$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: 7WFrBEXGk6LaIfW2WU9IRIKPjaK+DqJdWRgc85KY+7U= Subject key identifier: 37:88:B7:BB:2C:CE:90:01:D6:13:92:7F:0F:12:6D:6A:C2:F6:2E:7E Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 70 Signing time: Sat 31 May 2025 06:28:35 +0000 Manifest this update: Sat 31 May 2025 06:28:35 +0000 Manifest next update: Sat 07 Jun 2025 06:28:35 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: a/Kff7tDwQ0w8OMvu7k7JIP/huuJQUrf26LaacUlTas=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: May 31 06:28:35 2025 GMT Not After : Jun 7 06:28:35 2025 GMT Subject: CN=683aa193-a86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8b:94:45:25:4d:a4:ae:2b:93:c2:7e:bb:68: 3c:1d:a1:e9:33:b1:09:6b:1a:8f:a2:3e:9b:2a:1a: 1f:b5:e1:f6:90:91:9f:dd:7f:f1:d2:d9:5e:c3:9a: 7a:af:27:b4:db:5b:6d:7e:44:69:31:0a:b7:17:5e: 7a:74:80:7b:b4:d4:44:61:d5:49:ee:b6:d6:91:e4: ff:c1:a7:19:78:be:3c:3d:3a:6a:ec:a7:99:9b:c2: 30:31:53:74:36:11:eb:16:77:55:dc:80:82:ee:1d: d3:37:97:74:cd:fb:9f:ec:57:43:af:1e:90:fd:fe: 31:cf:5f:2e:50:f3:8c:ac:c7:53:ac:71:f9:15:bc: 11:54:25:fb:bc:fc:bd:de:b8:fd:cf:86:75:13:f1: 2e:4f:db:73:63:a8:48:06:7c:28:5f:29:93:1a:a7: aa:19:0c:f6:c8:23:71:e4:f7:33:ee:52:71:c9:b5: 5b:58:69:57:a8:90:f8:96:43:15:51:a9:c8:19:b7: cc:1e:ce:c0:a9:15:08:b9:f5:89:ce:85:a2:3b:0e: ba:48:76:6c:03:43:21:8c:bc:a6:62:cb:71:06:0f: 17:63:4b:99:39:3a:d6:d2:20:9c:00:72:1c:c7:23: be:61:0a:97:7f:11:17:eb:b7:b4:2f:3b:3e:58:56: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:88:B7:BB:2C:CE:90:01:D6:13:92:7F:0F:12:6D:6A:C2:F6:2E:7E X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:21:f6:d7:ea:c1:db:fd:29:0c:21:8a:3f:a9:85:36:c1:da: c1:c1:b8:53:e8:f5:11:cc:ee:0a:9e:df:44:8d:cf:cf:db:de: aa:e1:23:ae:5f:f3:f4:64:03:40:74:a8:66:cc:ec:43:a5:f9: 5d:82:d2:13:62:54:82:aa:a3:30:cb:2f:79:25:5c:24:b6:0b: c9:39:d4:97:e7:3f:cc:a5:45:11:22:a8:ac:94:22:9d:c2:2e: 95:38:3b:ea:6b:d8:2d:8b:e5:42:9d:0b:d6:72:b4:29:fa:63: 5c:52:ba:94:ba:ac:87:3b:a7:1e:57:3a:d7:6c:38:95:5d:2f: 5f:8a:b4:7d:97:c8:8c:7e:89:46:03:d3:fb:26:db:2d:a1:3f: 24:f2:e1:da:5a:56:02:80:ed:b6:c5:ca:6e:de:24:94:30:c0: b6:7d:8c:d3:f8:db:fb:37:9d:78:9c:17:d7:f6:9f:d8:f4:e8: 1c:32:2b:f4:7f:5b:b8:6e:dc:97:76:30:d0:5c:59:fb:c7:4d: 81:79:4a:a4:a3:cf:fb:b9:20:1b:6c:2e:7a:07:12:d5:c7:4a: b2:0d:73:3d:17:58:03:e5:e7:92:0d:f9:e5:3d:a8:cf:8d:0d: 7f:a9:78:1b:7f:2d:15:ec:8d:60:dd:ca:38:d8:7c:b8:a7:63: 9b:32:be:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMxQjExMC8GA1UEBRMoMkNGQjBDRUY2RDE2RDY2NzZFRUEyMTE2NDNFQzhFODVD MjVDRjJGRjAeFw0yNTA1MzEwNjI4MzVaFw0yNTA2MDcwNjI4MzVaMBgxFjAUBgNV BAMTDTY4M2FhMTkzLWE4NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwi5RFJU2kriuTwn67aDwdoekzsQlrGo+iPpsqGh+14faQkZ/df/HS2V7Dmnqv J7TbW21+RGkxCrcXXnp0gHu01ERh1UnuttaR5P/Bpxl4vjw9Omrsp5mbwjAxU3Q2 EesWd1XcgILuHdM3l3TN+5/sV0OvHpD9/jHPXy5Q84ysx1OscfkVvBFUJfu8/L3e uP3PhnUT8S5P23NjqEgGfChfKZMap6oZDPbII3Hk9zPuUnHJtVtYaVeokPiWQxVR qcgZt8wezsCpFQi59YnOhaI7DrpIdmwDQyGMvKZiy3EGDxdjS5k5OtbSIJwAchzH I75hCpd/ERfrt7QvOz5YVt1hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN4i3uyzO kAHWE5J/DxJtasL2Ln4wHwYDVR0jBBgwFoAULPsM720W1mdu6iEWQ+yOhcJc8v8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzFCL0U1NzMwNkNBOUE3 MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBzTTcyMFcxbWR1NmlFV1EteU9oY0pjOHY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzFCL0U1NzMwNkNBOUE3MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1k dTZpRVdRLXlPaGNKYzh2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYh9tfqwdv9KQwhij+phTbB2sHBuFPo9RHM7gqe30SNz8/b3qrhI65f 8/RkA0B0qGbM7EOl+V2C0hNiVIKqozDLL3klXCS2C8k51JfnP8ylRREiqKyUIp3C LpU4O+pr2C2L5UKdC9ZytCn6Y1xSupS6rIc7px5XOtdsOJVdL1+KtH2XyIx+iUYD 0/sm2y2hPyTy4dpaVgKA7bbFym7eJJQwwLZ9jNP42/s3nXicF9f2n9j06BwyK/R/ W7hu3Jd2MNBcWfvHTYF5SqSjz/u5IBtsLnoHEtXHSrINcz0XWAPl55IN+eU9qM+N DX+peBt/LRXsjWDdyjjYfLinY5syvhU= -----END CERTIFICATE-----Generated at Sat May 31 17:02:19 2025 by rpki-client