$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: YofwiXDDkuuBavxrLnpo90UdMUOZ409Zb2jrCN1juqI= Subject key identifier: 04:2A:A3:07:EB:CF:54:08:38:7C:06:7A:84:C5:76:93:CA:79:7D:60 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0D7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0D6F Signing time: Fri 22 Aug 2025 18:05:21 +0000 Manifest this update: Fri 22 Aug 2025 18:05:20 +0000 Manifest next update: Fri 29 Aug 2025 18:05:20 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: lvw77UJYncJREbUadJtuBVXF+olM8otrbdymXo9Dd2w=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 2//beVUEUtWDd/tf9scv/4G9JclsWxR4JDywFndSmnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3454 (0xd7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Aug 22 18:05:20 2025 GMT Not After : Aug 29 18:05:20 2025 GMT Subject: CN=68a8b161-6f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:c3:88:8a:21:5a:57:41:32:8e:dc:53:e6: db:16:d3:4a:60:5d:69:74:02:d6:9a:b0:8d:30:4a: 1b:d8:f7:98:19:38:b4:d7:23:4b:0f:96:32:9b:37: 81:29:13:18:2b:e5:99:ec:f0:07:c6:c9:ef:be:28: 45:0c:c6:9f:88:fc:a3:c3:99:c5:be:30:30:32:cd: f1:7d:ff:3b:54:f1:c8:da:be:a8:4a:c9:8e:0e:0e: 6c:31:1f:5e:d8:2e:49:d9:50:6b:e9:85:ce:5e:f9: 34:2c:8e:04:dc:12:2e:4b:36:96:b1:3e:cb:9b:4c: 98:83:1e:4b:cd:d5:3a:20:ac:af:bf:2b:c8:9d:b7: ef:e1:bb:d3:9e:34:13:17:1e:40:81:47:bb:5a:f5: 2e:c1:81:2b:66:7f:07:3b:8d:c9:c0:66:b6:b7:51: 60:06:8d:21:65:c0:a2:dd:4e:88:c2:55:4f:52:37: 73:9e:f1:89:17:88:dd:2b:af:03:77:57:76:6d:e5: 9e:ef:dd:88:66:32:10:da:e3:97:e9:7e:dc:91:7b: 8d:b4:ed:c3:99:3d:47:c4:71:da:db:8b:88:66:8a: 0e:ef:3e:aa:b8:75:b1:b9:11:e8:f2:33:01:71:14: f4:cc:1d:fe:f3:2c:8a:07:de:d6:43:d1:2c:ad:62: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2A:A3:07:EB:CF:54:08:38:7C:06:7A:84:C5:76:93:CA:79:7D:60 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2f:d0:52:78:23:44:c9:4c:b8:b7:33:e8:5b:aa:46:24:37: bc:19:4a:9e:9c:9d:14:eb:08:b1:7a:0e:59:7b:88:37:69:b8: 06:c4:39:e2:27:ce:62:e0:eb:07:d5:b1:27:58:14:2b:1a:9f: e8:7e:2d:28:94:43:a7:9e:7e:2f:ff:6a:ef:20:b0:7f:1a:25: 14:a7:5f:cf:83:13:c3:61:bb:93:21:c7:8d:7c:27:aa:ef:e5: a7:05:79:93:e5:a8:60:b6:8f:7e:f5:51:3c:d6:54:45:e0:3b: 4b:5c:c1:93:95:95:27:47:07:f0:2c:16:52:48:64:b0:82:86: e1:c0:e7:27:e4:db:12:38:b3:fe:be:94:5d:bd:ab:d0:71:8a: df:c3:26:25:d8:73:9b:83:2d:86:53:0a:dc:aa:f4:af:45:32: 2c:84:b8:fb:d8:60:aa:b6:e7:e2:e7:88:de:95:19:69:58:05: b1:07:54:d1:fe:08:6d:87:1b:85:bf:f2:4e:df:88:1b:0f:69: 85:57:7a:16:7f:55:4e:b3:fa:ec:80:af:44:4d:59:8b:19:6f: 77:da:23:fc:40:76:0b:b1:18:b1:a6:33:b4:80:27:03:11:ac: 48:af:ca:e7:b4:04:00:88:86:02:9e:1b:17:b3:4c:a4:13:0b: e0:b5:58:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUwODIyMTgwNTIwWhcNMjUwODI5MTgwNTIwWjAYMRYwFAYD VQQDEw02OGE4YjE2MS02ZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjzDiIohWldBMo7cU+bbFtNKYF1pdALWmrCNMEob2PeYGTi01yNLD5YymzeB KRMYK+WZ7PAHxsnvvihFDMafiPyjw5nFvjAwMs3xff87VPHI2r6oSsmODg5sMR9e 2C5J2VBr6YXOXvk0LI4E3BIuSzaWsT7Lm0yYgx5LzdU6IKyvvyvInbfv4bvTnjQT Fx5AgUe7WvUuwYErZn8HO43JwGa2t1FgBo0hZcCi3U6IwlVPUjdznvGJF4jdK68D d1d2beWe792IZjIQ2uOX6X7ckXuNtO3DmT1HxHHa24uIZooO7z6quHWxuRHo8jMB cRT0zB3+8yyKB97WQ9EsrWJ4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQqowfr z1QIOHwGeoTFdpPKeX1gMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANL9BSeCNEyUy4tzPoW6pGJDe8GUqenJ0U6wixeg5Ze4g3abgGxDni J85i4OsH1bEnWBQrGp/ofi0olEOnnn4v/2rvILB/GiUUp1/PgxPDYbuTIceNfCeq 7+WnBXmT5ahgto9+9VE81lRF4DtLXMGTlZUnRwfwLBZSSGSwgobhwOcn5NsSOLP+ vpRdvavQcYrfwyYl2HObgy2GUwrcqvSvRTIshLj72GCqtufi54jelRlpWAWxB1TR /ghthxuFv/JO34gbD2mFV3oWf1VOs/rsgK9ETVmLGW932iP8QHYLsRixpjO0gCcD EaxIr8rntAQAiIYCnhsXs0ykEwvgtVjd -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:19 2025 by rpki-client