$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: vkrteFo8pjfJVNOtzNbWFRFw7v4tZ5cxgcxA/Jlp1sw= Subject key identifier: 74:88:3E:AF:BC:66:AA:46:38:99:E5:32:B4:50:0E:FD:6B:F0:CB:29 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: EE Signing time: Fri 09 May 2025 04:22:13 +0000 Manifest this update: Fri 09 May 2025 04:22:13 +0000 Manifest next update: Fri 16 May 2025 04:22:13 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: PJwX6FSjzmYeq1tKXtCiSZNU6KRw9vzPFH3GifHvzTU=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: May 9 04:22:13 2025 GMT Not After : May 16 04:22:13 2025 GMT Subject: CN=681d82f5-3c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d8:06:fe:02:8d:e4:d4:b2:3a:8c:62:81:e3: a7:c2:9e:67:98:c1:69:ec:cd:48:5a:40:1a:33:7f: b2:3a:f4:ed:ab:45:8a:53:9d:ca:32:d1:9e:0e:49: 52:2b:fc:f9:af:03:e8:d7:a1:98:25:4b:69:3a:41: 92:70:7c:64:80:8a:4a:1e:10:04:f8:ea:a7:23:d1: f5:a7:2c:da:bb:58:4d:4f:6b:1d:ca:58:35:94:60: 6f:6a:1b:ce:ac:97:8e:18:de:3e:cb:6d:4a:4a:63: cd:c8:59:8c:0e:74:82:d2:8b:d6:10:18:bf:9d:8e: 6c:2d:ea:48:75:35:f9:3c:d2:ef:b4:b7:f2:00:8f: 4c:ca:bf:75:a5:b9:a1:c9:1d:f9:d8:a7:29:e7:04: 28:25:76:50:42:75:52:82:88:61:3a:0b:f5:ec:f4: 2a:f2:73:37:5f:f5:17:24:1a:9b:9e:6b:06:e7:ac: fe:b3:b8:39:c7:80:fe:a8:2b:d9:0b:77:bb:1d:8a: ba:85:a1:47:34:1c:f1:90:4b:81:55:73:70:5c:d1: ed:5f:0c:f4:bc:fd:df:cd:6c:f6:9f:34:db:20:b4: 98:cc:53:64:0d:02:87:83:ea:5f:48:00:a3:76:ce: 01:9a:7a:aa:83:1b:c8:e9:a2:08:dc:8b:ba:46:97: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:3E:AF:BC:66:AA:46:38:99:E5:32:B4:50:0E:FD:6B:F0:CB:29 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:22:c0:71:b7:ac:8d:14:49:25:a3:fe:02:47:7d:ca:35: 0a:20:69:df:f3:19:8b:4c:a7:e3:78:55:b5:71:c9:6a:88:33: 1f:06:b1:ba:6b:96:62:31:1d:db:fb:3f:87:17:6d:f0:4b:57: 1b:1b:4f:52:ad:4b:bb:8d:ea:30:73:fd:6f:1f:d7:21:6b:3c: 66:1d:27:f4:0f:3f:ea:83:36:94:f4:89:33:ce:50:1d:63:c0: 07:99:25:bf:d3:c1:9f:9d:42:1d:9a:75:01:37:11:44:e8:f0: cd:43:49:8e:07:15:e1:19:d3:43:1b:2d:a3:37:22:0d:15:51: 29:64:87:94:6a:ab:3e:26:6a:2f:63:c5:4f:d8:01:76:2f:6b: 57:94:9b:ab:f5:1e:bc:b6:16:5f:f4:3a:f0:03:3e:c9:7b:b9: 7b:fa:b3:8c:15:58:c0:29:4c:4f:10:f3:c6:ee:c1:03:df:26: 36:4c:c9:c4:42:9b:8b:de:94:e7:dc:ee:23:13:2a:73:28:a6: 09:b4:ee:75:fe:2b:06:71:a7:02:45:25:cb:94:de:95:1a:6c: 00:73:c2:ac:72:ef:14:97:4f:2d:47:e2:b4:1f:43:4c:11:32: 9a:d6:aa:3a:f3:00:b2:7d:6c:9f:31:52:10:e7:2c:22:47:d5: b0:0c:ae:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwNTA5MDQyMjEzWhcNMjUwNTE2MDQyMjEzWjAYMRYwFAYD VQQDEw02ODFkODJmNS0zYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tgG/gKN5NSyOoxigeOnwp5nmMFp7M1IWkAaM3+yOvTtq0WKU53KMtGeDklS K/z5rwPo16GYJUtpOkGScHxkgIpKHhAE+OqnI9H1pyzau1hNT2sdylg1lGBvahvO rJeOGN4+y21KSmPNyFmMDnSC0ovWEBi/nY5sLepIdTX5PNLvtLfyAI9Myr91pbmh yR352Kcp5wQoJXZQQnVSgohhOgv17PQq8nM3X/UXJBqbnmsG56z+s7g5x4D+qCvZ C3e7HYq6haFHNBzxkEuBVXNwXNHtXwz0vP3fzWz2nzTbILSYzFNkDQKHg+pfSACj ds4BmnqqgxvI6aII3Iu6RpcwhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSIPq+8 ZqpGOJnlMrRQDv1r8MspMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjtSLAcbesjRRJJaP+Akd9yjUKIGnf8xmLTKfjeFW1cclqiDMfBrG6 a5ZiMR3b+z+HF23wS1cbG09SrUu7jeowc/1vH9chazxmHSf0Dz/qgzaU9IkzzlAd Y8AHmSW/08GfnUIdmnUBNxFE6PDNQ0mOBxXhGdNDGy2jNyINFVEpZIeUaqs+Jmov Y8VP2AF2L2tXlJur9R68thZf9DrwAz7Je7l7+rOMFVjAKUxPEPPG7sED3yY2TMnE QpuL3pTn3O4jEypzKKYJtO51/isGcacCRSXLlN6VGmwAc8Kscu8Ul08tR+K0H0NM ETKa1qo68wCyfWyfMVIQ5ywiR9WwDK56 -----END CERTIFICATE-----Generated at Sun May 11 03:56:43 2025 by rpki-client