$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: Mj8TNuo1qoy/8EKTH9S+JoAyp9YhKj49i2fc1QaEc5Q= Subject key identifier: 43:E3:F5:91:6E:AB:FF:AB:52:E4:8D:C7:0E:32:8C:32:1B:9A:4F:0F Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 035A Signing time: Sat 23 Aug 2025 01:14:43 +0000 Manifest this update: Sat 23 Aug 2025 01:14:43 +0000 Manifest next update: Sat 30 Aug 2025 01:14:43 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: yME0hQXnQ8akTcSfL4kG0J4+OMxS98yj2GRyo49DI78=) 2: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=) 3: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: 2rBx7M/8DarUlsw8gY9C3sqaAvg0VqPuYYZMJWGJ38U=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=) 5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=) 6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=) 7: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Aug 23 01:14:43 2025 GMT Not After : Aug 30 01:14:43 2025 GMT Subject: CN=68a91603-2e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:66:53:49:b4:aa:39:cc:4b:d6:cc:d3:21:53: 63:fb:89:f9:cc:d9:50:f7:8d:1d:58:59:4b:3c:d8: 1f:d3:ef:87:f3:3e:80:30:e4:d8:50:08:f2:29:18: 6d:26:2b:1b:29:7e:3b:ad:de:d4:13:df:a1:bf:e5: 14:ab:f1:07:4c:90:5c:6d:ed:18:c2:b3:1e:83:35: ac:a5:f8:56:77:d0:d6:9a:4b:87:d9:cb:6b:8b:96: f5:39:12:ca:65:37:31:d7:54:f1:f9:ba:d7:c4:ae: 1e:e6:91:f1:85:bc:94:de:e6:5e:c1:e5:b2:53:65: 1f:b7:f9:79:0a:c3:f4:a8:f0:c2:4e:5a:3b:15:73: 8e:f7:e0:f8:35:6e:f2:1b:27:b7:f1:97:ad:4b:58: c6:de:32:55:3f:b2:c1:a0:2c:1e:e2:72:d5:cd:08: c1:5c:17:58:4c:3b:a6:fa:94:c3:8f:d3:31:c6:99: 36:1b:17:26:07:b1:a3:19:b8:51:ed:1b:4e:42:c5: 21:c7:5f:58:dc:5d:45:6c:8b:f5:38:a2:af:a5:ea: 4c:37:3d:05:09:10:6b:71:40:df:1f:f5:8e:5b:d9: 94:a5:f9:0d:98:72:6f:38:54:38:eb:72:be:25:80: 34:d1:c3:fa:86:b8:8b:b8:e1:e9:63:33:a3:51:f6: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:F5:91:6E:AB:FF:AB:52:E4:8D:C7:0E:32:8C:32:1B:9A:4F:0F X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:12:7d:f8:c1:c5:c1:2a:61:60:fe:df:4e:d0:80:10:55:20: ac:10:35:a4:0e:c6:35:69:09:fa:c8:f8:6c:b0:c2:cc:d4:d6: 76:ef:3b:f3:0c:0d:58:b9:7a:61:c1:71:48:08:9e:e0:a9:5a: df:ad:4c:ef:9f:a7:35:30:49:78:79:2c:24:d3:bb:81:4f:02: 82:bb:72:e4:3e:0b:57:76:ed:35:b8:35:b0:9b:58:93:62:80: 00:99:8a:2f:97:3f:20:3d:89:4f:61:b3:a1:04:ce:9f:c0:a8: c6:93:e3:12:4f:d6:d5:d9:2d:1c:0f:a4:50:02:12:0c:49:8a: 05:d8:b0:74:a7:ec:b9:40:74:da:b3:a8:f7:a5:76:5a:b3:3e: cc:1d:91:f1:91:f0:5e:d8:ab:f7:92:5a:33:29:42:15:bc:8d: b5:c1:c2:65:bf:6c:06:3d:ce:21:ea:a1:16:a0:88:80:6a:a3: 12:03:9d:79:ec:a5:c0:81:77:6d:40:f0:1d:70:29:e9:ff:2e: d7:1d:3e:b9:b6:ea:57:46:8d:f7:68:74:53:ae:c2:32:9f:d0: 7f:d3:86:fc:de:57:3b:85:78:1f:48:6d:f2:70:c6:9b:d8:bc: 17:be:b9:64:6d:52:c8:6c:12:28:83:13:73:92:87:bb:52:b9: 84:fa:63:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwODIzMDExNDQzWhcNMjUwODMwMDExNDQzWjAYMRYwFAYD VQQDEw02OGE5MTYwMy0yZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWZTSbSqOcxL1szTIVNj+4n5zNlQ940dWFlLPNgf0++H8z6AMOTYUAjyKRht JisbKX47rd7UE9+hv+UUq/EHTJBcbe0YwrMegzWspfhWd9DWmkuH2ctri5b1ORLK ZTcx11Tx+brXxK4e5pHxhbyU3uZeweWyU2Uft/l5CsP0qPDCTlo7FXOO9+D4NW7y Gye38ZetS1jG3jJVP7LBoCwe4nLVzQjBXBdYTDum+pTDj9Mxxpk2GxcmB7GjGbhR 7RtOQsUhx19Y3F1FbIv1OKKvpepMNz0FCRBrcUDfH/WOW9mUpfkNmHJvOFQ463K+ JYA00cP6hriLuOHpYzOjUfaDjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPj9ZFu q/+rUuSNxw4yjDIbmk8PMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdEn34wcXBKmFg/t9O0IAQVSCsEDWkDsY1aQn6yPhssMLM1NZ27zvz DA1YuXphwXFICJ7gqVrfrUzvn6c1MEl4eSwk07uBTwKCu3LkPgtXdu01uDWwm1iT YoAAmYovlz8gPYlPYbOhBM6fwKjGk+MST9bV2S0cD6RQAhIMSYoF2LB0p+y5QHTa s6j3pXZasz7MHZHxkfBe2Kv3klozKUIVvI21wcJlv2wGPc4h6qEWoIiAaqMSA515 7KXAgXdtQPAdcCnp/y7XHT65tupXRo33aHRTrsIyn9B/04b83lc7hXgfSG3ycMab 2LwXvrlkbVLIbBIogxNzkoe7UrmE+mOo -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:20 2025 by rpki-client