$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: qsfthzNeyelwzo3AttgedReIJBXgxZwDZc5yUPJkdL4= Subject key identifier: 03:7C:41:FC:0B:40:10:D1:DC:60:96:41:50:A6:60:80:8D:11:8C:96 Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 0110 Signing time: Sat 31 May 2025 04:36:58 +0000 Manifest this update: Sat 31 May 2025 04:36:57 +0000 Manifest next update: Sat 07 Jun 2025 04:36:57 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: jBr8dMcGa4/JUI33xx49p83pFg/kK9G5Uj+Ln53BD6o=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: g8Elzlw4tRoXrBliL3a4u/fyR/SHOUoxq/RpKAIAzgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: May 31 04:36:57 2025 GMT Not After : Jun 7 04:36:57 2025 GMT Subject: CN=683a8769-c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:b1:9e:29:be:41:21:ad:82:46:09:17:0b: f7:05:11:e1:45:44:00:d5:b7:39:59:4a:d5:89:c1: e5:3d:71:06:a4:6c:2a:ae:8c:4d:19:f3:01:f6:15: f9:19:16:e4:f0:d0:73:4c:d6:49:9a:29:55:1b:e1: ea:e5:31:b6:d9:b0:1c:c0:b6:e2:fa:69:18:ff:9f: 83:9c:e3:85:d0:4f:39:6e:2e:52:3a:d7:43:e7:76: 80:ba:5a:1e:cc:63:55:44:06:9d:0d:27:8e:d7:08: a1:4e:df:c0:a6:47:93:19:f9:34:e0:13:51:b9:f6: 06:7f:ce:53:15:af:6e:91:0e:3d:bd:83:14:31:51: 41:b0:79:06:fa:fb:4b:20:9e:18:9d:0a:c7:7d:71: 19:7a:2c:65:4d:49:df:28:65:32:14:00:6b:9d:e0: 1b:f7:a9:db:79:ea:89:cf:75:e0:1b:e0:2c:ce:8a: dc:70:cb:37:a2:62:28:b6:4c:5b:d6:a2:f0:d6:cb: 8a:0d:1d:d7:e3:77:f4:7b:be:65:62:06:f6:94:31: 6a:2b:7d:7e:89:2c:38:51:a3:00:bd:91:15:a8:0c: 14:c0:fd:11:59:7d:81:61:46:7f:ce:94:32:93:78: 10:c0:ef:3f:59:d7:60:ea:bd:d2:4e:8d:1f:c5:a0: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:41:FC:0B:40:10:D1:DC:60:96:41:50:A6:60:80:8D:11:8C:96 X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:79:a4:17:b2:d7:ec:d2:e5:1a:cb:f0:12:c9:35:ff:f4:49: d5:1c:f7:0a:48:e3:65:53:71:2a:fc:af:cd:7e:f6:b0:a2:6e: ea:76:89:7e:6f:90:2e:94:b0:fb:9f:97:04:ed:81:b6:3f:1d: 42:a2:f1:15:5a:7b:0e:fc:f8:c4:09:d8:b1:68:81:32:d1:8f: 33:22:2a:38:e7:10:f8:bb:b6:b9:98:86:30:03:6c:d8:e1:38: 95:3b:88:f0:48:80:56:8c:a5:d5:6d:72:e1:6f:58:a4:e7:7b: 80:a7:fe:89:7e:b4:a6:93:3d:61:4a:2d:b1:b5:3e:21:c0:c9: 36:12:f8:6d:64:52:9c:70:51:a7:fa:d2:67:6b:2c:9f:f1:7e: 40:4d:5d:58:a5:1f:97:9d:cb:a5:2c:d7:96:71:f5:b6:e1:28: c3:3d:36:c1:11:e6:2f:5e:ac:1c:cd:d6:27:c3:42:39:ce:f8: f2:f1:68:73:d3:69:a4:88:c5:d3:a4:c4:e0:0f:3e:b0:29:39: 21:cc:b4:3e:bd:a9:5a:39:2c:a6:de:2f:80:74:b3:1f:89:8c: 28:02:3e:dd:18:6b:aa:69:16:5d:aa:2e:53:c5:3d:12:f5:8a: 7c:72:f6:ac:77:b9:20:6b:90:60:2f:25:e2:94:16:d5:d4:18: 9f:39:00:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjUwNTMxMDQzNjU3WhcNMjUwNjA3MDQzNjU3WjAYMRYwFAYD VQQDEw02ODNhODc2OS1jOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucixnim+QSGtgkYJFwv3BRHhRUQA1bc5WUrVicHlPXEGpGwqroxNGfMB9hX5 GRbk8NBzTNZJmilVG+Hq5TG22bAcwLbi+mkY/5+DnOOF0E85bi5SOtdD53aAuloe zGNVRAadDSeO1wihTt/ApkeTGfk04BNRufYGf85TFa9ukQ49vYMUMVFBsHkG+vtL IJ4YnQrHfXEZeixlTUnfKGUyFABrneAb96nbeeqJz3XgG+AszorccMs3omIotkxb 1qLw1suKDR3X43f0e75lYgb2lDFqK31+iSw4UaMAvZEVqAwUwP0RWX2BYUZ/zpQy k3gQwO8/Wddg6r3STo0fxaAxeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN8QfwL QBDR3GCWQVCmYICNEYyWMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAneaQXstfs0uUay/ASyTX/9EnVHPcKSONlU3Eq/K/Nfvawom7qdol+ b5AulLD7n5cE7YG2Px1CovEVWnsO/PjECdixaIEy0Y8zIio45xD4u7a5mIYwA2zY 4TiVO4jwSIBWjKXVbXLhb1ik53uAp/6JfrSmkz1hSi2xtT4hwMk2EvhtZFKccFGn +tJnayyf8X5ATV1YpR+XnculLNeWcfW24SjDPTbBEeYvXqwczdYnw0I5zvjy8Whz 02mkiMXTpMTgDz6wKTkhzLQ+valaOSym3i+AdLMfiYwoAj7dGGuqaRZdqi5TxT0S 9Yp8cvasd7kga5BgLyXilBbV1BifOQCZ -----END CERTIFICATE-----Generated at Sat May 31 17:04:57 2025 by rpki-client