$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: Mo6YtDMShf6nHHMyhOC+l119/gQKWWUSGmYPr2Ab4hM= Subject key identifier: A7:BA:11:3B:99:85:13:34:44:4C:EF:DD:32:32:A7:7A:18:20:E7:DF Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 02BB Signing time: Tue 13 May 2025 01:14:38 +0000 Manifest this update: Tue 13 May 2025 01:14:37 +0000 Manifest next update: Tue 20 May 2025 01:14:37 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 1l0m/F0kg7VuRwwpcQ4CVd8Rc+kKeh0/4tBfizZINrA=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: lNppuM2/IdxAAhctCe7rRBT4xZtGXRvN8aRrKBnWfmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: May 13 01:14:37 2025 GMT Not After : May 20 01:14:37 2025 GMT Subject: CN=68229cfd-eb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:12:54:43:13:5a:e9:01:96:1d:11:64:27: 97:bc:a2:26:6c:19:0b:35:02:75:aa:df:08:f5:9d: bc:2a:80:88:ab:67:4e:bb:3e:cb:68:e8:fa:79:fe: 30:ac:32:3c:65:6b:1f:fe:f8:a6:1f:1b:79:3e:71: f4:a6:ec:a7:ce:ff:49:1f:1a:51:c0:b1:67:d8:d0: df:0c:fc:f5:5e:f7:2f:0f:fd:ec:4c:38:7f:96:1b: e3:0a:b9:46:db:bf:46:45:1b:94:6e:20:83:1e:45: 0f:05:f5:9f:d2:5f:35:15:e1:36:df:44:f6:33:d6: d3:8c:b6:8e:a8:c1:d0:66:13:d6:76:9f:3d:9a:ce: be:06:70:f4:a4:f0:1b:a8:d5:4d:4b:20:93:23:67: ef:8a:4a:98:6c:2e:62:05:db:96:42:80:3a:e9:31: cd:5f:33:d8:13:fe:ae:4d:5d:f5:e1:22:2b:2b:cb: d7:cd:32:cf:aa:88:63:31:c6:45:19:19:83:84:94: 11:a9:88:e9:04:5a:19:e0:e6:11:0a:96:8a:7c:ad: 93:f6:80:8a:19:e9:85:aa:c8:99:0a:a0:6b:02:20: e4:36:3b:a3:fe:17:79:d8:5f:7e:e2:26:a1:76:7b: 3c:5f:8b:f8:3f:e8:c0:11:cf:eb:d3:cb:5d:ad:5e: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BA:11:3B:99:85:13:34:44:4C:EF:DD:32:32:A7:7A:18:20:E7:DF X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:aa:76:82:65:f2:8d:34:81:d9:cd:8c:ef:dc:d8:40:da: 4d:a3:b1:09:8e:aa:5f:e0:b7:56:ee:14:8c:a8:4d:73:02:d1: 5c:97:63:fe:53:cc:8e:12:c0:f8:7f:b5:43:48:3d:4b:0c:63: 1f:10:9e:93:0d:43:3b:fe:45:31:6f:f8:eb:ca:92:a3:c7:12: 89:a3:3c:96:51:52:21:cc:4a:02:02:60:17:f6:a7:9e:4d:2f: 21:12:cf:65:2e:78:4a:df:e3:92:5d:89:51:02:35:bf:d7:bc: 44:af:a4:0e:51:34:10:5e:88:7a:f3:12:d0:85:f7:9e:47:5f: 4d:3d:7e:43:e7:88:8b:bf:0b:eb:b2:15:f2:b3:07:19:8d:43: de:50:b3:f6:ce:e9:fa:21:ae:6a:b6:5a:ef:a0:2f:82:3f:dd: 9a:da:b7:e8:c1:47:75:dc:3f:91:05:35:ea:28:bf:7f:67:d2: fc:5d:62:e0:f5:07:08:84:e5:ff:eb:ff:17:15:61:33:a2:0b: a4:a5:98:e3:fb:0a:b3:ec:c9:e1:c2:78:a4:51:30:84:ce:13: 8c:7d:f9:13:ad:10:21:19:90:4f:d1:bf:0f:fb:7e:dc:97:e3: 66:65:ce:65:e3:4c:70:1a:0e:72:08:ef:ff:59:b8:34:41:ca: f8:9c:70:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUwNTEzMDExNDM3WhcNMjUwNTIwMDExNDM3WjAYMRYwFAYD VQQDEw02ODIyOWNmZC1lYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7ASVEMTWukBlh0RZCeXvKImbBkLNQJ1qt8I9Z28KoCIq2dOuz7LaOj6ef4w rDI8ZWsf/vimHxt5PnH0puynzv9JHxpRwLFn2NDfDPz1XvcvD/3sTDh/lhvjCrlG 279GRRuUbiCDHkUPBfWf0l81FeE230T2M9bTjLaOqMHQZhPWdp89ms6+BnD0pPAb qNVNSyCTI2fvikqYbC5iBduWQoA66THNXzPYE/6uTV314SIrK8vXzTLPqohjMcZF GRmDhJQRqYjpBFoZ4OYRCpaKfK2T9oCKGemFqsiZCqBrAiDkNjuj/hd52F9+4iah dns8X4v4P+jAEc/r08tdrV7O4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe6ETuZ hRM0REzv3TIyp3oYIOffMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAOap2gmXyjTSB2c2M79zYQNpNo7EJjqpf4LdW7hSMqE1zAtFcl2P+ U8yOEsD4f7VDSD1LDGMfEJ6TDUM7/kUxb/jrypKjxxKJozyWUVIhzEoCAmAX9qee TS8hEs9lLnhK3+OSXYlRAjW/17xEr6QOUTQQXoh68xLQhfeeR19NPX5D54iLvwvr shXyswcZjUPeULP2zun6Ia5qtlrvoC+CP92a2rfowUd13D+RBTXqKL9/Z9L8XWLg 9QcIhOX/6/8XFWEzogukpZjj+wqz7MnhwnikUTCEzhOMffkTrRAhGZBP0b8P+37c l+NmZc5l40xwGg5yCO//Wbg0Qcr4nHDv -----END CERTIFICATE-----Generated at Tue May 13 04:07:04 2025 by rpki-client