$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft File: myLG633MM4A245rlSn0qAlkDsRM.mft (raw, json) Hash identifier: 3IqvHa+9wEUNCRorlgLbvNoQPRRDj3HIas603Tk20aA= Subject key identifier: 99:C4:3A:36:AE:C6:3B:5F:44:B0:85:D0:6B:FA:AA:14:3D:92:8F:EF Authority key identifier: 9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13 Certificate issuer: /CN=A91559AC/serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft Manifest number: 0A8B Signing time: Sat 10 May 2025 19:23:31 +0000 Manifest this update: Sat 10 May 2025 19:23:30 +0000 Manifest next update: Sat 17 May 2025 19:23:30 +0000 Files and hashes: 1: myLG633MM4A245rlSn0qAlkDsRM.crl (hash: UDiN98zYNog8VWZB/sqmooWL01HTeWOGiXNQIAkSFNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91559AC, serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113 Validity Not Before: May 10 19:23:30 2025 GMT Not After : May 17 19:23:30 2025 GMT Subject: CN=681fa7b3-a5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:30:a5:5a:69:05:44:0e:a0:75:29:88:3d: 39:ee:6d:ae:57:c0:00:04:f9:77:25:94:26:5f:97: f4:c5:97:d4:38:4f:b3:9a:dd:29:fd:aa:7e:8d:7c: ac:df:36:f8:2a:f4:c5:c9:3a:ae:52:26:8f:8b:90: 6e:33:c3:54:aa:e0:ab:67:34:dd:e8:55:ad:58:25: 51:65:bd:52:47:d4:08:e6:5a:bb:a2:67:e0:ca:5c: 67:02:9c:96:57:be:39:21:2c:ea:bc:56:0e:12:78: 18:23:e5:70:f9:e0:ea:97:e4:24:3c:88:f6:41:23: 22:2d:6a:75:22:1e:2c:ef:80:2c:ba:6e:82:c4:6a: 8d:14:62:0e:81:64:aa:98:66:93:27:09:32:7f:07: 31:7f:95:35:30:cc:7f:49:27:2b:a6:40:d7:13:6d: fb:01:98:7b:90:61:80:c2:19:3e:42:3f:0a:34:71: c1:54:99:d9:b8:b2:81:dc:90:11:b9:6f:eb:81:15: 43:7f:95:3b:97:c8:a2:1c:3d:45:52:88:00:d0:61: 3b:63:b1:57:56:3b:13:ee:a2:b4:9c:e8:0f:7d:58: 4a:63:c6:70:e0:d2:77:bf:34:d9:39:47:80:6a:48: 7d:c6:2d:ad:64:7a:bf:1a:7b:e3:b1:c2:22:c9:64: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:3A:36:AE:C6:3B:5F:44:B0:85:D0:6B:FA:AA:14:3D:92:8F:EF X509v3 Authority Key Identifier: keyid:9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0e:45:ce:d2:72:c2:05:5b:5a:cc:b6:ce:45:c6:ac:8a:23: 64:57:94:57:00:e2:27:79:cf:12:cd:2d:a5:6b:d4:ca:ce:54: 6c:9b:51:ca:db:7a:7c:8e:87:7b:3c:3b:85:46:3c:8c:d4:cd: 0a:eb:68:f8:46:ce:b9:be:64:2c:b5:81:d0:76:0d:82:60:5a: a6:01:49:c3:b6:1f:c4:1c:e3:f6:83:83:07:66:45:6f:7d:db: 16:ec:aa:c0:b7:85:bb:72:fe:f5:eb:46:14:d8:ec:76:ee:2e: cd:ee:33:8f:87:0a:dc:e7:e8:05:4f:dc:95:2d:45:6a:58:cf: dc:bf:1e:54:7c:e3:50:0f:dc:5e:86:30:46:d0:c9:29:6d:27: 62:fc:d4:f3:a2:01:49:17:22:6e:e8:0b:26:be:63:9a:2c:b9: 1e:e7:fa:1a:21:ca:fe:62:a2:d8:1d:cb:36:0d:8a:ae:1e:88: 0f:fc:41:78:23:6e:78:1c:8a:a9:0b:73:62:bf:ad:20:5d:70: ca:6c:dd:c3:00:29:86:e6:a1:eb:b4:69:c8:53:8e:65:4e:c8: 84:0f:d2:3c:8a:23:f4:86:0b:11:7b:ec:3a:58:3e:b7:b4:7f: 4f:da:92:0f:62:07:b4:b3:d9:90:5f:8b:ad:08:eb:17:25:d0: 76:e3:e4:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTlBQzExMC8GA1UEBRMoOUIyMkM2RUI3RENDMzM4MDM2RTM5QUU1NEE3RDJBMDI1 OTAzQjExMzAeFw0yNTA1MTAxOTIzMzBaFw0yNTA1MTcxOTIzMzBaMBgxFjAUBgNV BAMTDTY4MWZhN2IzLWE1YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/QzClWmkFRA6gdSmIPTnuba5XwAAE+XcllCZfl/TFl9Q4T7Oa3Sn9qn6NfKzf Nvgq9MXJOq5SJo+LkG4zw1Sq4KtnNN3oVa1YJVFlvVJH1AjmWruiZ+DKXGcCnJZX vjkhLOq8Vg4SeBgj5XD54OqX5CQ8iPZBIyItanUiHizvgCy6boLEao0UYg6BZKqY ZpMnCTJ/BzF/lTUwzH9JJyumQNcTbfsBmHuQYYDCGT5CPwo0ccFUmdm4soHckBG5 b+uBFUN/lTuXyKIcPUVSiADQYTtjsVdWOxPuorSc6A99WEpjxnDg0ne/NNk5R4Bq SH3GLa1ker8ae+OxwiLJZPmzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmcQ6Nq7G O19EsIXQa/qqFD2Sj+8wHwYDVR0jBBgwFoAUmyLG633MM4A245rlSn0qAlkDsRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1OUFDL0MwNjEzNTE2NUY4 RDExRUFCNTAwQkQ2NEM0RjlBRTAyL215TEc2MzNNTTRBMjQ1cmxTbjBxQWxrRHNS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXlMRzYzM01NNEEyNDVybFNuMHFBbGtEc1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 OUFDL0MwNjEzNTE2NUY4RDExRUFCNTAwQkQ2NEM0RjlBRTAyL215TEc2MzNNTTRB MjQ1cmxTbjBxQWxrRHNSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAEORc7ScsIFW1rMts5FxqyKI2RXlFcA4id5zxLNLaVr1MrOVGybUcrb enyOh3s8O4VGPIzUzQrraPhGzrm+ZCy1gdB2DYJgWqYBScO2H8Qc4/aDgwdmRW99 2xbsqsC3hbty/vXrRhTY7HbuLs3uM4+HCtzn6AVP3JUtRWpYz9y/HlR841AP3F6G MEbQySltJ2L81POiAUkXIm7oCya+Y5osuR7n+hohyv5iotgdyzYNiq4eiA/8QXgj bngciqkLc2K/rSBdcMps3cMAKYbmoeu0achTjmVOyIQP0jyKI/SGCxF77DpYPre0 f0/akg9iB7Sz2ZBfi60I6xcl0Hbj5FY= -----END CERTIFICATE-----Generated at Sun May 11 15:17:17 2025 by rpki-client