$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: oZEhZtTylTAxkvQuTf5qhqcdeewGR8l4OfeN/070Ogg= Subject key identifier: BA:28:6E:4A:B2:95:87:A9:E3:D6:49:65:45:44:6B:02:C3:B3:8B:C9 Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 89 Signing time: Sat 19 Jul 2025 06:49:49 +0000 Manifest this update: Sat 19 Jul 2025 06:49:49 +0000 Manifest next update: Sat 26 Jul 2025 06:49:49 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: nk2Ukn1DKu2z+K+WiQ7RrIVeUf2ca9x5rD+VDGc+A1E=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: Jul 19 06:49:49 2025 GMT Not After : Jul 26 06:49:49 2025 GMT Subject: CN=687b400d-c2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:4e:65:d9:17:82:fa:d3:99:05:6b:ff:21: 86:0c:5f:14:8c:2e:54:89:ba:e6:b2:07:01:c1:ea: 2e:b0:85:73:f4:e3:ee:0a:ec:5c:41:f5:3a:bb:f5: d2:d0:bd:7f:20:0f:d6:56:f4:4a:e3:ac:a3:9e:44: 30:52:df:89:49:dd:ae:b4:51:d7:a5:55:15:05:c9: 67:a8:53:6e:a8:61:af:79:0b:a2:87:44:6e:0c:78: 0a:71:cd:d3:20:41:1d:6f:14:52:f7:74:cd:82:2f: fa:f8:c8:83:51:c6:5a:83:4c:8f:50:2a:76:4d:da: 2f:1b:e4:ab:7b:35:5a:0e:09:f7:bd:96:0a:f5:46: e7:d4:7e:97:45:76:03:61:34:e4:75:77:43:90:76: 06:76:b8:3d:7f:c7:32:86:9d:90:15:22:a2:8c:cf: 50:e7:9c:7e:55:a6:3e:04:1c:d1:c7:4a:33:ad:80: 9b:9d:41:93:28:76:97:f8:bf:37:7f:d4:90:14:89: 7a:95:dd:15:c6:39:cd:07:c2:d7:1f:d5:97:c0:3f: 80:12:21:80:3c:48:e8:1a:db:64:50:59:b2:2f:0d: 8b:7f:1a:41:58:32:ad:d4:65:7f:e0:9a:7e:57:97: 71:7e:28:82:3e:8b:9f:77:e1:a9:84:0a:85:e1:e4: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:6E:4A:B2:95:87:A9:E3:D6:49:65:45:44:6B:02:C3:B3:8B:C9 X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4b:e2:f1:21:f0:82:c5:e6:05:f9:83:0d:95:44:75:1e:50: 67:c5:a6:4f:2d:c0:ef:7b:53:09:89:7a:17:30:06:5f:0c:4e: 2a:5c:45:14:1d:4c:39:c0:16:48:19:9d:aa:04:15:c1:3e:2a: 02:0b:bd:f6:40:3a:ff:93:dc:f6:dc:e3:9e:d7:31:5b:ee:db: 19:9d:45:1c:95:47:cd:fc:ae:12:ea:dc:1d:06:0c:59:c2:87: fa:c9:c0:d1:99:30:da:d0:66:65:a1:e8:bd:16:70:57:53:63: c1:01:9b:44:b9:01:e6:cc:e0:18:e8:e3:3a:52:a5:2e:ed:8d: 7c:cb:27:3a:d9:f6:9a:7c:9e:44:27:bd:a2:cc:ef:7d:be:7f: 56:67:61:b2:34:24:e6:45:e0:f3:f1:0e:1c:95:42:8d:bf:91: 9e:f6:9d:3c:9e:e5:8d:d0:cd:ac:ca:28:07:d8:51:a2:88:eb: 45:5f:2b:9a:ad:bb:07:63:16:77:6d:24:7f:be:ae:af:5a:79: ee:64:70:df:a3:c7:4b:bb:6f:54:c7:cd:80:2c:dd:c5:a9:e4: cd:f2:0f:15:e3:f8:71:9b:06:ad:5d:9f:c1:69:dd:f6:42:98: ad:a6:2d:5b:dd:cf:3f:1c:08:13:48:b3:2c:f3:4d:44:4b:8a: e2:ec:63:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMUIxMTAvBgNVBAUTKDJDRkIwQ0VGNkQxNkQ2Njc2RUVBMjExNjQzRUM4RTg1 QzI1Q0YyRkYwHhcNMjUwNzE5MDY0OTQ5WhcNMjUwNzI2MDY0OTQ5WjAYMRYwFAYD VQQDEw02ODdiNDAwZC1jMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNtOZdkXgvrTmQVr/yGGDF8UjC5UibrmsgcBweousIVz9OPuCuxcQfU6u/XS 0L1/IA/WVvRK46yjnkQwUt+JSd2utFHXpVUVBclnqFNuqGGveQuih0RuDHgKcc3T IEEdbxRS93TNgi/6+MiDUcZag0yPUCp2TdovG+SrezVaDgn3vZYK9Ubn1H6XRXYD YTTkdXdDkHYGdrg9f8cyhp2QFSKijM9Q55x+VaY+BBzRx0ozrYCbnUGTKHaX+L83 f9SQFIl6ld0VxjnNB8LXH9WXwD+AEiGAPEjoGttkUFmyLw2LfxpBWDKt1GV/4Jp+ V5dxfiiCPoufd+GphAqF4eQLGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoobkqy lYep49ZJZUVEawLDs4vJMB8GA1UdIwQYMBaAFCz7DO9tFtZnbuohFkPsjoXCXPL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMxQi9FNTczMDZDQTlB NzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFtZHU2aUVXUS15T2hjSmM4 djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMxQi9FNTczMDZDQTlBNzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFt ZHU2aUVXUS15T2hjSmM4djgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOS+LxIfCCxeYF+YMNlUR1HlBnxaZPLcDve1MJiXoXMAZfDE4qXEUU HUw5wBZIGZ2qBBXBPioCC732QDr/k9z23OOe1zFb7tsZnUUclUfN/K4S6twdBgxZ wof6ycDRmTDa0GZloei9FnBXU2PBAZtEuQHmzOAY6OM6UqUu7Y18yyc62faafJ5E J72izO99vn9WZ2GyNCTmReDz8Q4clUKNv5Ge9p08nuWN0M2syigH2FGiiOtFXyua rbsHYxZ3bSR/vq6vWnnuZHDfo8dLu29Ux82ALN3FqeTN8g8V4/hxmwatXZ/Bad32 Qpitpi1b3c8/HAgTSLMs801ES4ri7GMw -----END CERTIFICATE-----Generated at Sun Jul 20 13:43:17 2025 by rpki-client