$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: z75cnD0LZcDU4b72jdKfT7iS6yNBvNWoCUu4PKA/O/M= Subject key identifier: 9C:04:1C:CC:54:50:E5:CF:7E:66:03:C6:04:5D:BB:C1:DE:C6:E0:D2 Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: 6D Signing time: Thu 03 Jul 2025 07:14:06 +0000 Manifest this update: Thu 03 Jul 2025 07:14:06 +0000 Manifest next update: Thu 10 Jul 2025 07:14:06 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: TBPuNvgDAIOe6fmUpqkB+bshqES+udo2ryi4ROIV8JU=) 2: C48E5CA6EC5811EFB20A8A18C4F9AE02.roa (hash: 93C48aUyOvrcw03A3Tv7n2rRAvJ48I+je6JuY6BDvN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Jul 3 07:14:06 2025 GMT Not After : Jul 10 07:14:06 2025 GMT Subject: CN=68662dbe-3b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:ec:75:07:fe:4b:73:c4:ae:25:33:bd:9f: a6:e1:0e:be:e9:68:63:ff:5f:51:db:a4:01:a7:e6: 46:ca:fd:f5:5c:06:1a:4c:49:a5:c9:90:a5:f7:02: 54:dd:78:67:9e:ee:3a:2d:f5:e8:7e:8e:8b:b8:79: 8e:f0:ce:ce:a6:54:b6:88:b5:64:6f:f6:01:b0:cb: 1f:aa:a2:35:00:04:5d:b8:99:a4:12:21:ad:6e:cb: 1b:d9:00:3a:26:62:82:60:c4:bb:ae:3b:c0:06:41: db:d0:08:d7:15:fd:87:33:5f:28:b0:05:17:f7:77: d6:c1:34:f4:e7:66:15:7a:1e:65:87:a1:5b:1c:49: 9b:2b:df:a2:6e:cc:ce:b1:15:68:cd:08:42:51:b8: f4:cd:1f:7a:1c:b1:0c:34:4f:78:00:5d:51:5d:17: 66:6b:7b:60:e0:fb:3d:09:67:c2:71:62:64:23:de: 72:ae:e7:de:21:01:68:2b:f4:c7:99:3b:7a:32:3d: 14:78:ae:c9:99:83:17:ce:24:90:27:75:29:28:5d: 72:ba:53:ad:08:ad:71:a1:b0:1d:df:a3:b5:a0:cb: 5b:5b:d3:fe:e1:62:7b:74:45:ea:ff:7b:db:f3:8b: 16:e5:84:e8:8b:0c:6f:c4:32:4b:29:7b:13:51:6f: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:04:1C:CC:54:50:E5:CF:7E:66:03:C6:04:5D:BB:C1:DE:C6:E0:D2 X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:af:5d:c5:22:8e:02:19:03:4a:12:6f:89:be:08:77:9e:e8: 27:1c:e2:3c:77:55:e5:0a:cf:b1:47:00:11:a4:56:85:5f:8d: 05:ac:cb:b6:fb:e2:c9:50:2e:3b:f3:75:af:9d:d2:15:8f:c3: ba:18:45:7c:e6:0a:bf:7f:6f:af:bb:46:45:8e:7e:30:17:5d: 92:7b:43:87:a5:40:79:95:f0:2d:7b:7e:6b:93:3a:11:2f:24: ff:54:0c:6c:b3:25:51:8a:b7:39:20:2c:93:72:36:c9:d8:91: 0d:a4:2b:08:4c:fe:fc:cb:5d:1a:af:ce:c0:f7:f2:d5:2e:d2: 63:6b:7c:53:f1:da:ed:09:98:e7:0f:24:b1:36:49:f1:55:83: 5e:b1:1d:ac:e9:87:39:76:08:f5:a3:bd:3f:82:ce:cb:d0:ce: ea:9e:26:5e:af:fe:4b:99:6d:49:c8:65:59:53:ce:62:b1:01: 34:f7:8b:cc:27:38:25:c2:48:05:7c:bf:20:fd:9e:4e:a5:fe: 98:35:b6:b7:41:a2:78:f3:32:46:dc:be:a6:2d:81:29:c0:74: cf:3e:e0:8e:d1:6b:43:f3:b3:7c:01:4b:e9:13:1e:a0:da:01: 4b:df:54:f6:9e:5c:e4:6c:46:54:37:99:57:bc:98:85:1e:88: fb:bc:f0:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Rjc1MzExMC8GA1UEBRMoMkQ0OUIzQUU2REExOEI2MzQ2NEEzMTc3QUIzMjEwMTk0 MkU2QTUxQTAeFw0yNTA3MDMwNzE0MDZaFw0yNTA3MTAwNzE0MDZaMBgxFjAUBgNV BAMTDTY4NjYyZGJlLTNiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhq+x1B/5Lc8SuJTO9n6bhDr7paGP/X1HbpAGn5kbK/fVcBhpMSaXJkKX3AlTd eGee7jot9eh+jou4eY7wzs6mVLaItWRv9gGwyx+qojUABF24maQSIa1uyxvZADom YoJgxLuuO8AGQdvQCNcV/YczXyiwBRf3d9bBNPTnZhV6HmWHoVscSZsr36JuzM6x FWjNCEJRuPTNH3ocsQw0T3gAXVFdF2Zre2Dg+z0JZ8JxYmQj3nKu594hAWgr9MeZ O3oyPRR4rsmZgxfOJJAndSkoXXK6U60IrXGhsB3fo7Wgy1tb0/7hYnt0Rer/e9vz ixblhOiLDG/EMkspexNRbxKTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnAQczFRQ 5c9+ZgPGBF27wd7G4NIwHwYDVR0jBBgwFoAULUmzrm2hi2NGSjF3qzIQGULmpRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNzUzLzc4MDlEQTAyQkMw RDExRUY5QjRBRDY0OUM0RjlBRTAyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFVtenJtMmhpMk5HU2pGM3F6SVFHVUxtcFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NzUzLzc4MDlEQTAyQkMwRDExRUY5QjRBRDY0OUM0RjlBRTAyL0xVbXpybTJoaTJO R1NqRjNxeklRR1VMbXBSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2vXcUijgIZA0oSb4m+CHee6Ccc4jx3VeUKz7FHABGkVoVfjQWsy7b7 4slQLjvzda+d0hWPw7oYRXzmCr9/b6+7RkWOfjAXXZJ7Q4elQHmV8C17fmuTOhEv JP9UDGyzJVGKtzkgLJNyNsnYkQ2kKwhM/vzLXRqvzsD38tUu0mNrfFPx2u0JmOcP JLE2SfFVg16xHazphzl2CPWjvT+CzsvQzuqeJl6v/kuZbUnIZVlTzmKxATT3i8wn OCXCSAV8vyD9nk6l/pg1trdBonjzMkbcvqYtgSnAdM8+4I7Ra0Pzs3wBS+kTHqDa AUvfVPaeXORsRlQ3mVe8mIUeiPu88Mg= -----END CERTIFICATE-----Generated at Fri Jul 4 04:33:52 2025 by rpki-client