fd:91:ba:75:f8:7a:a8:d5: b6:25:1d:a8:2c:a2:2e:9c:49:74:3f:08:63:7f:78: 4f:a5:7f:7e:0e:64:12:33:94:d0:0f:d3:b1:25:56: 79:74:0d:23:ad:fe:89:df:61:cf:40:75:35:7a:92: 19:cc:55:2a:f4:8b:a8:2e:1b:38:ca:94:fc:95:ff: 94:aa:d3:d1:9e:e1:fe:b9:5e:58:13:5e:9d:64:76: 95:e4:c2:2d:80:8b:e7:d2:f2:47:ae:6e:9f:60:b3: f7:b9:39:cb:a5:af:0f:32:f8:38:46:34:b0:2c:7a: b1:8b:2e:50:92:2a:31:9d:7a:34:0d:77:32:07:9c: 27:90:70:54:cf:7e:02:cb:80:f4:f1:17:c6:90:38: b2:04:cd:9b:c8:fc:5d:a9:34:c1:9a:4c:83:5c:5c: 26:9d:e8:dc:20:1f:90:a1:04:64:2b:9e:b6:51:63: 1a:97:63:7b:b0:d1:1b:eb:73:ee:9b:33:b4:5a:bf: 05:56:4a:fd:79:a1:01:15:86:df:01:00:4d:d8:cb: 80:0b:d7:29:c7:9d:38:07:ae:4a:1d:20:56:83:2e: a8:b1:a3:e8:d4:c6:8f:5f:41:c3:cb:17:b5:f1:67: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:60:D0:C9:E3:FB:1C:60:4A:A6:8D:9E:7B:73:C9:23:40:11:4C:7A X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:6d:07:f9:3d:8e:04:67:5b:fa:e8:3d:2e:d4:54:85:66: 9a:86:18:67:8e:93:e0:3b:b6:f9:d7:d5:c5:35:64:92:7f:1a: 99:f4:7a:98:23:08:97:fe:15:74:bb:55:91:0c:08:90:36:23: 11:0e:2d:31:ef:6d:89:e9:fd:e1:95:e0:8b:10:49:f3:6a:70: aa:12:02:9e:20:85:83:3f:3d:0d:57:ed:29:f3:fd:b4:de:e5: d5:b7:ce:e6:9c:a2:d9:8e:7b:53:d3:eb:94:41:81:1e:e8:1e: e2:f1:0f:96:56:75:9f:57:f4:0c:58:42:9b:78:44:17:fd:32: ec:20:43:ff:7d:ce:ff:35:f8:83:72:33:5c:33:4b:23:1e:6f: c9:07:9b:21:38:ad:71:72:8a:9e:b5:be:22:d2:46:12:88:4f: 26:84:a8:b5:73:91:3b:ea:c1:f1:21:a6:6f:bd:cf:fe:3b:98: 3a:a1:5c:ba:5e:b4:f6:3e:86:e2:a0:cc:e4:2f:60:85:81:01: bf:43:06:4d:e4:42:6c:d8:4b:36:50:8b:ae:84:92:0d:f1:04: 73:e4:8e:97:b8:e0:78:9c:06:0d:2b:0b:34:61:2f:02:ec:12: bf:5b:9a:0b:7a:d3:f3:a5:83:ed:cf:ca:d8:ee:0e:c2:a3:cd: 6d:1e:2b:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUwNDI0MTg1ODU3WhcNMjUwNTAxMTg1ODU3WjAYMRYwFAYD VQQDEw02ODBhODlmMi1hMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01RUGajwC1s7XHcRylT8mxl+774+/ZG6dfh6qNW2JR2oLKIunEl0Pwhjf3hP pX9+DmQSM5TQD9OxJVZ5dA0jrf6J32HPQHU1epIZzFUq9IuoLhs4ypT8lf+UqtPR nuH+uV5YE16dZHaV5MItgIvn0vJHrm6fYLP3uTnLpa8PMvg4RjSwLHqxiy5Qkiox nXo0DXcyB5wnkHBUz34Cy4D08RfGkDiyBM2byPxdqTTBmkyDXFwmnejcIB+QoQRk K562UWMal2N7sNEb63PumzO0Wr8FVkr9eaEBFYbfAQBN2MuAC9cpx504B65KHSBW gy6osaPo1MaPX0HDyxe18Wev6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVg0Mnj +xxgSqaNnntzySNAEUx6MB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1KG0H+T2OBGdb+ug9LtRUhWaahhhnjpPgO7b519XFNWSSfxqZ9HqY IwiX/hV0u1WRDAiQNiMRDi0x722J6f3hleCLEEnzanCqEgKeIIWDPz0NV+0p8/20 3uXVt87mnKLZjntT0+uUQYEe6B7i8Q+WVnWfV/QMWEKbeEQX/TLsIEP/fc7/NfiD cjNcM0sjHm/JB5shOK1xcoqetb4i0kYSiE8mhKi1c5E76sHxIaZvvc/+O5g6oVy6 XrT2PobioMzkL2CFgQG/QwZN5EJs2Es2UIuuhJIN8QRz5I6XuOB4nAYNKws0YS8C 7BK/W5oLetPzpYPtz8rY7g7Co81tHitv -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:33 2025 by rpki-client