$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: P4Sb8hMM4AAziLjmn+3PzvkSbFY77SwuqyFhqbQMsXg= Subject key identifier: CA:27:04:27:FD:CB:0E:9A:40:C7:69:77:B3:3B:0C:85:AC:8B:85:1B Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 033B Signing time: Tue 01 Jul 2025 01:40:55 +0000 Manifest this update: Tue 01 Jul 2025 01:40:55 +0000 Manifest next update: Tue 08 Jul 2025 01:40:55 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: SnCRFXl81M7lKEb6ga2k5xW0BOPTWGKDqOrnd0nsRq4=) 2: 10D5A618C80411ECBA7BB174C4F9AE02.roa (hash: nXXBcFn3sufAqV+9Xuyz52CzFZ6TDQVFXH9eUCdKsfc=) 3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=) 5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=) 6: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Jul 1 01:40:55 2025 GMT Not After : Jul 8 01:40:55 2025 GMT Subject: CN=68633ca7-998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:e1:e2:61:ea:2e:42:4f:7b:a5:e6:20:ed: ae:5f:b8:59:45:30:d4:35:d1:9c:a9:d7:e6:6f:2a: 98:99:a4:69:6e:a4:a7:4b:3b:67:c7:f9:b7:5b:1c: 64:0b:d5:b1:d7:f0:6c:9c:5e:f7:0d:2f:be:73:c4: ff:3e:e5:96:ec:4a:0c:2b:44:93:ab:da:a2:d1:7c: 25:1b:7d:19:91:8f:3d:d1:2e:e8:6f:6f:18:0a:04: 2c:28:48:14:9b:9b:67:d5:4c:78:ec:76:f7:bc:66: 88:d6:e9:6f:3b:9e:34:f2:b9:9c:9f:3b:b5:0a:40: 4f:b0:34:ad:22:d6:0e:30:c9:2f:67:e1:01:e5:c3: bd:30:98:79:e0:0e:3d:43:31:b0:b7:3a:fc:63:f0: a3:ec:fd:7d:0e:08:6a:2b:8b:f1:5f:f9:02:e3:9e: 05:91:5f:fa:96:de:07:ca:3d:d5:c7:7c:87:da:d7: 8d:90:74:b9:a4:5b:4e:60:5d:7c:c8:f8:fc:45:cf: 12:5f:a4:b3:4a:53:4c:6e:39:ff:45:a1:9b:33:57: 59:48:b8:42:e8:19:53:e1:3f:51:ef:e6:fc:0e:d7: e3:eb:88:df:b3:fe:03:b5:d9:80:78:74:89:39:e0: 24:8d:f2:4e:21:29:a2:f5:58:fe:81:44:fc:07:56: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:27:04:27:FD:CB:0E:9A:40:C7:69:77:B3:3B:0C:85:AC:8B:85:1B X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6a:ae:94:82:f1:55:3e:af:72:25:d9:c9:a2:26:15:33:fa: 8a:1f:96:ea:df:2f:f8:27:57:7a:eb:bf:2e:af:e3:5a:b3:34: 2f:5e:dc:77:89:e8:28:a0:53:e6:a1:9e:1b:31:20:c3:80:04: 00:75:4d:fd:82:4b:bd:0c:d3:7c:bd:d6:be:b2:a0:0a:1f:b4: 79:62:8b:3b:f1:2a:d7:fd:2e:c5:ab:61:77:7a:51:c2:a8:14: 8c:2a:2a:74:21:f1:a7:26:58:1a:1e:d6:37:fb:2d:b7:d3:e6: 3f:c4:ba:9a:8d:1e:11:1e:67:83:eb:5c:90:39:eb:47:f5:7b: 1a:df:2d:e5:42:a6:3f:d3:f8:9e:02:d5:9f:1d:9c:2a:45:e3: f2:b1:3d:50:63:f0:9e:85:4b:88:c5:b3:2c:91:ee:56:1e:7f: 63:c2:a0:e8:a1:3d:03:0e:0b:d9:df:65:3d:67:35:94:46:08: 75:9d:43:06:9c:fb:da:b0:77:74:05:4d:1b:01:4a:43:7b:81: 4f:2f:1e:c1:bd:07:b9:e8:01:97:4d:ef:bc:cd:c8:c3:1b:d1: 46:b3:0e:19:f6:92:50:a2:8d:fe:12:b0:a6:75:1d:e5:0d:f7: 68:73:0f:45:0d:3f:2e:e5:79:89:c1:49:4c:7e:78:3c:41:71: 20:ec:7f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwNzAxMDE0MDU1WhcNMjUwNzA4MDE0MDU1WjAYMRYwFAYD VQQDEw02ODYzM2NhNy05OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZjh4mHqLkJPe6XmIO2uX7hZRTDUNdGcqdfmbyqYmaRpbqSnSztnx/m3Wxxk C9Wx1/BsnF73DS++c8T/PuWW7EoMK0STq9qi0XwlG30ZkY890S7ob28YCgQsKEgU m5tn1Ux47Hb3vGaI1ulvO5408rmcnzu1CkBPsDStItYOMMkvZ+EB5cO9MJh54A49 QzGwtzr8Y/Cj7P19DghqK4vxX/kC454FkV/6lt4Hyj3Vx3yH2teNkHS5pFtOYF18 yPj8Rc8SX6SzSlNMbjn/RaGbM1dZSLhC6BlT4T9R7+b8Dtfj64jfs/4DtdmAeHSJ OeAkjfJOISmi9Vj+gUT8B1Y3UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMonBCf9 yw6aQMdpd7M7DIWsi4UbMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYaq6UgvFVPq9yJdnJoiYVM/qKH5bq3y/4J1d6678ur+NaszQvXtx3 iegooFPmoZ4bMSDDgAQAdU39gku9DNN8vda+sqAKH7R5Yos78SrX/S7Fq2F3elHC qBSMKip0IfGnJlgaHtY3+y230+Y/xLqajR4RHmeD61yQOetH9Xsa3y3lQqY/0/ie AtWfHZwqRePysT1QY/CehUuIxbMske5WHn9jwqDooT0DDgvZ32U9ZzWURgh1nUMG nPvasHd0BU0bAUpDe4FPLx7BvQe56AGXTe+8zcjDG9FGsw4Z9pJQoo3+ErCmdR3l Dfdocw9FDT8u5XmJwUlMfng8QXEg7H+3 -----END CERTIFICATE-----Generated at Wed Jul 2 15:07:36 2025 by rpki-client