$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: YKpHBreu9NhVpri/rJb9Qc1Ld7viRw1tyS6+H0fMc+8= Subject key identifier: BE:7E:97:A4:D0:BB:37:51:A7:E2:CA:EE:5F:7F:35:81:75:8A:82:C9 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0313 Signing time: Tue 15 Apr 2025 00:53:54 +0000 Manifest this update: Tue 15 Apr 2025 00:53:53 +0000 Manifest next update: Tue 22 Apr 2025 00:53:53 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: XUVe69N+oXiGnVjgzlAJbe4zgQcbOToF4Qc26Tp94GY=) 2: 10D5A618C80411ECBA7BB174C4F9AE02.roa (hash: kudNvuOAJ7g4JEKXMXcZZMNyXS95FJFcLSknrEVaX8A=) 3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: TKnNgWGNwFoC8C24zbH99O5sozDHLNm2T5yHAR3Xfxw=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: BF6cZd20wS6vXmi4J2+LH+GU/32EXCZGZq32FPBE5bM=) 5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: m4xQJUZYqlletUsPZRxHk+Gm5/JsI9i5xKEsy9BARXw=) 6: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: iAJOypV0Ywq6kQD3jOtFOhaI+MrLN3HZqbGx/hK/XRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Apr 15 00:53:53 2025 GMT Not After : Apr 22 00:53:53 2025 GMT Subject: CN=67fdae21-a48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:86:77:8d:a0:e9:fa:ff:74:9e:73:a9:b7: bb:5e:00:e4:e4:5f:ef:f9:72:b9:3a:04:15:4e:37: cb:ef:31:a6:fa:fe:23:07:5d:73:da:4e:36:82:ae: 05:a9:4b:6f:21:ec:15:3e:48:9b:e6:9a:7c:eb:16: 0d:ab:ed:e0:80:65:3e:c9:3b:84:f5:5d:5a:59:e5: 1d:d5:e7:fd:0f:a2:f5:5e:b5:1c:4a:65:e4:de:54: 3b:5d:e5:37:7e:52:4f:02:1c:d4:f0:f1:33:79:82: 9b:79:db:52:e6:13:1d:35:be:26:75:10:1b:4a:cf: 6c:1a:9d:2f:9f:c3:94:cd:49:a6:04:41:04:94:1f: 3e:b6:3a:36:0c:28:a4:7b:0b:47:29:58:51:2e:be: f5:7c:33:12:6c:24:b3:77:ad:21:59:61:6d:fb:eb: e1:bc:d1:c7:f7:dc:06:41:64:6b:44:ed:72:39:c4: b9:23:4c:8c:e8:1f:48:57:56:e8:1b:ad:5a:06:b8: 25:55:c1:cd:15:aa:7c:b1:89:1e:28:da:82:9c:77: 1d:8c:ef:c4:2d:24:14:e9:48:15:5e:44:fb:04:c4: 67:1f:90:bb:5e:35:e7:20:a7:26:3e:74:72:b8:12: 14:61:56:f8:49:b6:fd:b6:ea:c4:26:16:77:8f:6b: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7E:97:A4:D0:BB:37:51:A7:E2:CA:EE:5F:7F:35:81:75:8A:82:C9 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:dd:09:ff:5c:28:03:a4:ea:ca:88:41:62:4e:3d:01:7b:54: 0f:8b:fe:65:4f:05:ae:b5:63:56:06:70:8a:fe:e8:08:ad:bd: 67:77:55:7f:f1:85:dd:57:8c:28:2a:ae:65:54:15:ef:fe:83: ae:68:2e:4f:b2:e4:b7:fc:ad:b6:2b:9b:34:a6:75:c7:e8:78: 80:c5:f1:dd:ce:5d:19:99:f4:03:23:b3:7b:cb:de:df:ce:6d: 03:69:8a:af:d8:47:4d:f6:cb:a1:46:f8:b9:47:04:69:89:05: 55:cc:b7:2e:1c:69:93:d4:f4:20:83:06:73:2f:6b:e4:e6:2c: 2a:53:71:33:9e:da:10:b7:3c:a9:16:de:cb:1a:67:3a:93:d9: 67:9c:b1:d2:90:e2:09:ba:8d:29:e6:99:03:90:58:c7:a2:7a: b2:39:83:8a:db:b0:8d:4c:18:45:fc:4d:91:b1:b7:af:6e:0f: 1f:74:b0:36:ae:37:bb:17:f5:1e:64:05:83:a5:44:8e:e8:d5: da:c9:ef:63:dc:37:33:69:50:e6:d7:b3:56:2f:35:a9:6e:af: ff:aa:77:1d:5f:f4:8c:53:2a:cb:2a:94:e5:c8:d9:90:66:7f: 9c:93:b8:87:ef:eb:03:f7:61:42:2a:52:28:db:bc:9b:5b:8c: 3d:12:08:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwNDE1MDA1MzUzWhcNMjUwNDIyMDA1MzUzWjAYMRYwFAYD VQQDEw02N2ZkYWUyMS1hNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mGGd42g6fr/dJ5zqbe7XgDk5F/v+XK5OgQVTjfL7zGm+v4jB11z2k42gq4F qUtvIewVPkib5pp86xYNq+3ggGU+yTuE9V1aWeUd1ef9D6L1XrUcSmXk3lQ7XeU3 flJPAhzU8PEzeYKbedtS5hMdNb4mdRAbSs9sGp0vn8OUzUmmBEEElB8+tjo2DCik ewtHKVhRLr71fDMSbCSzd60hWWFt++vhvNHH99wGQWRrRO1yOcS5I0yM6B9IV1bo G61aBrglVcHNFap8sYkeKNqCnHcdjO/ELSQU6UgVXkT7BMRnH5C7XjXnIKcmPnRy uBIUYVb4Sbb9turEJhZ3j2vWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5+l6TQ uzdRp+LK7l9/NYF1ioLJMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN3Qn/XCgDpOrKiEFiTj0Be1QPi/5lTwWutWNWBnCK/ugIrb1nd1V/ 8YXdV4woKq5lVBXv/oOuaC5PsuS3/K22K5s0pnXH6HiAxfHdzl0ZmfQDI7N7y97f zm0DaYqv2EdN9suhRvi5RwRpiQVVzLcuHGmT1PQggwZzL2vk5iwqU3EzntoQtzyp Ft7LGmc6k9lnnLHSkOIJuo0p5pkDkFjHonqyOYOK27CNTBhF/E2Rsbevbg8fdLA2 rje7F/UeZAWDpUSO6NXaye9j3DczaVDm17NWLzWpbq//qncdX/SMUyrLKpTlyNmQ Zn+ck7iH7+sD92FCKlIo27ybW4w9Egj/ -----END CERTIFICATE-----Generated at Wed Apr 16 17:14:18 2025 by rpki-client