$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: 9MI8fHkQv7gf/APKP+aS5SO/9vIlPoEi2L1yS7HaMe0= Subject key identifier: 91:96:04:97:B5:B7:44:F2:2C:57:C9:35:73:0E:F9:15:87:D5:E4:CB Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: 54 Signing time: Sat 17 May 2025 06:46:17 +0000 Manifest this update: Sat 17 May 2025 06:46:17 +0000 Manifest next update: Sat 24 May 2025 06:46:17 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: vcEjJegnz1jY1oTb1Ps/Oc6rJ38LtEE2rPZgcMSWiWE=) 2: E454A324EC5811EF80EABF18C4F9AE02.roa (hash: YHG5dJrgWguVVX0TqVGNfIMAFQq1FZHSymYvBAi+Egs=) 3: C48E5CA6EC5811EFB20A8A18C4F9AE02.roa (hash: vLgyAt4VKcLI4TYUSdqX2oSSFdxzy2+HjS3FIN16Cr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: May 17 06:46:17 2025 GMT Not After : May 24 06:46:17 2025 GMT Subject: CN=682830b9-83d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:dc:62:18:a1:44:90:89:54:87:67:97:dd: 54:3d:91:3b:65:40:b1:82:30:74:35:c3:86:ee:b1: f1:c2:ac:22:15:c2:3a:73:62:96:d7:ac:b0:d8:22: cb:34:05:47:60:28:99:2d:f2:e1:de:ad:ed:b4:88: 09:3b:7d:33:44:1e:70:1e:c7:b8:8e:7c:a5:b6:a3: 2d:5a:14:31:92:f0:12:ec:cd:9c:2e:18:67:35:5e: 8f:85:0d:bf:9d:0c:c5:c8:66:af:63:6b:e6:bd:a0: bb:79:f4:c8:bf:ab:a8:25:b2:a5:be:4e:c4:b1:0d: a1:0e:95:ed:a9:b4:e7:49:d9:2a:40:25:4e:86:26: 21:d1:57:f7:12:75:aa:a7:a5:a7:88:be:a0:f4:35: 0b:0d:35:87:72:93:7e:92:04:eb:25:04:c6:20:5b: 2b:4a:e0:f7:a3:40:5d:50:ef:63:db:57:a0:27:8d: d1:ed:32:a0:26:8f:7a:d7:b3:3f:3a:21:29:0f:23: 51:71:87:a0:a0:f8:1f:ca:88:29:48:ea:aa:b9:73: df:0b:ce:ac:bf:d1:49:b7:b1:05:8e:7c:6a:05:0e: 29:9f:79:85:dc:6f:37:dc:42:0e:f8:91:d6:ff:01: 25:7e:02:6d:85:c2:10:30:e0:6e:b8:00:c4:69:c9: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:96:04:97:B5:B7:44:F2:2C:57:C9:35:73:0E:F9:15:87:D5:E4:CB X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d2:9f:1b:f8:93:91:26:4a:9c:95:8e:fc:dd:e5:b4:a8:b1: a1:2c:f5:94:09:e4:bc:4b:72:de:c9:9a:75:0c:c1:e0:e7:89: 15:33:10:15:13:db:b6:1b:8d:33:fe:15:b9:b0:8d:4f:17:4d: 09:94:cd:42:2f:65:0d:22:9c:fa:db:98:85:18:37:57:18:e4: 73:07:6b:99:02:1e:0b:9a:9f:25:61:5a:ed:d8:96:7d:b9:c6: ae:85:36:5f:c9:35:32:3f:fd:9d:b8:f0:e9:e6:cb:73:bc:a5: b1:97:0c:aa:46:e5:2c:25:a3:39:60:d4:3b:4f:38:1e:d2:e8: af:ad:a7:a1:b8:61:37:3c:53:4f:0a:ff:35:16:d7:e3:d5:ec: cb:3e:f6:d6:d0:3a:c6:f1:ec:99:39:46:26:15:51:32:f4:55: 4c:aa:fc:bd:8d:dc:7d:a5:89:6d:be:11:29:de:40:ad:ea:be: 34:91:ec:4a:f8:f0:f1:e1:a7:89:65:b3:51:26:06:10:1d:fc: 4e:49:68:9a:62:43:41:74:f7:a8:64:79:a7:fd:a1:77:5c:f1: ce:cf:f0:08:9a:12:e8:9f:64:09:36:84:06:be:de:2b:87:66: cd:3f:23:68:86:21:b9:ab:80:01:9e:30:76:fe:e2:f1:41:ae: d0:5c:62:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Rjc1MzExMC8GA1UEBRMoMkQ0OUIzQUU2REExOEI2MzQ2NEEzMTc3QUIzMjEwMTk0 MkU2QTUxQTAeFw0yNTA1MTcwNjQ2MTdaFw0yNTA1MjQwNjQ2MTdaMBgxFjAUBgNV BAMTDTY4MjgzMGI5LTgzZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy3txiGKFEkIlUh2eX3VQ9kTtlQLGCMHQ1w4busfHCrCIVwjpzYpbXrLDYIss0 BUdgKJkt8uHere20iAk7fTNEHnAex7iOfKW2oy1aFDGS8BLszZwuGGc1Xo+FDb+d DMXIZq9ja+a9oLt59Mi/q6glsqW+TsSxDaEOle2ptOdJ2SpAJU6GJiHRV/cSdaqn paeIvqD0NQsNNYdyk36SBOslBMYgWytK4PejQF1Q72PbV6AnjdHtMqAmj3rXsz86 ISkPI1Fxh6Cg+B/KiClI6qq5c98Lzqy/0Um3sQWOfGoFDimfeYXcbzfcQg74kdb/ ASV+Am2FwhAw4G64AMRpySL1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkZYEl7W3 RPIsV8k1cw75FYfV5MswHwYDVR0jBBgwFoAULUmzrm2hi2NGSjF3qzIQGULmpRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNzUzLzc4MDlEQTAyQkMw RDExRUY5QjRBRDY0OUM0RjlBRTAyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFVtenJtMmhpMk5HU2pGM3F6SVFHVUxtcFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NzUzLzc4MDlEQTAyQkMwRDExRUY5QjRBRDY0OUM0RjlBRTAyL0xVbXpybTJoaTJO R1NqRjNxeklRR1VMbXBSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXSnxv4k5EmSpyVjvzd5bSosaEs9ZQJ5LxLct7JmnUMweDniRUzEBUT 27YbjTP+FbmwjU8XTQmUzUIvZQ0inPrbmIUYN1cY5HMHa5kCHguanyVhWu3Yln25 xq6FNl/JNTI//Z248Onmy3O8pbGXDKpG5Swlozlg1DtPOB7S6K+tp6G4YTc8U08K /zUW1+PV7Ms+9tbQOsbx7Jk5RiYVUTL0VUyq/L2N3H2liW2+ESneQK3qvjSR7Er4 8PHhp4lls1EmBhAd/E5JaJpiQ0F096hkeaf9oXdc8c7P8AiaEuifZAk2hAa+3iuH Zs0/I2iGIbmrgAGeMHb+4vFBrtBcYrI= -----END CERTIFICATE-----Generated at Sat May 17 15:35:41 2025 by rpki-client