$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: BRpLUAwuJaQDD5W5D/Zu3tLBcFHp4w3PB59zUg/VyRY= Subject key identifier: 4D:81:6A:82:AC:65:B4:C9:DE:4C:DC:6E:61:BF:33:0C:5B:AF:E1:05 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0D96 Signing time: Sun 02 Nov 2025 17:56:35 +0000 Manifest this update: Sun 02 Nov 2025 17:56:34 +0000 Manifest next update: Sun 09 Nov 2025 17:56:34 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: be+0yPlXSdGYxHNlmIjND6NE05ENuNbLeKg48u6esr8=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: +juOaIxrjQ6IhGwMB3Bm9h5unXUiB8xR+dHj1D1njhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Nov 2 17:56:34 2025 GMT Not After : Nov 9 17:56:34 2025 GMT Subject: CN=69079b53-6e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:dc:0a:75:a4:6b:fa:f1:15:14:66:99:b4: 14:a9:58:d7:9f:6a:15:a8:fe:b7:1c:52:80:69:d9: 2a:5a:2f:e0:ff:4b:1e:59:74:a2:f0:c7:49:ec:e4: ce:31:c0:cb:17:6b:35:5e:7f:4c:f8:5f:ed:be:3c: 8a:78:8f:8d:c8:ba:e9:b9:7c:56:3a:e4:ad:7b:13: 25:b2:70:be:2c:63:67:1f:e3:c2:1d:aa:fa:18:20: 25:4d:b6:f6:de:2c:ff:5a:f2:a1:51:cf:d5:ae:50: c5:57:56:79:c1:e2:ec:f0:30:c0:70:b3:49:d6:83: 15:b3:ef:c3:c1:45:c3:5c:65:e2:e3:d1:3a:b9:51: e4:0c:5d:5d:bc:10:d0:20:a5:9d:91:86:f5:38:47: c9:94:7f:97:b9:43:fb:c6:7d:92:1a:9e:f6:95:5f: e6:bc:7b:be:98:4d:a7:f1:67:8c:f1:50:16:e8:da: 6d:f3:00:aa:4b:22:72:08:e9:a8:d2:86:23:76:06: fe:00:19:b1:a6:8b:ea:c1:17:e4:fd:64:cc:a2:91: 60:4f:e5:f4:db:28:29:62:79:76:21:c2:7c:54:94: 05:0e:7f:df:ed:fa:b9:af:29:1d:40:08:dd:a4:e5: eb:3d:87:95:73:9a:6c:d4:8c:1e:b5:2f:12:94:7c: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:81:6A:82:AC:65:B4:C9:DE:4C:DC:6E:61:BF:33:0C:5B:AF:E1:05 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:80:a3:18:3e:47:98:8c:0a:01:1e:85:16:2b:cc:74:cd:cf: 70:0e:b0:95:19:c3:56:52:5c:49:d4:32:57:9e:10:35:76:cc: a3:a0:1f:4d:80:fd:b4:8f:d8:a5:ea:7e:d4:8a:30:7c:5f:fb: e2:7e:24:a6:f5:5b:bb:ad:33:f0:49:08:d3:91:ee:23:ca:9a: 6e:b8:f8:d8:af:1c:5d:32:75:cb:70:8c:09:56:35:bc:9d:58: 97:63:39:6c:24:7a:e4:da:ef:08:23:3c:a1:fe:f8:60:b7:ba: a4:1a:e3:30:17:1a:5d:70:00:7d:d6:0e:fd:89:7b:1d:5c:e2: e5:6c:de:ea:03:69:d7:ad:5d:57:6d:20:b6:62:d9:16:51:f3: 1c:96:39:3c:1b:99:6b:9f:4b:d7:e9:ed:83:60:93:a1:1d:90: 07:da:b8:d0:45:2f:16:a2:50:ac:1c:b4:97:c7:7c:1e:2b:d4: 1e:60:55:48:48:3b:79:b2:9e:d7:35:e4:63:f8:7b:b9:d4:e5: 85:60:d9:f2:78:78:7c:b0:ee:af:0a:fe:b4:d2:e0:05:57:b2: 40:72:6a:d1:d6:78:fd:b6:e1:ef:4d:de:71:1b:60:f4:d2:6b: 35:e4:ba:4e:42:2f:41:71:8a:4e:aa:61:b0:fe:b8:b9:14:01: 18:8d:b3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUxMTAyMTc1NjM0WhcNMjUxMTA5MTc1NjM0WjAYMRYwFAYD VQQDEw02OTA3OWI1My02ZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrrcCnWka/rxFRRmmbQUqVjXn2oVqP63HFKAadkqWi/g/0seWXSi8MdJ7OTO McDLF2s1Xn9M+F/tvjyKeI+NyLrpuXxWOuStexMlsnC+LGNnH+PCHar6GCAlTbb2 3iz/WvKhUc/VrlDFV1Z5weLs8DDAcLNJ1oMVs+/DwUXDXGXi49E6uVHkDF1dvBDQ IKWdkYb1OEfJlH+XuUP7xn2SGp72lV/mvHu+mE2n8WeM8VAW6Npt8wCqSyJyCOmo 0oYjdgb+ABmxpovqwRfk/WTMopFgT+X02ygpYnl2IcJ8VJQFDn/f7fq5rykdQAjd pOXrPYeVc5ps1IwetS8SlHxUowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2BaoKs ZbTJ3kzcbmG/Mwxbr+EFMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbgKMYPkeYjAoBHoUWK8x0zc9wDrCVGcNWUlxJ1DJXnhA1dsyjoB9N gP20j9il6n7UijB8X/vifiSm9Vu7rTPwSQjTke4jyppuuPjYrxxdMnXLcIwJVjW8 nViXYzlsJHrk2u8IIzyh/vhgt7qkGuMwFxpdcAB91g79iXsdXOLlbN7qA2nXrV1X bSC2YtkWUfMcljk8G5lrn0vX6e2DYJOhHZAH2rjQRS8WolCsHLSXx3weK9QeYFVI SDt5sp7XNeRj+Hu51OWFYNnyeHh8sO6vCv600uAFV7JAcmrR1nj9tuHvTd5xG2D0 0ms15LpOQi9BcYpOqmGw/ri5FAEYjbMd -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:03 2025 by rpki-client