$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: VWB8jFE9fQBK479yPCcCfp+/gnxS5KhBPnabPdSWlms= Subject key identifier: E3:F5:71:5E:79:AB:08:91:3B:37:EB:8F:7E:55:D6:A0:8D:F7:B4:F3 Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 134A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 12F3 Signing time: Fri 30 May 2025 17:16:16 +0000 Manifest this update: Fri 30 May 2025 17:16:16 +0000 Manifest next update: Fri 06 Jun 2025 17:16:16 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: H/tEs1eCDnQU4+EWRpTmPmuWZcwKZPiQ/Y70LFJ/+hI=) 2: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: ijr6UDNyvj4aysISbjMaLFQ8kk4sQ7342WXhcB82+Yo=) 3: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 4: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) 5: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4938 (0x134a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: May 30 17:16:16 2025 GMT Not After : Jun 6 17:16:16 2025 GMT Subject: CN=6839e7e0-b911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:78:af:63:a5:2c:63:cb:70:6c:2d:58:9f: 41:47:90:23:02:e3:28:87:8d:ac:bc:12:dd:03:d3: c3:a4:ac:4a:c1:c1:5b:77:99:56:de:66:3b:af:1a: 57:c6:09:47:0a:45:aa:62:3b:70:be:2d:d4:d9:56: 55:0b:c6:c2:65:4f:a7:db:3a:f2:5b:70:6c:89:1e: 00:1c:ad:1b:ea:fc:a5:ef:17:32:9a:a4:b8:56:c0: 83:27:bd:8b:e6:f9:9b:3b:a8:bd:0c:4b:ef:27:60: 83:99:80:8f:28:cf:f7:a5:81:bd:0b:18:8b:90:e7: 17:b5:9b:3b:ef:4f:96:fb:d8:90:e2:0d:94:d9:f1: ee:5d:8e:b1:18:2d:eb:78:9e:64:42:5f:96:07:20: c8:6a:d8:05:77:55:79:61:a8:1c:f1:38:f1:d9:f3: 43:44:41:78:3f:6f:86:26:f5:29:53:75:d2:bb:ce: cf:fd:c7:14:ab:5b:d5:57:e1:3d:56:3a:a5:ce:e2: 79:2b:07:4a:9c:67:2b:2a:44:19:22:92:20:40:a3: f4:8d:a2:59:5a:b5:f8:e4:fa:5b:03:88:3e:da:95: c6:63:46:58:ff:d8:95:13:c3:2c:01:6c:3e:32:4f: 94:80:31:80:10:03:79:60:7c:05:4c:c8:72:31:86: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:71:5E:79:AB:08:91:3B:37:EB:8F:7E:55:D6:A0:8D:F7:B4:F3 X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:11:d2:ec:e8:74:c0:dc:57:cf:cf:71:ff:d2:17:c2:8a:13: ae:6b:da:36:f3:ce:55:dd:41:df:98:11:fe:2d:65:29:75:13: 7c:95:12:bf:94:2b:80:5b:77:ec:c8:f5:93:27:82:73:ca:9b: 86:a4:ad:62:4b:a1:c5:a7:72:b0:bd:7e:e3:cb:0f:d9:9f:e3: ea:d4:18:da:38:cf:62:c2:49:04:ae:14:2a:d3:49:11:e2:ac: 7e:aa:75:55:1d:fb:fb:d6:87:26:fe:05:b5:71:71:d4:52:10: a3:5e:6e:c9:99:31:d5:7e:6a:9b:dc:a4:38:87:bd:57:10:37: c2:7e:a9:59:b9:e7:ee:e4:e3:29:5f:e1:9a:0a:e1:30:95:d3: 55:1d:51:c6:45:a4:e2:e6:2d:ca:25:8d:57:65:eb:13:6b:ec: 41:fc:99:41:64:64:3b:f4:d1:0b:0d:ac:d6:08:f9:78:1e:00: 5a:41:b7:0d:40:df:33:18:3a:8e:d6:01:68:f7:72:22:dc:64: 0c:2f:49:cf:f0:be:db:d6:b6:b2:92:dd:e1:33:79:1e:85:00: a2:26:91:e5:07:a5:9f:72:1a:34:a9:ba:8b:f1:6e:67:c4:4d: 54:9a:7a:4e:bb:56:30:2d:11:46:cd:92:ba:c4:3b:b2:67:ce: ff:4f:db:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUwNTMwMTcxNjE2WhcNMjUwNjA2MTcxNjE2WjAYMRYwFAYD VQQDEw02ODM5ZTdlMC1iOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e94r2OlLGPLcGwtWJ9BR5AjAuMoh42svBLdA9PDpKxKwcFbd5lW3mY7rxpX xglHCkWqYjtwvi3U2VZVC8bCZU+n2zryW3BsiR4AHK0b6vyl7xcymqS4VsCDJ72L 5vmbO6i9DEvvJ2CDmYCPKM/3pYG9CxiLkOcXtZs770+W+9iQ4g2U2fHuXY6xGC3r eJ5kQl+WByDIatgFd1V5Yagc8Tjx2fNDREF4P2+GJvUpU3XSu87P/ccUq1vVV+E9 VjqlzuJ5KwdKnGcrKkQZIpIgQKP0jaJZWrX45PpbA4g+2pXGY0ZY/9iVE8MsAWw+ Mk+UgDGAEAN5YHwFTMhyMYYutQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP1cV55 qwiROzfrj35V1qCN97TzMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAEdLs6HTA3FfPz3H/0hfCihOua9o2885V3UHfmBH+LWUpdRN8lRK/ lCuAW3fsyPWTJ4JzypuGpK1iS6HFp3KwvX7jyw/Zn+Pq1BjaOM9iwkkErhQq00kR 4qx+qnVVHfv71ocm/gW1cXHUUhCjXm7JmTHVfmqb3KQ4h71XEDfCfqlZuefu5OMp X+GaCuEwldNVHVHGRaTi5i3KJY1XZesTa+xB/JlBZGQ79NELDazWCPl4HgBaQbcN QN8zGDqO1gFo93Ii3GQML0nP8L7b1raykt3hM3kehQCiJpHlB6Wfcho0qbqL8W5n xE1UmnpOu1YwLRFGzZK6xDuyZ87/T9vv -----END CERTIFICATE-----Generated at Sat May 31 17:07:39 2025 by rpki-client