$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json) Hash identifier: m99E790tnR61WZeStHG5v42irYjAY5C9wb3wazmEj64= Subject key identifier: E7:CF:04:46:C5:D9:8A:BF:FE:73:E2:22:A6:B3:06:00:12:58:C6:22 Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft Manifest number: 0654 Signing time: Wed 04 Jun 2025 22:21:49 +0000 Manifest this update: Wed 04 Jun 2025 22:21:49 +0000 Manifest next update: Wed 11 Jun 2025 22:21:49 +0000 Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: xWXS9NSk8rfBzHDni1BoZnlEFcD/fMKYMMEmyoCJvx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Validity Not Before: Jun 4 22:21:49 2025 GMT Not After : Jun 11 22:21:49 2025 GMT Subject: CN=6840c6fd-29a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:af:ee:e8:d4:b4:96:76:61:f3:c5:34:93: da:34:bf:ad:1c:be:28:4e:8e:2f:c3:fd:fb:6b:69: 29:0b:a8:2f:8a:3e:81:01:4a:ea:23:6f:14:a7:62: c5:c2:c5:7b:a8:15:a4:f1:ad:3a:6a:63:57:79:a0: f6:1a:7d:43:83:6d:9f:ba:67:b1:bb:09:81:ba:4d: cc:fe:e6:d6:2d:34:1a:31:bf:07:19:f2:e1:c6:f0: 12:f2:c9:d9:e4:6b:c0:87:28:c5:90:15:ca:b5:56: 69:57:bc:90:d8:44:9e:31:67:81:05:41:9e:5e:33: 94:22:05:81:a6:58:f7:da:5a:b7:45:20:d0:23:70: d4:39:86:42:48:13:6f:d5:37:16:5c:66:16:37:13: b0:03:5b:bd:8c:e9:ff:99:5c:4e:1a:4c:a2:79:53: 98:19:ed:0b:7a:9e:d9:e3:d1:3a:2e:bb:59:cd:eb: dd:c3:a1:8c:bf:8b:8b:56:cd:01:ad:4d:df:48:d1: e6:4f:7f:60:25:f5:8a:af:ae:b2:47:6c:a5:e2:50: fd:e9:e4:ec:7a:96:91:d1:6c:a5:a2:b0:4d:9c:74: da:7f:88:f9:14:6c:3f:cc:24:7d:50:2a:af:da:dc: 8a:48:3f:a5:be:6e:22:c0:45:f9:cb:ca:92:0b:e0: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CF:04:46:C5:D9:8A:BF:FE:73:E2:22:A6:B3:06:00:12:58:C6:22 X509v3 Authority Key Identifier: keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d7:7b:09:c5:a8:09:ca:32:0b:4f:fd:4a:f5:3b:a1:d5:00: 8a:3f:ba:ce:05:b3:58:90:33:ec:5b:2b:a0:48:27:1d:6a:e1: 55:74:aa:2c:07:b4:d5:47:86:a4:0b:35:8d:7e:8e:f3:b7:9c: 9d:ed:11:00:27:b4:16:d0:45:71:34:16:5c:db:2e:33:dc:5e: ba:3b:28:06:46:17:c5:17:61:69:57:4b:a0:6f:7c:cc:00:a7: 45:f8:e9:f7:d1:e6:c3:98:00:9e:71:f2:de:0e:57:fd:f3:be: 91:d2:0e:dd:37:54:d4:e7:dd:33:dc:c4:ed:b9:dd:b7:d8:9e: 54:7c:55:cb:03:c8:3d:19:0e:03:ab:0e:54:7c:ff:46:90:36: 71:65:03:f0:70:5b:42:f4:a2:b8:64:60:ad:83:de:3c:d3:ec: c8:52:72:bf:6f:67:5e:96:73:96:45:a8:db:cd:72:96:5f:e4: a8:49:59:31:a0:52:21:84:bd:15:9f:f6:e2:a2:28:4a:ae:41: de:8b:28:20:48:57:1d:d8:fe:9c:d2:bb:b6:e0:36:13:41:8a: 1a:12:0c:e7:85:84:4f:bd:05:1c:15:4e:07:96:88:4e:c4:63: 81:a1:a3:e9:cb:05:cc:1c:f6:40:12:23:5c:c8:16:83:26:10: 42:5d:1d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMTMxMTAvBgNVBAUTKDJFMTU5NjM4Q0I3OTBGNzk0NTE3MjJFNTJBQ0VCNERB ODA1RjhCOTcwHhcNMjUwNjA0MjIyMTQ5WhcNMjUwNjExMjIyMTQ5WjAYMRYwFAYD VQQDEw02ODQwYzZmZC0yOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEiv7ujUtJZ2YfPFNJPaNL+tHL4oTo4vw/37a2kpC6gvij6BAUrqI28Up2LF wsV7qBWk8a06amNXeaD2Gn1Dg22fumexuwmBuk3M/ubWLTQaMb8HGfLhxvAS8snZ 5GvAhyjFkBXKtVZpV7yQ2ESeMWeBBUGeXjOUIgWBplj32lq3RSDQI3DUOYZCSBNv 1TcWXGYWNxOwA1u9jOn/mVxOGkyieVOYGe0Lep7Z49E6LrtZzevdw6GMv4uLVs0B rU3fSNHmT39gJfWKr66yR2yl4lD96eTsepaR0WylorBNnHTaf4j5FGw/zCR9UCqv 2tyKSD+lvm4iwEX5y8qSC+CcfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfPBEbF 2Yq//nPiIqazBgASWMYiMB8GA1UdIwQYMBaAFC4VljjLeQ95RRci5SrOtNqAX4uX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxMy8wRkE1RjBEMDg2 NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQzbEZGeUxsS3M2MDJvQmZp NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xoV1dPTXQ1RDNsRkZ5TGxLczYwMm9CZmk1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxMy8wRkE1RjBEMDg2NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQz bEZGeUxsS3M2MDJvQmZpNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg13sJxagJyjILT/1K9Tuh1QCKP7rOBbNYkDPsWyugSCcdauFVdKos B7TVR4akCzWNfo7zt5yd7REAJ7QW0EVxNBZc2y4z3F66OygGRhfFF2FpV0ugb3zM AKdF+On30ebDmACecfLeDlf9876R0g7dN1TU590z3MTtud232J5UfFXLA8g9GQ4D qw5UfP9GkDZxZQPwcFtC9KK4ZGCtg9480+zIUnK/b2delnOWRajbzXKWX+SoSVkx oFIhhL0Vn/bioihKrkHeiyggSFcd2P6c0ru24DYTQYoaEgznhYRPvQUcFU4HlohO xGOBoaPpywXMHPZAEiNcyBaDJhBCXR06 -----END CERTIFICATE-----Generated at Fri Jun 6 17:04:48 2025 by rpki-client