$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: kZjZpwE+u8hGOqBnlEWDB94GU3xMLOafLx4sJQ0Z4Pc= Subject key identifier: 4B:02:39:B7:B8:D4:70:EF:E8:37:97:51:43:E1:2E:00:0B:A7:21:86 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: C4 Signing time: Sat 31 May 2025 05:24:42 +0000 Manifest this update: Sat 31 May 2025 05:24:41 +0000 Manifest next update: Sat 07 Jun 2025 05:24:41 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: QNQ7EY5sGjAvnWicBdlRIhxKSDLJz3xGHYCJtQtmHsU=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: May 31 05:24:41 2025 GMT Not After : Jun 7 05:24:41 2025 GMT Subject: CN=683a929a-a67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:fc:ab:2f:7b:e8:c0:9f:5b:4f:c6:83:bd: e3:1d:37:49:35:8f:d6:15:9b:85:6b:f1:c9:b7:0f: 06:ba:2d:01:ac:9c:a0:5c:b8:d2:86:52:79:9a:9f: d0:fa:49:14:c9:77:9c:55:72:af:2c:a7:34:fa:02: 52:69:6f:44:78:78:8d:83:a1:7e:4f:39:86:56:2e: 79:7a:be:31:23:f4:f6:ec:d5:f6:b0:b3:c1:7d:73: 1d:c3:35:82:0c:7d:ed:cb:96:d4:e2:f9:99:3b:e4: cd:d1:29:00:eb:e3:d2:6a:82:3f:75:82:95:08:72: b6:da:c1:11:94:b2:75:c7:7d:44:93:ee:d4:60:6c: 29:67:45:1b:67:7c:43:f3:b0:19:24:67:fc:6f:a4: 97:09:2d:2d:b4:c6:88:2c:0d:39:28:56:a0:ae:11: 35:17:5e:f9:85:50:e9:8b:4d:f5:05:56:97:40:b7: 8e:4c:b4:11:22:81:91:56:9d:ff:89:ae:a8:e9:60: 80:ff:b3:b0:80:b9:44:ce:4c:e8:f5:91:cc:e4:9b: 74:94:5c:8e:b0:e8:01:eb:cd:3d:c3:53:6e:ed:cc: 08:97:99:41:ec:df:6b:41:9a:81:91:05:16:bb:95: b0:45:5c:94:08:8e:fa:d3:fc:6e:6a:c2:61:f6:2f: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:02:39:B7:B8:D4:70:EF:E8:37:97:51:43:E1:2E:00:0B:A7:21:86 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a5:0f:e2:0a:a0:d0:ac:c8:b1:d6:10:71:2c:26:69:c8:49: 45:a5:9d:7e:1e:e6:bf:d1:c0:12:18:53:8f:a6:db:d4:66:c3: 94:74:ff:1c:e6:1a:12:37:0e:0b:9d:98:f4:2e:6e:5f:05:32: 05:94:1e:f0:c3:65:bb:3f:3f:e3:e4:25:44:e6:20:b3:49:c4: 59:21:35:af:95:42:65:f0:ae:d7:b6:53:71:3e:f8:13:6d:e5: f6:e3:fb:e6:ab:cd:65:0b:f3:18:3d:e9:1f:96:f7:92:86:e2: 9c:e6:cc:6f:ae:32:12:c7:d2:28:12:81:f9:cc:3e:df:c3:89: e4:e2:af:06:05:51:92:48:cc:af:07:f9:ad:31:50:f4:02:40: 4b:ad:a2:bd:87:c5:6d:56:2a:23:46:5d:85:10:9e:92:02:e1: 72:ae:41:1d:21:8b:f9:4d:02:51:02:0f:cd:5d:8a:12:a4:c7: 44:48:88:31:00:0a:77:de:7e:97:a9:06:bb:50:2f:d4:34:55: b8:7e:b8:c6:de:8b:1b:a3:ae:d0:7a:56:4a:e3:36:33:cb:17: bf:87:d6:98:cf:43:dd:ac:1f:3c:2a:fe:85:86:8a:60:52:b4: 7b:dd:fe:58:3e:14:15:96:03:42:f8:90:6b:bb:a2:2a:d3:9d: 8d:1a:94:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwNTMxMDUyNDQxWhcNMjUwNjA3MDUyNDQxWjAYMRYwFAYD VQQDEw02ODNhOTI5YS1hNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKD8qy976MCfW0/Gg73jHTdJNY/WFZuFa/HJtw8Gui0BrJygXLjShlJ5mp/Q +kkUyXecVXKvLKc0+gJSaW9EeHiNg6F+TzmGVi55er4xI/T27NX2sLPBfXMdwzWC DH3ty5bU4vmZO+TN0SkA6+PSaoI/dYKVCHK22sERlLJ1x31Ek+7UYGwpZ0UbZ3xD 87AZJGf8b6SXCS0ttMaILA05KFagrhE1F175hVDpi031BVaXQLeOTLQRIoGRVp3/ ia6o6WCA/7OwgLlEzkzo9ZHM5Jt0lFyOsOgB6809w1Nu7cwIl5lB7N9rQZqBkQUW u5WwRVyUCI760/xuasJh9i+cXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsCObe4 1HDv6DeXUUPhLgALpyGGMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjpQ/iCqDQrMix1hBxLCZpyElFpZ1+Hua/0cASGFOPptvUZsOUdP8c 5hoSNw4LnZj0Lm5fBTIFlB7ww2W7Pz/j5CVE5iCzScRZITWvlUJl8K7XtlNxPvgT beX24/vmq81lC/MYPekflveShuKc5sxvrjISx9IoEoH5zD7fw4nk4q8GBVGSSMyv B/mtMVD0AkBLraK9h8VtViojRl2FEJ6SAuFyrkEdIYv5TQJRAg/NXYoSpMdESIgx AAp33n6XqQa7UC/UNFW4frjG3osbo67QelZK4zYzyxe/h9aYz0PdrB88Kv6Fhopg UrR73f5YPhQVlgNC+JBru6Iq052NGpRO -----END CERTIFICATE-----Generated at Sat May 31 16:35:06 2025 by rpki-client