$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: qGJpDvG4/FIuU24UWUis1GSwPYZSufh8tCaRTNAgEiY= Subject key identifier: F4:DC:21:3C:C7:59:33:CD:7E:AB:62:17:28:43:91:B6:8C:64:F6:DF Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0109 Signing time: Thu 03 Jul 2025 05:11:09 +0000 Manifest this update: Thu 03 Jul 2025 05:11:09 +0000 Manifest next update: Thu 10 Jul 2025 05:11:09 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: NWhi4i8gula1tWTYI0pGJpbNmMtnGiUltMXRVAzaWmI=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Jul 3 05:11:09 2025 GMT Not After : Jul 10 05:11:09 2025 GMT Subject: CN=686610ed-61d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:ce:76:c6:ff:04:7b:c4:12:f4:79:8a:c8: e3:aa:6e:dc:dc:8c:d9:11:e5:07:c9:71:29:93:e2: 63:31:c4:d2:1c:19:75:83:2f:67:7a:d1:38:58:31: 6f:ff:99:f8:16:fd:f8:53:7a:61:ff:96:06:4e:5a: 94:a3:38:99:f7:f5:a5:cb:48:fc:2e:9a:07:50:89: 13:3e:2b:4a:a3:f5:68:c1:dd:2c:ff:1b:e4:04:5e: fe:cb:82:1e:49:a8:4f:49:35:7b:23:9f:10:16:6f: 35:d5:e6:6d:0f:ca:c7:ef:00:df:4d:29:5d:01:e6: 43:4d:0f:72:4e:85:fd:a9:0e:71:ac:03:40:aa:f3: a1:2f:08:c1:07:8b:f4:b8:66:ef:1a:7d:b0:20:36: 2f:26:b4:7e:93:70:1b:59:cc:2c:cc:81:df:49:f1: 7c:63:63:70:a8:41:6a:eb:7c:b2:b0:f8:a9:a4:18: 6b:db:14:89:6c:da:dd:2f:f0:71:4f:ed:7a:bd:06: af:bc:4b:87:93:19:f6:6d:8f:3a:d8:4c:7c:79:f0: ec:9e:64:3f:b9:f7:d9:e1:e7:fb:e5:4c:2f:03:e8: df:3b:6d:26:cb:87:8d:db:9e:c9:4d:a3:65:53:be: a5:7b:65:26:00:6c:38:19:0f:b8:bc:cd:60:2a:98: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DC:21:3C:C7:59:33:CD:7E:AB:62:17:28:43:91:B6:8C:64:F6:DF X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5b:09:de:bd:f7:51:ea:36:79:d6:ab:98:6b:2d:2e:02:97: 52:69:41:e5:26:0e:d6:5e:07:cb:73:c0:5c:dd:2f:e2:77:b5: e7:71:50:87:d6:25:14:8c:54:54:f6:2c:7f:06:c1:b5:9d:af: b4:2c:be:16:1d:29:40:2e:d2:28:88:29:98:81:1f:3f:31:fe: 56:ac:80:60:7e:8b:ec:06:c9:e8:47:e8:7f:81:7e:74:06:73: c8:0d:56:e6:9f:8c:57:62:60:0c:bb:99:c9:ee:63:38:9f:72: fb:04:90:c0:3f:d7:8e:49:a6:7b:af:37:06:98:40:8f:c1:c2: f1:cb:54:65:d5:68:42:9f:80:da:f6:5c:55:5b:17:9e:9c:cc: 99:20:ea:b8:f2:82:ad:50:c7:8a:75:ff:34:c6:f9:f1:ff:c4: dd:87:0a:81:7b:f8:ab:f5:93:93:ff:82:7c:d9:1d:b6:66:3f: 48:34:ee:e2:d5:be:e7:da:50:5a:4c:09:5b:af:76:38:26:ea: 85:3a:e5:2b:80:25:6e:bc:60:e5:9d:c4:d4:68:80:b6:09:e8: 3f:6c:b4:4e:25:45:e3:29:fb:cf:c5:4b:46:cc:18:09:a1:04: 01:0d:3f:77:ec:a2:b8:db:db:27:f7:9c:78:92:ae:16:92:9c: a6:0a:e8:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwNzAzMDUxMTA5WhcNMjUwNzEwMDUxMTA5WjAYMRYwFAYD VQQDEw02ODY2MTBlZC02MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz47Odsb/BHvEEvR5isjjqm7c3IzZEeUHyXEpk+JjMcTSHBl1gy9netE4WDFv /5n4Fv34U3ph/5YGTlqUoziZ9/Wly0j8LpoHUIkTPitKo/Vowd0s/xvkBF7+y4Ie SahPSTV7I58QFm811eZtD8rH7wDfTSldAeZDTQ9yToX9qQ5xrANAqvOhLwjBB4v0 uGbvGn2wIDYvJrR+k3AbWcwszIHfSfF8Y2NwqEFq63yysPippBhr2xSJbNrdL/Bx T+16vQavvEuHkxn2bY862Ex8efDsnmQ/uffZ4ef75UwvA+jfO20my4eN257JTaNl U76le2UmAGw4GQ+4vM1gKpirCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTcITzH WTPNfqtiFyhDkbaMZPbfMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAWwnevfdR6jZ51quYay0uApdSaUHlJg7WXgfLc8Bc3S/id7XncVCH 1iUUjFRU9ix/BsG1na+0LL4WHSlALtIoiCmYgR8/Mf5WrIBgfovsBsnoR+h/gX50 BnPIDVbmn4xXYmAMu5nJ7mM4n3L7BJDAP9eOSaZ7rzcGmECPwcLxy1Rl1WhCn4Da 9lxVWxeenMyZIOq48oKtUMeKdf80xvnx/8TdhwqBe/ir9ZOT/4J82R22Zj9INO7i 1b7n2lBaTAlbr3Y4JuqFOuUrgCVuvGDlncTUaIC2Ceg/bLROJUXjKfvPxUtGzBgJ oQQBDT937KK429sn95x4kq4WkpymCuhY -----END CERTIFICATE-----Generated at Thu Jul 3 23:04:24 2025 by rpki-client