$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft File: LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json) Hash identifier: tNEtK5HCBXs6L+l9S9jOIN9TU4p7Pp28SV4wS+xanNU= Subject key identifier: DD:E6:4C:48:30:9D:39:89:39:AE:83:52:E8:15:6E:7C:3A:E6:26:F6 Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft Manifest number: 3D Signing time: Sat 31 May 2025 07:11:32 +0000 Manifest this update: Sat 31 May 2025 07:11:32 +0000 Manifest next update: Sat 07 Jun 2025 07:11:32 +0000 Files and hashes: 1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: WpDnxW1kAreWRq/F1V8/Pvc/9v+G+eH5P5HpYwFHhlQ=) 2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: oEbfhc32xCsA7ht+olvhbX7mQyxDotxJHN+kwhGPI7w=) 3: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Validity Not Before: May 31 07:11:32 2025 GMT Not After : Jun 7 07:11:32 2025 GMT Subject: CN=683aaba4-e53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:5b:e9:68:a2:10:60:b6:f5:2c:40:7d:67: 90:bc:6c:1e:8b:f3:31:14:a8:f4:d7:51:d8:4d:f0: 5c:83:b7:88:11:a5:7f:ba:ee:e9:9b:7c:44:f4:8a: ba:22:72:ca:90:65:8b:7d:7c:cb:af:73:03:ac:ee: e5:ae:d1:05:50:e7:1a:46:70:6e:cb:d9:a2:57:38: 97:85:16:63:19:e5:28:a3:4f:4b:a3:27:eb:c1:c7: 15:47:41:c6:ab:cf:00:aa:ee:ff:64:8d:03:83:0e: a4:9e:a6:fa:c9:3f:d2:44:a9:6c:e7:55:1d:73:e9: a3:ec:3c:7d:ad:3f:9a:93:a2:66:d4:a2:14:9f:28: f8:9b:c6:8e:2b:47:be:c8:05:ae:ba:69:59:57:e9: 33:bf:46:1e:c1:be:cf:b1:20:8a:55:ec:9c:8c:eb: 6a:9a:4c:cb:58:78:bc:88:bf:dd:39:b8:d0:76:8a: 9e:98:ce:53:9d:3b:c9:87:0b:45:91:0b:36:3e:6e: c4:0d:01:b1:d9:fa:09:8f:80:8a:b6:23:01:d3:67: ab:93:a5:22:84:33:46:d5:76:32:61:84:2c:36:be: c2:58:c1:6e:a0:04:12:72:cf:91:19:d6:31:cb:02: 1a:53:23:e9:3e:de:c9:25:b8:37:e0:78:8a:0f:bd: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E6:4C:48:30:9D:39:89:39:AE:83:52:E8:15:6E:7C:3A:E6:26:F6 X509v3 Authority Key Identifier: keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bf:6f:8d:83:92:6b:f0:34:3c:7d:2e:ef:58:a7:e8:00:6c: 87:2d:c3:66:0c:95:0e:8e:e0:f1:dc:16:50:ea:11:a0:84:c2: a5:37:3b:2a:d2:83:6e:05:1a:8a:da:ec:39:68:b3:a9:29:6d: 14:ad:4e:1e:9c:f6:e4:64:0f:41:18:c6:33:6f:33:a3:b3:d0: 44:85:19:fe:0f:dd:11:51:09:f8:7b:87:e8:b5:79:06:95:1a: eb:3e:cd:29:40:a7:f0:c0:49:e3:4b:90:f4:5c:e8:8f:37:20: 38:eb:46:a3:8a:db:30:af:f0:85:d3:65:38:92:73:aa:73:32: 38:24:07:0d:18:24:2f:f5:ce:c1:84:fa:fb:fe:88:ee:65:76: 6c:0d:b3:9c:3b:6c:b1:60:89:48:2f:91:bf:a6:80:ce:fc:5e: f6:ea:d5:99:94:92:42:d8:73:1b:a2:d9:48:25:f3:03:f2:ba: ca:f5:d4:33:23:75:e4:e0:fe:ae:d1:9c:14:ab:61:bc:49:6b: 27:f6:77:a8:d1:b7:8d:15:3c:23:b5:b4:0d:00:46:5d:b7:28: f8:5d:c6:91:16:da:87:b8:b7:1f:9d:70:47:b7:e1:d5:9d:85: f9:2c:84:a7:b0:78:02:ff:80:f6:65:e9:b0:1a:89:e9:2c:8c: 73:c4:21:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0EyRDExMC8GA1UEBRMoMkQ1QjlCOTU0Q0QxNzNCNzNGRjA4N0RFQTYxODc5RTQ4 MDUxRDIzQjAeFw0yNTA1MzEwNzExMzJaFw0yNTA2MDcwNzExMzJaMBgxFjAUBgNV BAMTDTY4M2FhYmE0LWU1M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbnFvpaKIQYLb1LEB9Z5C8bB6L8zEUqPTXUdhN8FyDt4gRpX+67umbfET0iroi csqQZYt9fMuvcwOs7uWu0QVQ5xpGcG7L2aJXOJeFFmMZ5SijT0ujJ+vBxxVHQcar zwCq7v9kjQODDqSepvrJP9JEqWznVR1z6aPsPH2tP5qTombUohSfKPibxo4rR77I Ba66aVlX6TO/Rh7Bvs+xIIpV7JyM62qaTMtYeLyIv905uNB2ip6YzlOdO8mHC0WR CzY+bsQNAbHZ+gmPgIq2IwHTZ6uTpSKEM0bVdjJhhCw2vsJYwW6gBBJyz5EZ1jHL AhpTI+k+3skluDfgeIoPvScfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3eZMSDCd OYk5roNS6BVufDrmJvYwHwYDVR0jBBgwFoAULVublUzRc7c/8Ifephh55IBR0jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDQTJELzI1NjE4N0YyRUY4 NzExRUZBN0IxQzIzMEM0RjlBRTAyL0xWdWJsVXpSYzdjXzhJZmVwaGg1NUlCUjBq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFZ1YmxVelJjN2NfOElmZXBoaDU1SUJSMGpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD QTJELzI1NjE4N0YyRUY4NzExRUZBN0IxQzIzMEM0RjlBRTAyL0xWdWJsVXpSYzdj XzhJZmVwaGg1NUlCUjBqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEe/b42DkmvwNDx9Lu9Yp+gAbIctw2YMlQ6O4PHcFlDqEaCEwqU3OyrS g24FGora7Dlos6kpbRStTh6c9uRkD0EYxjNvM6Oz0ESFGf4P3RFRCfh7h+i1eQaV Gus+zSlAp/DASeNLkPRc6I83IDjrRqOK2zCv8IXTZTiSc6pzMjgkBw0YJC/1zsGE +vv+iO5ldmwNs5w7bLFgiUgvkb+mgM78Xvbq1ZmUkkLYcxui2Ugl8wPyusr11DMj deTg/q7RnBSrYbxJayf2d6jRt40VPCO1tA0ARl23KPhdxpEW2oe4tx+dcEe34dWd hfkshKeweAL/gPZl6bAaieksjHPEIQw= -----END CERTIFICATE-----Generated at Sat May 31 16:33:10 2025 by rpki-client