$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: VUpDcHc8HVs5TntG6gf4ksZbhGtqRKTc8dJ611oW7Ms= Subject key identifier: 80:60:F0:9E:73:19:36:27:76:FA:2A:77:76:58:7B:AC:27:B2:51:77 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0123 Signing time: Sat 23 Aug 2025 04:51:11 +0000 Manifest this update: Sat 23 Aug 2025 04:51:10 +0000 Manifest next update: Sat 30 Aug 2025 04:51:10 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: QGsVI9KFUm8STQPlviqv6vi3qrl2TutFGIiWR3mXBP8=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Aug 23 04:51:10 2025 GMT Not After : Aug 30 04:51:10 2025 GMT Subject: CN=68a948bf-18b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:b6:75:4a:92:4b:dc:51:f5:78:69:a7:da: bf:e5:57:53:e4:18:7b:2a:16:c8:77:31:b0:6b:93: 4f:c4:c2:cd:b6:67:35:d9:cf:7b:83:9e:28:69:b9: 2a:48:8f:52:e7:f4:c7:51:63:f6:2a:de:84:bb:e0: 1d:08:c3:f7:88:36:7e:6b:90:de:79:34:0c:8d:a7: 53:f2:a5:4a:41:f6:aa:af:64:e3:19:a5:bf:29:d1: 40:2e:16:31:00:b5:50:62:87:7b:13:cf:a8:9a:ae: 0f:8e:aa:71:69:ac:03:e1:dc:a8:13:a3:0f:83:92: ac:29:74:f8:14:83:0d:a0:17:db:56:2c:21:c0:37: a2:52:1e:57:9d:83:6f:ef:7e:fc:e5:32:92:75:26: a7:14:b0:b9:7f:7c:76:4d:77:3d:e0:50:3a:12:94: bc:f1:75:2b:d2:f3:9c:64:73:cf:8f:6d:6e:fa:44: 72:26:b8:26:a1:8f:0a:1e:70:0f:45:90:f3:78:be: d2:8a:ce:97:5d:ea:a6:82:28:a3:f9:b7:27:04:9f: dc:46:a1:fe:ef:86:28:b1:f3:86:22:64:67:33:2b: 38:8c:af:9a:5a:b9:93:f1:85:ee:0a:85:18:0a:11: fd:a4:5f:42:1a:c1:0d:22:d3:87:78:ce:db:c1:dc: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:60:F0:9E:73:19:36:27:76:FA:2A:77:76:58:7B:AC:27:B2:51:77 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a2:1f:fa:00:d9:0e:c8:42:e8:ef:6a:1f:ee:13:60:d5:a4: e2:1c:30:cd:8e:0a:94:8e:ab:d0:41:e0:4a:df:91:b2:31:6c: 5d:86:10:9b:6d:8b:d1:7c:cb:0b:a2:b3:2d:a3:f4:00:3b:99: 42:82:15:17:6b:8a:42:c7:18:29:dc:6a:e5:f6:39:3b:bf:77: 60:91:51:d4:f1:c3:15:aa:55:55:74:57:a6:90:08:ce:96:9b: d2:1b:f6:c6:c7:c6:97:71:dd:45:68:2c:5a:6d:0b:ac:07:38: 68:a0:f1:30:0c:d2:c5:52:d9:58:70:8c:6b:e7:d3:0c:d6:ff: 0c:1b:17:0f:28:fc:0a:39:eb:cc:35:bd:ac:60:f0:dc:28:07: 89:65:e3:af:e7:0b:20:9a:0f:01:10:89:3a:7f:ca:ab:79:d3: f0:4d:62:86:7a:0a:56:2f:7c:b5:fd:3c:5c:62:fb:d3:bd:6d: 31:8b:a2:82:63:2e:41:30:55:dc:83:fb:19:de:d7:9a:1c:98: 7f:be:fe:f8:40:7f:a9:e5:56:34:dd:55:1a:1e:24:4a:f2:15: 4c:b7:0a:c3:c2:da:a4:0a:4d:de:41:de:ef:4d:46:0d:c4:ef: a8:b8:26:90:57:2a:15:d5:7e:0f:d2:a6:82:96:dc:cb:d1:a2: 90:e5:51:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwODIzMDQ1MTEwWhcNMjUwODMwMDQ1MTEwWjAYMRYwFAYD VQQDEw02OGE5NDhiZi0xOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wu2dUqSS9xR9Xhpp9q/5VdT5Bh7KhbIdzGwa5NPxMLNtmc12c97g54oabkq SI9S5/THUWP2Kt6Eu+AdCMP3iDZ+a5DeeTQMjadT8qVKQfaqr2TjGaW/KdFALhYx ALVQYod7E8+omq4PjqpxaawD4dyoE6MPg5KsKXT4FIMNoBfbViwhwDeiUh5XnYNv 73785TKSdSanFLC5f3x2TXc94FA6EpS88XUr0vOcZHPPj21u+kRyJrgmoY8KHnAP RZDzeL7Sis6XXeqmgiij+bcnBJ/cRqH+74YosfOGImRnMys4jK+aWrmT8YXuCoUY ChH9pF9CGsENItOHeM7bwdyZ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBg8J5z GTYndvoqd3ZYe6wnslF3MB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4oh/6ANkOyELo72of7hNg1aTiHDDNjgqUjqvQQeBK35GyMWxdhhCb bYvRfMsLorMto/QAO5lCghUXa4pCxxgp3Grl9jk7v3dgkVHU8cMVqlVVdFemkAjO lpvSG/bGx8aXcd1FaCxabQusBzhooPEwDNLFUtlYcIxr59MM1v8MGxcPKPwKOevM Nb2sYPDcKAeJZeOv5wsgmg8BEIk6f8qredPwTWKGegpWL3y1/TxcYvvTvW0xi6KC Yy5BMFXcg/sZ3teaHJh/vv74QH+p5VY03VUaHiRK8hVMtwrDwtqkCk3eQd7vTUYN xO+ouCaQVyoV1X4P0qaCltzL0aKQ5VFc -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:27 2025 by rpki-client