$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: 6zYIHAHaLrgEGiA4qri/2/Wh+jvT5nmKTqD6ztXhMNg= Subject key identifier: DA:AD:9B:FE:EE:72:23:2F:D4:25:AC:A8:96:F0:02:07:14:A9:52:A2 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0D64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0D55 Signing time: Wed 02 Jul 2025 18:12:40 +0000 Manifest this update: Wed 02 Jul 2025 18:12:39 +0000 Manifest next update: Wed 09 Jul 2025 18:12:39 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: dh9NJNP+z4+BYiOOh3Dafc6LyOwNSLARNIR5UBKVwuM=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 2//beVUEUtWDd/tf9scv/4G9JclsWxR4JDywFndSmnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Jul 2 18:12:39 2025 GMT Not After : Jul 9 18:12:39 2025 GMT Subject: CN=68657697-0bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:91:1b:89:4e:29:e6:19:4d:df:0e:5b:16: 29:fa:47:74:4e:e5:70:2b:48:e8:9c:31:03:b3:34: f7:a8:80:a3:b5:c2:3d:93:e7:f5:8a:09:2e:73:50: c8:06:89:26:c5:1f:1d:01:cd:fe:06:d3:b8:9a:13: cb:e5:8f:8a:f5:ef:65:c2:b4:91:fe:55:a6:be:76: c2:16:e8:cf:2c:e8:e5:a8:31:8d:fb:ee:3f:6f:42: 77:4e:81:0c:f6:dd:18:d7:2b:e1:c8:5a:36:ef:97: 72:b0:63:a8:4f:24:69:86:10:56:49:f9:d4:fc:d5: d2:63:c6:fb:d0:45:19:41:15:79:32:a9:77:87:3d: 66:8b:33:fd:c2:1a:95:eb:28:e0:45:d7:d9:47:12: 60:ab:2d:27:a1:f3:4f:9e:fb:f5:06:c0:42:99:02: 28:75:88:31:dc:1f:73:dd:96:40:f4:ff:52:93:3d: 9a:11:1b:27:21:4c:4b:36:88:e7:b7:8b:55:53:6e: 7e:f9:8a:2d:8b:a9:a4:b3:a1:64:eb:26:91:75:5a: 70:a2:7d:63:6e:b8:25:a7:a2:a1:e4:45:e0:21:8f: ad:fd:81:46:25:df:06:9d:28:15:c9:da:6f:d0:27: 39:b7:7b:9d:10:b3:d4:cb:92:74:6d:98:b5:e9:e1: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AD:9B:FE:EE:72:23:2F:D4:25:AC:A8:96:F0:02:07:14:A9:52:A2 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:45:ad:a6:96:52:c7:55:9b:30:5c:89:3b:3d:9e:70:b1:bc: 24:bc:bf:36:26:e1:32:b6:7e:b6:7d:67:f3:9f:cc:ff:e7:14: 0d:c2:f0:ef:5a:ca:27:3e:a3:82:0a:ee:ba:51:cf:57:7f:1a: 27:10:46:a5:45:92:a4:fe:35:d4:a5:a0:a9:12:dc:46:5d:d1: a8:5d:03:b6:e8:b1:45:a7:84:4a:41:cf:99:44:eb:78:60:2e: 8f:71:06:40:28:40:ab:f0:d6:ca:2d:81:1d:ca:a5:3c:36:fe: 47:d5:6c:4e:e9:de:08:3c:9e:cb:91:e5:37:31:13:87:03:ad: 74:6a:10:81:e1:5d:7d:1c:2c:4e:84:81:ec:fb:6d:fd:a8:4c: 97:56:0f:5f:ca:bd:58:54:2c:3f:ca:29:1f:4a:44:f5:13:be: 09:29:02:ab:12:90:9e:e1:b9:80:66:60:ed:e1:e5:45:24:f5: c8:5e:b9:b1:c7:92:21:3d:75:f3:c8:ee:4a:b4:1e:af:f8:87: 1e:ae:8f:ce:2c:81:d7:ef:30:5a:d3:a4:d3:60:e7:6b:87:58: 8d:f4:48:d5:fc:ac:fc:d1:46:e9:e8:b4:9c:5a:f8:39:33:09: c5:5b:ad:16:fa:40:c3:9b:3d:07:af:d3:44:09:81:d3:9d:c6: d8:ac:84:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUwNzAyMTgxMjM5WhcNMjUwNzA5MTgxMjM5WjAYMRYwFAYD VQQDEw02ODY1NzY5Ny0wYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I6RG4lOKeYZTd8OWxYp+kd0TuVwK0jonDEDszT3qICjtcI9k+f1igkuc1DI BokmxR8dAc3+BtO4mhPL5Y+K9e9lwrSR/lWmvnbCFujPLOjlqDGN++4/b0J3ToEM 9t0Y1yvhyFo275dysGOoTyRphhBWSfnU/NXSY8b70EUZQRV5Mql3hz1mizP9whqV 6yjgRdfZRxJgqy0nofNPnvv1BsBCmQIodYgx3B9z3ZZA9P9Skz2aERsnIUxLNojn t4tVU25++Yoti6mks6Fk6yaRdVpwon1jbrglp6Kh5EXgIY+t/YFGJd8GnSgVydpv 0Cc5t3udELPUy5J0bZi16eH1gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqtm/7u ciMv1CWsqJbwAgcUqVKiMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpRa2mllLHVZswXIk7PZ5wsbwkvL82JuEytn62fWfzn8z/5xQNwvDv WsonPqOCCu66Uc9XfxonEEalRZKk/jXUpaCpEtxGXdGoXQO26LFFp4RKQc+ZROt4 YC6PcQZAKECr8NbKLYEdyqU8Nv5H1WxO6d4IPJ7LkeU3MROHA610ahCB4V19HCxO hIHs+239qEyXVg9fyr1YVCw/yikfSkT1E74JKQKrEpCe4bmAZmDt4eVFJPXIXrmx x5IhPXXzyO5KtB6v+Icero/OLIHX7zBa06TTYOdrh1iN9EjV/Kz80Ubp6LScWvg5 MwnFW60W+kDDmz0Hr9NECYHTncbYrITs -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:57 2025 by rpki-client