$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: pZkr5dLTBVCSsTXi5v2ZeLd8OyETnUF8J0z6nWlgGc8= Subject key identifier: EC:F6:D6:32:2A:7E:E4:70:13:F2:7D:61:5E:B4:32:77:8E:E6:4A:76 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0365 Signing time: Tue 09 Sep 2025 01:03:16 +0000 Manifest this update: Tue 09 Sep 2025 01:03:16 +0000 Manifest next update: Tue 16 Sep 2025 01:03:16 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: OoUYuvozm5WvtOH8bKALAddjezzs+hnXkNtrsS/kXlw=) 2: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=) 3: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=) 5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=) 6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=) 7: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Sep 9 01:03:16 2025 GMT Not After : Sep 16 01:03:16 2025 GMT Subject: CN=68bf7cd4-cc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:88:9a:89:35:46:9b:ca:63:a6:ea:d4:de: 14:9a:8d:0a:ac:de:ea:26:ca:3e:c1:46:45:dd:19: 49:2f:7a:ac:1d:7d:ca:f3:de:2b:76:7a:2a:ea:1d: ab:59:14:ec:ca:be:5a:7d:4c:cd:26:cd:fc:b4:a9: 10:d8:5b:89:66:11:74:06:f8:27:67:c6:d8:01:a7: 1d:3a:c3:38:19:a6:84:a0:94:be:4c:56:a5:6d:38: d7:71:7c:7f:a2:52:ea:dc:ed:35:7c:08:ec:ec:cf: 1f:2f:b0:a6:e5:b1:dc:c3:54:cb:16:f4:2d:d6:f9: d1:d8:c1:e8:e5:11:34:ea:bb:50:19:97:b7:ae:6f: 09:79:4f:a4:90:0d:b4:63:98:21:08:46:1d:6c:c1: 72:7d:58:7f:9a:85:c8:a7:91:d2:8d:c7:ee:37:cf: b8:5a:ae:13:97:c4:53:72:c0:f8:ba:da:2d:d1:4d: 73:34:fd:69:2d:9e:0a:46:2c:fa:b3:10:2d:1e:27: 9c:ec:9c:ea:3e:55:2a:59:3a:ec:ce:a8:89:03:b2: 0b:03:2f:31:0e:e8:30:1b:8d:c0:21:43:f8:57:55: d6:01:c4:60:9a:f7:86:7e:92:06:9d:39:f6:11:c0: bb:df:88:2e:80:6f:76:c7:fe:51:46:9f:8b:cb:ef: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:D6:32:2A:7E:E4:70:13:F2:7D:61:5E:B4:32:77:8E:E6:4A:76 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fb:7b:4e:aa:50:4d:bc:92:8b:0c:76:22:83:68:ad:59:f4: fa:6b:04:7f:35:70:27:65:83:7c:0f:2b:fc:e4:90:b3:5b:1f: 3a:97:bc:e7:3c:c6:dd:2b:ae:a0:6d:cc:e9:cd:ab:a8:5f:50: fe:7d:1f:3b:2e:39:95:00:b0:5b:9a:91:d5:4e:ff:18:bc:0e: 54:f2:39:9e:17:59:73:65:19:ca:2f:4c:45:a4:35:ac:8e:bd: 3b:9c:25:7e:d8:5f:b0:5c:8c:5f:ec:67:0f:a7:c4:70:1b:1d: 45:83:9e:7a:af:54:09:ec:48:b2:93:b8:4e:d1:28:bc:4d:f8: 74:84:fc:bc:7d:37:b8:5a:6a:b1:6a:d6:04:c4:c5:1b:c4:92: 45:c0:90:12:d0:cb:58:a0:5a:a5:8e:e9:22:89:3f:ee:10:61: e2:6a:0e:55:40:78:23:78:06:12:10:11:f6:f2:a9:c8:3f:ef: 15:b3:81:73:46:39:98:bc:4f:55:9d:13:0a:ec:4d:c8:3b:77: 7a:d2:c2:73:5b:72:cb:23:32:40:4d:f7:e1:42:27:75:40:a4: 9c:cf:91:05:67:3e:57:b0:94:8e:e7:d3:a9:3f:92:8f:db:1c: 87:33:6e:77:78:f9:bf:ba:33:7a:54:5b:be:fd:f8:52:7c:46: ad:65:c1:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwOTA5MDEwMzE2WhcNMjUwOTE2MDEwMzE2WjAYMRYwFAYD VQQDEw02OGJmN2NkNC1jYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDyImok1RpvKY6bq1N4Umo0KrN7qJso+wUZF3RlJL3qsHX3K894rdnoq6h2r WRTsyr5afUzNJs38tKkQ2FuJZhF0BvgnZ8bYAacdOsM4GaaEoJS+TFalbTjXcXx/ olLq3O01fAjs7M8fL7Cm5bHcw1TLFvQt1vnR2MHo5RE06rtQGZe3rm8JeU+kkA20 Y5ghCEYdbMFyfVh/moXIp5HSjcfuN8+4Wq4Tl8RTcsD4utot0U1zNP1pLZ4KRiz6 sxAtHiec7JzqPlUqWTrszqiJA7ILAy8xDugwG43AIUP4V1XWAcRgmveGfpIGnTn2 EcC734gugG92x/5RRp+Ly++qRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz21jIq fuRwE/J9YV60MneO5kp2MB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC+3tOqlBNvJKLDHYig2itWfT6awR/NXAnZYN8Dyv85JCzWx86l7zn PMbdK66gbczpzauoX1D+fR87LjmVALBbmpHVTv8YvA5U8jmeF1lzZRnKL0xFpDWs jr07nCV+2F+wXIxf7GcPp8RwGx1Fg556r1QJ7Eiyk7hO0Si8Tfh0hPy8fTe4Wmqx atYExMUbxJJFwJAS0MtYoFqljukiiT/uEGHiag5VQHgjeAYSEBH28qnIP+8Vs4Fz RjmYvE9VnRMK7E3IO3d60sJzW3LLIzJATffhQid1QKScz5EFZz5XsJSO59OpP5KP 2xyHM253ePm/ujN6VFu+/fhSfEatZcGb -----END CERTIFICATE-----Generated at Wed Sep 10 17:40:07 2025 by rpki-client