$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: ANeKCPulBoAxHRKXdQ/ne2EspAWk0HwmZQjnnUPirvo= Subject key identifier: 55:F9:8E:55:24:8E:18:1B:54:0C:3E:33:16:0F:2B:71:B7:A4:AE:5C Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 51 Signing time: Sat 29 Mar 2025 06:36:57 +0000 Manifest this update: Sat 29 Mar 2025 06:36:56 +0000 Manifest next update: Sat 05 Apr 2025 06:36:56 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: QOET1YiuK77RQsLW4gn6pu4Q9dR/Vu6TuF7tZnqYJFE=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B Validity Not Before: Mar 29 06:36:56 2025 GMT Not After : Apr 5 06:36:56 2025 GMT Subject: CN=67e79509-a40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:29:d8:08:73:8d:86:22:d1:f5:4a:e3:d4: df:f0:51:e9:42:23:95:36:54:b0:a6:62:b0:7c:4e: c4:85:b4:1d:5a:75:11:a6:a1:3c:53:40:ea:43:dd: 23:0d:9e:bc:0a:cc:62:16:e4:3a:0f:94:61:af:42: fc:58:62:51:48:78:1e:e4:1d:df:ba:d8:37:59:d2: 8d:b5:5e:82:d4:71:8c:bb:dd:28:f9:f4:3e:45:87: 3a:e0:03:d8:32:c3:26:2f:ec:7c:27:7c:76:31:04: c8:9b:f5:ab:58:a9:67:a5:93:6b:b4:b2:fe:70:fe: cb:42:a9:2b:d9:61:a0:93:a9:a8:29:04:e0:7a:e9: a4:cf:92:60:50:5d:63:11:ad:af:3f:0a:d9:04:fe: b7:d7:17:8d:7b:f4:d5:7b:28:f2:a7:65:8c:66:0c: e0:7c:a2:2a:1e:95:29:48:ae:ca:83:b9:37:b4:b4: 6e:1b:39:ff:c5:02:11:78:ba:82:f8:c5:c1:20:f1: 06:ec:6f:99:e7:c8:e4:88:2d:5f:bc:5d:16:4b:16: 26:df:80:e5:19:00:c1:28:f2:06:5c:38:5b:00:d3: 80:ba:7d:30:87:4f:97:a1:18:cc:24:15:58:97:df: 83:ed:23:c6:76:5b:2e:30:66:9d:60:5f:c9:78:1f: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F9:8E:55:24:8E:18:1B:54:0C:3E:33:16:0F:2B:71:B7:A4:AE:5C X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:66:f9:de:4b:8a:50:e5:c8:40:34:e4:e5:2a:74:8d:fa:e6: 1c:7e:25:5c:be:0b:12:48:5b:70:85:ea:f8:18:3c:13:9e:c8: 42:ae:c8:6b:03:14:08:ae:ca:94:7f:37:48:cd:0a:19:d6:b0: 91:da:82:22:a0:25:22:3d:5d:44:6c:10:41:73:9b:73:fb:14: 69:41:28:6f:f9:55:8c:e7:f1:ff:49:1f:e1:a4:81:d2:9f:8a: 56:cc:d4:99:16:20:2e:d9:58:ac:7b:38:ce:95:c4:eb:3b:87: dd:eb:a1:f8:20:a8:2b:7e:37:86:32:d8:b5:b2:93:b2:cf:03: fa:d8:d9:d5:e5:19:79:1e:3b:b1:04:7c:9e:ee:b2:66:04:91: 3d:6a:f7:3a:0b:e5:33:1c:f1:06:93:12:dd:06:8f:19:cc:89: bb:2f:5d:f0:6a:f6:c4:a8:50:a2:6d:ff:1d:78:23:f2:95:59: 10:52:15:06:15:ec:0c:a7:87:10:68:f2:d4:47:e3:c3:fd:70: 93:17:5e:95:0d:7f:65:6d:83:0e:a2:66:c2:f0:86:6c:26:26: 08:ae:d1:02:ab:d7:98:f5:fd:65:dc:3c:a0:1c:58:b6:84:89: 6d:41:f0:2b:a9:90:c7:d2:d6:a9:07:01:43:a5:05:56:f3:1a: a0:79:9f:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMxQjExMC8GA1UEBRMoMkNGQjBDRUY2RDE2RDY2NzZFRUEyMTE2NDNFQzhFODVD MjVDRjJGRjAeFw0yNTAzMjkwNjM2NTZaFw0yNTA0MDUwNjM2NTZaMBgxFjAUBgNV BAMTDTY3ZTc5NTA5LWE0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRNSnYCHONhiLR9Urj1N/wUelCI5U2VLCmYrB8TsSFtB1adRGmoTxTQOpD3SMN nrwKzGIW5DoPlGGvQvxYYlFIeB7kHd+62DdZ0o21XoLUcYy73Sj59D5FhzrgA9gy wyYv7HwnfHYxBMib9atYqWelk2u0sv5w/stCqSvZYaCTqagpBOB66aTPkmBQXWMR ra8/CtkE/rfXF4179NV7KPKnZYxmDOB8oioelSlIrsqDuTe0tG4bOf/FAhF4uoL4 xcEg8Qbsb5nnyOSILV+8XRZLFibfgOUZAMEo8gZcOFsA04C6fTCHT5ehGMwkFViX 34PtI8Z2Wy4wZp1gX8l4HzSZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVfmOVSSO GBtUDD4zFg8rcbekrlwwHwYDVR0jBBgwFoAULPsM720W1mdu6iEWQ+yOhcJc8v8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzFCL0U1NzMwNkNBOUE3 MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBzTTcyMFcxbWR1NmlFV1EteU9oY0pjOHY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzFCL0U1NzMwNkNBOUE3MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1k dTZpRVdRLXlPaGNKYzh2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFtm+d5LilDlyEA05OUqdI365hx+JVy+CxJIW3CF6vgYPBOeyEKuyGsD FAiuypR/N0jNChnWsJHagiKgJSI9XURsEEFzm3P7FGlBKG/5VYzn8f9JH+GkgdKf ilbM1JkWIC7ZWKx7OM6VxOs7h93rofggqCt+N4Yy2LWyk7LPA/rY2dXlGXkeO7EE fJ7usmYEkT1q9zoL5TMc8QaTEt0GjxnMibsvXfBq9sSoUKJt/x14I/KVWRBSFQYV 7AynhxBo8tRH48P9cJMXXpUNf2Vtgw6iZsLwhmwmJgiu0QKr15j1/WXcPKAcWLaE iW1B8CupkMfS1qkHAUOlBVbzGqB5n7k= -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:54 2025 by rpki-client