$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: 4UyEwWQ6FbzmRHhN6JNXUhpSE9SbqyymbRAapUQP7mo= Subject key identifier: 40:D2:3C:75:25:7F:E2:9C:03:E9:F1:3D:16:9C:62:F1:7E:1E:91:47 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0322 Signing time: Sun 11 May 2025 00:42:58 +0000 Manifest this update: Sun 11 May 2025 00:42:58 +0000 Manifest next update: Sun 18 May 2025 00:42:58 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: 1pjTkzI8/6+OkCP+kA/cFZHOeqI0iwYsOBErMrL+nkg=) 2: 10D5A618C80411ECBA7BB174C4F9AE02.roa (hash: nXXBcFn3sufAqV+9Xuyz52CzFZ6TDQVFXH9eUCdKsfc=) 3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=) 5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=) 6: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: May 11 00:42:58 2025 GMT Not After : May 18 00:42:58 2025 GMT Subject: CN=681ff292-aa63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:e5:02:28:6b:3a:69:c6:88:4b:bb:34:90: dd:7a:65:c8:9c:cc:5e:65:5f:41:85:a9:0e:e5:2c: 4a:80:f0:8d:e5:2e:74:a3:bb:ae:1b:8e:98:8d:f1: a8:0d:09:76:ad:7c:57:7b:9b:2d:3d:69:98:63:28: b7:39:6e:bc:ff:24:0e:5f:2d:a8:dc:50:bc:7b:47: 8f:cb:a3:e5:53:a3:10:52:ce:9d:63:b2:56:f4:65: 6a:b3:e1:9f:2b:66:a0:b7:72:cf:59:d4:11:5f:17: 98:e2:1a:75:de:c3:d1:eb:21:49:20:e7:8e:a8:38: 1d:55:73:4f:a1:04:bf:a4:7b:c8:67:8c:33:15:90: f6:55:58:88:d9:aa:57:48:69:92:44:4a:e9:3c:4d: 20:ca:22:b8:85:3d:a6:cf:f2:27:ed:02:0a:08:b2: d3:d6:fb:b3:66:d9:6e:f9:b8:2a:55:83:13:63:f1: a3:07:55:c8:17:f2:ab:dd:11:35:a2:e1:e0:9a:a5: 74:d2:c9:de:3f:ec:89:1f:31:94:35:7a:a1:12:86: c0:13:e2:62:a8:cd:0a:fe:72:99:25:95:9e:73:c7: 02:0e:29:58:4f:20:35:7e:a9:a6:25:aa:d7:e7:ce: 99:00:cd:e2:79:bc:0c:00:df:fc:4d:d3:5f:1a:1f: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D2:3C:75:25:7F:E2:9C:03:E9:F1:3D:16:9C:62:F1:7E:1E:91:47 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:20:6f:68:0e:bf:a4:b8:b9:5c:3e:18:78:68:39:a0:8b:b9: f3:22:bd:74:df:24:03:c5:be:15:de:de:22:60:25:49:f8:a0: 03:08:cd:5e:ab:04:84:2d:f8:da:2a:93:54:3d:a6:86:26:7b: 89:98:56:4d:6c:fe:a8:7f:82:f5:a0:7a:de:44:98:34:16:20: 82:22:54:81:34:4a:8b:9e:b8:ac:f7:00:f2:4f:0b:58:82:d8: 0e:83:7a:3c:b8:15:4f:85:18:1f:ec:84:73:c6:0a:09:e4:a1: 8a:54:a7:cb:25:1d:6c:cf:5b:be:b5:bc:25:50:09:79:cf:8c: d6:6c:44:52:f0:9a:4a:3f:e9:fc:d5:f0:ae:f0:52:e8:cb:2e: c8:98:bd:81:20:e8:b4:2a:ed:af:67:14:3d:8b:f6:1f:ed:f9: 58:98:3c:97:7e:3b:df:26:e6:22:42:c1:9d:4d:ed:f2:71:41: 6f:07:9d:55:b2:de:8b:b1:5f:01:b8:14:7e:2f:0a:de:b8:5c: 43:eb:c9:cb:97:cf:cd:7b:ed:5e:7a:4a:ee:81:8f:25:2f:14: 34:8e:bf:93:a1:f8:42:d6:59:15:41:08:13:07:bc:ce:6d:cc: e5:9a:f1:1c:19:54:63:07:c6:fa:4b:0d:49:f0:43:e5:86:71: b4:f1:15:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwNTExMDA0MjU4WhcNMjUwNTE4MDA0MjU4WjAYMRYwFAYD VQQDEw02ODFmZjI5Mi1hYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz/lAihrOmnGiEu7NJDdemXInMxeZV9BhakO5SxKgPCN5S50o7uuG46YjfGo DQl2rXxXe5stPWmYYyi3OW68/yQOXy2o3FC8e0ePy6PlU6MQUs6dY7JW9GVqs+Gf K2agt3LPWdQRXxeY4hp13sPR6yFJIOeOqDgdVXNPoQS/pHvIZ4wzFZD2VViI2apX SGmSRErpPE0gyiK4hT2mz/In7QIKCLLT1vuzZtlu+bgqVYMTY/GjB1XIF/Kr3RE1 ouHgmqV00sneP+yJHzGUNXqhEobAE+JiqM0K/nKZJZWec8cCDilYTyA1fqmmJarX 586ZAM3iebwMAN/8TdNfGh93iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDSPHUl f+KcA+nxPRacYvF+HpFHMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWIG9oDr+kuLlcPhh4aDmgi7nzIr103yQDxb4V3t4iYCVJ+KADCM1e qwSELfjaKpNUPaaGJnuJmFZNbP6of4L1oHreRJg0FiCCIlSBNEqLnris9wDyTwtY gtgOg3o8uBVPhRgf7IRzxgoJ5KGKVKfLJR1sz1u+tbwlUAl5z4zWbERS8JpKP+n8 1fCu8FLoyy7ImL2BIOi0Ku2vZxQ9i/Yf7flYmDyXfjvfJuYiQsGdTe3ycUFvB51V st6LsV8BuBR+LwreuFxD68nLl8/Ne+1eekrugY8lLxQ0jr+TofhC1lkVQQgTB7zO bczlmvEcGVRjB8b6Sw1J8EPlhnG08RV3 -----END CERTIFICATE-----Generated at Sun May 11 16:04:40 2025 by rpki-client