$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json) Hash identifier: FxMdqHAWuTdEitVh1YVU4oKJHqJ4ZZj5l6U33BVy578= Subject key identifier: 14:E3:51:3E:ED:66:2D:72:CB:4E:51:C2:37:AC:60:0B:50:78:B1:2F Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft Manifest number: 27 Signing time: Sat 31 May 2025 07:21:08 +0000 Manifest this update: Sat 31 May 2025 07:21:08 +0000 Manifest next update: Sat 07 Jun 2025 07:21:08 +0000 Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: FZl9pIy8UM94Z1j+QFsRCIqVbs2y5zjhdomAvGvPrzg=) 2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: riovgsjK6T9Xk/OVypXbdv81H28kZxqc1J6kqB+epyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Validity Not Before: May 31 07:21:08 2025 GMT Not After : Jun 7 07:21:08 2025 GMT Subject: CN=683aade4-a0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d8:1d:f3:40:c0:94:0a:35:b0:a8:ce:27:3e: a2:1a:0f:ef:0b:91:28:89:18:4d:53:40:4a:01:cd: 5f:e7:01:40:c9:2a:d5:36:2f:37:3c:09:8c:82:c0: 79:3b:59:6f:e8:30:64:f0:be:8d:d7:2d:67:28:d0: 4c:67:72:22:74:84:ec:84:5f:73:77:a6:04:b4:0b: 8c:14:46:a7:88:d6:35:05:fc:48:b1:49:b4:f0:e4: 19:12:92:f0:dc:0e:94:79:28:b3:77:93:8e:eb:a2: 39:92:ba:36:16:ca:88:15:41:0a:6b:ab:ac:e1:f3: d8:15:a7:af:3b:75:73:d2:52:f1:53:44:ef:da:7c: bc:83:e2:cc:4d:4b:39:2f:8e:a1:b3:2c:06:15:62: 15:3e:ce:60:98:8f:73:a1:49:f0:6a:ed:2c:3f:7d: 72:41:d2:59:e3:c4:35:bd:3d:ff:4c:c9:ea:7a:f9: 45:15:13:4b:58:31:f5:14:4b:1b:5a:1b:fe:b8:20: 8d:13:3b:1e:09:c6:d3:95:01:d0:23:da:e6:a7:3f: 8f:e2:25:d8:e1:65:b3:eb:80:94:fd:cc:16:2c:bc: 41:ee:4c:a5:4b:34:3b:d3:0e:da:ad:58:58:15:dd: f1:11:69:e8:17:4c:e7:e9:93:3c:ae:60:01:2f:6d: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E3:51:3E:ED:66:2D:72:CB:4E:51:C2:37:AC:60:0B:50:78:B1:2F X509v3 Authority Key Identifier: keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:49:07:5f:ab:39:55:de:84:90:ee:17:39:36:7d:0f:cd:bc: c1:6c:2e:58:1e:df:3d:04:dc:fd:c4:5e:84:9f:62:c5:d5:87: 17:d1:eb:9a:8e:37:6c:0c:91:24:89:cd:fe:10:64:c9:10:a6: b7:d1:d7:ff:eb:7a:ef:94:19:b2:7d:11:1f:2c:f7:c7:86:e0: 49:2b:09:31:a0:1c:63:4c:63:67:ab:8f:3f:7a:63:35:4a:85: b0:e0:11:bf:31:e1:09:2c:70:0a:ea:6b:78:d3:7d:76:4a:df: b5:3f:36:25:8d:ab:5f:21:1a:fa:c3:7a:14:95:67:c9:fa:52: c6:68:d6:be:fd:e4:e1:10:8d:b4:33:71:d8:93:e6:7f:79:c3: 6a:52:37:85:20:bb:93:da:3d:54:3a:79:11:03:e1:9a:f3:76: a1:29:2c:49:42:05:cf:3c:e1:bc:17:43:ef:63:85:35:cc:2a: f4:92:8d:26:b9:b1:d6:1f:44:cb:9f:34:9c:f0:ca:97:9b:a3: a6:91:6c:6c:16:ab:d4:68:87:59:a4:f4:c4:45:5e:59:5d:ff: f6:6a:c4:a7:41:5c:d5:67:58:e9:db:8c:e4:e5:d7:e5:a0:9c: 90:2f:4b:02:45:86:0e:62:a0:63:15:88:16:c7:89:ac:5b:d6: 89:5f:27:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI4NTExMC8GA1UEBRMoMkUwMzdGMjIxQzlBOEQ1RkRDQzg4QzQzQ0E4QjI1RDQ0 MzZCQjAzOTAeFw0yNTA1MzEwNzIxMDhaFw0yNTA2MDcwNzIxMDhaMBgxFjAUBgNV BAMTDTY4M2FhZGU0LWEwYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD42B3zQMCUCjWwqM4nPqIaD+8LkSiJGE1TQEoBzV/nAUDJKtU2Lzc8CYyCwHk7 WW/oMGTwvo3XLWco0ExnciJ0hOyEX3N3pgS0C4wURqeI1jUF/EixSbTw5BkSkvDc DpR5KLN3k47rojmSujYWyogVQQprq6zh89gVp687dXPSUvFTRO/afLyD4sxNSzkv jqGzLAYVYhU+zmCYj3OhSfBq7Sw/fXJB0lnjxDW9Pf9Myep6+UUVE0tYMfUUSxta G/64II0TOx4JxtOVAdAj2uanP4/iJdjhZbPrgJT9zBYsvEHuTKVLNDvTDtqtWFgV 3fERaegXTOfpkzyuYAEvbYcNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFONRPu1m LXLLTlHCN6xgC1B4sS8wHwYDVR0jBBgwFoAULgN/IhyajV/cyIxDyosl1ENrsDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjg1LzhDMjU4QjEyMDI3 QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdOX0loeWFqVl9jeUl4RHlvc2wxRU5yc0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjg1LzhDMjU4QjEyMDI3QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZf Y3lJeER5b3NsMUVOcnNEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9JB1+rOVXehJDuFzk2fQ/NvMFsLlge3z0E3P3EXoSfYsXVhxfR65qO N2wMkSSJzf4QZMkQprfR1//reu+UGbJ9ER8s98eG4EkrCTGgHGNMY2erjz96YzVK hbDgEb8x4QkscArqa3jTfXZK37U/NiWNq18hGvrDehSVZ8n6UsZo1r795OEQjbQz cdiT5n95w2pSN4Ugu5PaPVQ6eRED4ZrzdqEpLElCBc884bwXQ+9jhTXMKvSSjSa5 sdYfRMufNJzwypebo6aRbGwWq9Roh1mk9MRFXlld//ZqxKdBXNVnWOnbjOTl1+Wg nJAvSwJFhg5ioGMViBbHiaxb1olfJzI= -----END CERTIFICATE-----Generated at Sat May 31 17:30:14 2025 by rpki-client