$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: 5Ih70mbvRNw8RJXwAFJZpBHcPAHpNQQ5wV79NN9CJlY= Subject key identifier: 2A:67:DB:AF:EA:8F:D3:7E:02:DB:84:8A:A6:6C:34:48:93:69:27:C9 Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 0151 Signing time: Tue 01 Jul 2025 04:40:20 +0000 Manifest this update: Tue 01 Jul 2025 04:40:20 +0000 Manifest next update: Tue 08 Jul 2025 04:40:20 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: h2GJMUgf3gugMJeaatjEuZptxWCZAgHptwDByL6O7Bo=) 2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: 7mVuQ3E5O7SHzP2lHVSGMO1XS8RjhP+KUyO8u78EdqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: Jul 1 04:40:20 2025 GMT Not After : Jul 8 04:40:20 2025 GMT Subject: CN=686366b4-01a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:7b:cd:fa:79:b9:ad:df:3d:70:82:ac:d1: b7:5d:8e:13:97:cf:f5:cd:56:51:1e:e3:21:27:63: 07:6f:44:41:c2:76:86:64:da:99:48:b6:39:25:73: e9:5f:45:03:b7:bc:d8:71:99:c8:b2:9d:a6:c5:6c: 82:1b:b5:73:e1:04:28:58:bf:24:4d:c1:dc:87:bb: 0e:17:11:46:11:4c:dd:d4:89:11:23:d7:cf:8d:2f: fb:17:d1:31:5a:90:86:dc:f0:12:af:d3:53:fd:cf: 51:d3:0e:82:0b:79:b2:79:41:76:d2:c3:68:ad:91: f1:47:c4:61:84:99:33:9d:18:23:2a:3a:dd:ae:b1: d8:29:b0:b5:cb:2c:2c:d1:02:8f:89:ef:ac:12:f6: fb:f1:3d:a4:ea:56:73:28:13:9c:1f:01:5d:a1:07: 3c:97:b3:ea:42:52:6d:f8:ab:3e:a8:df:d8:79:a9: 6f:84:c0:cc:d4:76:ab:fe:81:47:3c:a8:ef:3b:31: 2c:24:23:11:ac:46:d5:45:db:b5:ef:3d:97:d1:1c: 60:ed:a6:fc:2c:00:16:31:80:50:17:18:fa:14:c9: 67:73:c3:fa:fa:4c:df:90:81:c1:3c:37:41:f0:e4: 31:e6:44:30:ff:c1:6d:a9:ee:7c:63:d3:3b:02:d9: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:DB:AF:EA:8F:D3:7E:02:DB:84:8A:A6:6C:34:48:93:69:27:C9 X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:21:de:ee:44:e4:79:07:7e:84:43:69:e3:8d:7b:12:71: 32:67:fe:05:7c:6a:55:02:15:d1:45:79:8a:84:91:d9:af:c5: 1e:2f:b8:6e:82:da:7f:63:16:41:84:f3:bf:f0:81:e2:39:27: 95:2d:fc:9f:4f:f6:66:92:f0:04:cf:09:e0:22:52:ee:aa:6f: 63:cc:97:a6:c5:d2:cd:3b:e8:0d:bc:f3:cd:55:22:76:fd:36: 41:60:d0:05:65:84:90:de:11:1e:ee:17:01:85:e0:59:99:83: 1a:1d:3b:a8:11:69:c8:14:ec:40:db:09:a4:4f:7c:25:68:c5: 7c:d7:6d:88:25:48:81:db:b1:6f:24:57:d1:04:25:18:24:2d: 74:43:5c:f5:9c:79:0a:43:52:85:82:bf:40:f4:14:a3:4a:4c: c0:35:6c:cc:37:94:9b:47:65:c9:f4:f1:8e:58:b8:62:02:cc: 4b:b9:b2:33:f1:a2:a6:3b:f0:01:fe:99:9e:31:c6:7b:ad:bc: 9d:d8:61:63:68:98:cd:b0:52:9b:5b:24:b3:a0:e4:f4:a3:5f: e4:ff:43:dd:05:10:eb:ba:fb:03:15:5c:dc:21:bb:08:c3:d7: 02:61:e8:5f:8c:97:8b:90:da:e7:9d:10:37:c4:fc:fd:d8:ac: b1:5b:bb:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx NkVENjI0OUEwHhcNMjUwNzAxMDQ0MDIwWhcNMjUwNzA4MDQ0MDIwWjAYMRYwFAYD VQQDEw02ODYzNjZiNC0wMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0N7zfp5ua3fPXCCrNG3XY4Tl8/1zVZRHuMhJ2MHb0RBwnaGZNqZSLY5JXPp X0UDt7zYcZnIsp2mxWyCG7Vz4QQoWL8kTcHch7sOFxFGEUzd1IkRI9fPjS/7F9Ex WpCG3PASr9NT/c9R0w6CC3myeUF20sNorZHxR8RhhJkznRgjKjrdrrHYKbC1yyws 0QKPie+sEvb78T2k6lZzKBOcHwFdoQc8l7PqQlJt+Ks+qN/YealvhMDM1Har/oFH PKjvOzEsJCMRrEbVRdu17z2X0Rxg7ab8LAAWMYBQFxj6FMlnc8P6+kzfkIHBPDdB 8OQx5kQw/8Ftqe58Y9M7Atk2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpn26/q j9N+AtuEiqZsNEiTaSfJMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3 QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42 ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMOiHe7kTkeQd+hENp4417EnEyZ/4FfGpVAhXRRXmKhJHZr8UeL7hu gtp/YxZBhPO/8IHiOSeVLfyfT/ZmkvAEzwngIlLuqm9jzJemxdLNO+gNvPPNVSJ2 /TZBYNAFZYSQ3hEe7hcBheBZmYMaHTuoEWnIFOxA2wmkT3wlaMV8122IJUiB27Fv JFfRBCUYJC10Q1z1nHkKQ1KFgr9A9BSjSkzANWzMN5SbR2XJ9PGOWLhiAsxLubIz 8aKmO/AB/pmeMcZ7rbyd2GFjaJjNsFKbWySzoOT0o1/k/0PdBRDruvsDFVzcIbsI w9cCYehfjJeLkNrnnRA3xPz92KyxW7vi -----END CERTIFICATE-----Generated at Wed Jul 2 16:05:42 2025 by rpki-client