$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: yAar20VVqSAEYuvP8diEIF4flsc37PygeaIUMKVq9F8= Subject key identifier: 49:51:47:9A:E8:00:7A:CE:C2:34:0E:4E:61:7D:1D:C7:5A:22:5C:CA Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 68 Signing time: Tue 13 May 2025 06:12:29 +0000 Manifest this update: Tue 13 May 2025 06:12:29 +0000 Manifest next update: Tue 20 May 2025 06:12:29 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: 72jwy3nFww47FPNZp3xzdGWf5pSYc+54aRqdTYhj0j4=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: May 13 06:12:29 2025 GMT Not After : May 20 06:12:29 2025 GMT Subject: CN=6822e2cd-4631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:ad:90:8b:a8:93:db:0f:34:66:29:99:f8: c3:0c:54:28:28:6e:a0:9c:91:b1:31:2d:c4:e2:e1: e7:7c:4b:30:8d:08:59:47:18:a6:0b:96:1f:12:bf: a6:af:5d:e0:65:07:ff:fc:17:94:a6:35:81:ce:d7: 6f:58:be:44:58:56:77:dd:44:31:e2:26:fc:71:b5: 3a:44:3b:c6:22:8b:66:db:ca:d5:b4:1b:f8:93:c8: 41:8e:90:5a:2a:2f:6a:e7:78:33:61:51:3f:b9:fc: d9:f1:c1:ca:d2:3c:02:a2:da:94:03:04:18:24:eb: ab:bf:74:85:16:63:67:3a:03:67:ea:35:e6:a7:4c: 53:e1:26:38:b0:70:cf:ba:40:6a:bf:a7:6b:39:70: 7c:0e:14:92:fd:1b:f1:26:de:7a:22:b9:46:c1:d3: eb:2d:1d:de:cd:7f:e2:05:41:7f:f3:a5:08:c1:83: 5b:d3:a7:b8:0a:a3:a1:f1:b5:6d:1a:9b:cd:21:fa: ca:af:18:c6:76:0e:14:38:6c:bc:09:74:09:9e:37: d0:5c:60:c2:95:ae:53:e2:05:a4:cb:34:18:71:e5: 64:50:99:ee:75:64:82:3b:19:80:81:eb:e6:cb:e6: ea:90:62:7d:df:0f:ac:26:3d:1e:27:05:9e:e0:0e: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:47:9A:E8:00:7A:CE:C2:34:0E:4E:61:7D:1D:C7:5A:22:5C:CA X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f4:84:23:46:0a:d6:e9:d9:1d:1f:37:1c:9b:0c:fb:9b:55: c7:a9:0d:73:cf:aa:da:4b:9f:4b:ab:c6:c5:4f:e1:37:99:5e: eb:86:8d:94:44:e9:e0:f9:fb:bc:cb:79:a4:17:56:88:37:08: ad:4d:f4:3c:de:e8:a8:73:f8:ec:ff:04:ae:f3:10:b3:d0:dd: 91:aa:77:9b:b9:72:ea:92:ae:ea:b3:2a:16:d9:72:97:ae:c3: bd:84:04:22:70:d8:09:1d:d0:03:c1:51:56:c6:d2:c2:65:f0: aa:d2:66:fe:bf:06:1e:a4:fc:a5:0d:b7:b0:4e:cb:9f:55:06: 30:54:c2:d2:ea:5f:95:ed:6c:8d:26:72:6c:85:13:ae:71:f6: 7c:9a:90:1a:6d:54:17:19:78:ad:ce:3b:e5:ae:81:c4:cd:95: 28:27:c5:a5:36:0f:5a:c0:b7:a7:a0:b2:7a:ec:98:8b:1d:2e: 93:aa:ec:91:03:a8:85:cc:6e:6f:ce:c8:31:75:8a:99:66:60: 62:f6:0b:83:ff:32:d8:c6:29:fc:af:d7:4c:dc:1f:57:3e:f9: 0c:7d:fe:3b:e9:1a:46:a7:a4:31:60:d2:11:97:c8:81:56:63: f8:98:35:ad:33:4c:bc:b5:9d:5a:40:0a:26:fb:3f:95:ac:38: 7d:df:d4:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMxQjExMC8GA1UEBRMoMkNGQjBDRUY2RDE2RDY2NzZFRUEyMTE2NDNFQzhFODVD MjVDRjJGRjAeFw0yNTA1MTMwNjEyMjlaFw0yNTA1MjAwNjEyMjlaMBgxFjAUBgNV BAMTDTY4MjJlMmNkLTQ2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9d62Qi6iT2w80ZimZ+MMMVCgobqCckbExLcTi4ed8SzCNCFlHGKYLlh8Sv6av XeBlB//8F5SmNYHO129YvkRYVnfdRDHiJvxxtTpEO8Yii2bbytW0G/iTyEGOkFoq L2rneDNhUT+5/NnxwcrSPAKi2pQDBBgk66u/dIUWY2c6A2fqNeanTFPhJjiwcM+6 QGq/p2s5cHwOFJL9G/Em3noiuUbB0+stHd7Nf+IFQX/zpQjBg1vTp7gKo6HxtW0a m80h+sqvGMZ2DhQ4bLwJdAmeN9BcYMKVrlPiBaTLNBhx5WRQme51ZII7GYCB6+bL 5uqQYn3fD6wmPR4nBZ7gDvgHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSVFHmugA es7CNA5OYX0dx1oiXMowHwYDVR0jBBgwFoAULPsM720W1mdu6iEWQ+yOhcJc8v8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzFCL0U1NzMwNkNBOUE3 MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBzTTcyMFcxbWR1NmlFV1EteU9oY0pjOHY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzFCL0U1NzMwNkNBOUE3MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1k dTZpRVdRLXlPaGNKYzh2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf0hCNGCtbp2R0fNxybDPubVcepDXPPqtpLn0urxsVP4TeZXuuGjZRE 6eD5+7zLeaQXVog3CK1N9Dze6Khz+Oz/BK7zELPQ3ZGqd5u5cuqSruqzKhbZcpeu w72EBCJw2Akd0APBUVbG0sJl8KrSZv6/Bh6k/KUNt7BOy59VBjBUwtLqX5XtbI0m cmyFE65x9nyakBptVBcZeK3OO+WugcTNlSgnxaU2D1rAt6egsnrsmIsdLpOq7JED qIXMbm/OyDF1iplmYGL2C4P/MtjGKfyv10zcH1c++Qx9/jvpGkanpDFg0hGXyIFW Y/iYNa0zTLy1nVpACib7P5WsOH3f1PU= -----END CERTIFICATE-----Generated at Tue May 13 10:50:14 2025 by rpki-client