$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: bfpvkK1R6b5h0exyCGvkcqViSC3nXZ0e2+comUQAFrw= Subject key identifier: 3C:0D:4D:88:8A:C6:89:7B:CA:3B:B7:50:75:55:5F:A8:DB:54:3A:98 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: F9 Signing time: Sun 01 Jun 2025 04:52:19 +0000 Manifest this update: Sun 01 Jun 2025 04:52:18 +0000 Manifest next update: Sun 08 Jun 2025 04:52:18 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: 9Rq/p35fHBe9l8KOg8yl8RMiZCqMD2mMJBKUs9D6udQ=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Jun 1 04:52:18 2025 GMT Not After : Jun 8 04:52:18 2025 GMT Subject: CN=683bdc83-f890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:a4:09:26:ff:35:02:4a:42:da:ff:22:e0: 0c:2a:ed:ce:dc:21:6a:73:90:2f:88:5a:b1:51:32: 60:a1:1b:ab:b5:87:c6:4a:b0:d1:54:86:8f:44:14: fd:a3:07:34:93:0e:ab:41:ec:99:cc:64:1f:33:f7: 0d:0e:ce:76:92:07:86:0d:70:84:bb:f7:91:97:bf: 87:32:eb:9c:41:a7:73:0a:f4:63:22:a5:90:f7:bb: 62:e7:88:00:ee:5c:99:13:53:a6:9d:19:42:3d:15: e9:86:7a:a2:63:08:82:f4:16:88:42:3d:dd:d1:66: e6:52:0e:ca:c2:9d:6e:2b:c3:ee:62:bd:74:2c:c9: ff:9e:5f:45:44:8b:d5:99:6d:cc:33:6b:97:09:7f: d6:a6:83:3b:6b:94:f4:f5:aa:91:15:94:de:fa:e2: 28:47:1d:d5:3e:60:04:d5:c0:e6:a0:37:8f:f1:d9: 54:39:2c:c0:91:ac:36:73:86:95:79:fc:f9:e3:19: 47:74:44:7c:4c:54:aa:72:a8:84:61:a3:d7:3a:1a: f2:0a:7b:45:5c:9a:6d:dd:11:84:1c:fd:ea:ec:1c: a3:ce:10:c1:46:59:07:7b:c0:63:db:59:bb:7c:22: f8:e2:75:cc:71:e0:d6:f6:6c:02:d2:f5:50:1c:9e: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0D:4D:88:8A:C6:89:7B:CA:3B:B7:50:75:55:5F:A8:DB:54:3A:98 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3e:d1:ef:36:b3:3b:51:91:bc:c4:12:e9:6d:60:df:ff:a5: 94:ae:03:54:e6:b8:15:23:7c:b3:dd:73:68:9c:fe:a5:ea:df: 32:e4:fb:01:ee:d8:c3:b1:36:3c:c4:d8:28:e8:76:7a:7d:34: 81:a4:cd:36:81:35:8c:72:5b:a4:62:5d:72:eb:ac:e5:5e:1d: 93:4a:70:80:c9:4a:a3:75:1e:75:88:c7:a8:c6:1c:ce:8a:5f: c8:a5:13:f4:34:18:0d:0d:3c:4c:40:37:f0:15:19:d0:6c:91: eb:37:81:97:c9:2d:04:3b:a1:6f:e7:f2:1b:94:02:21:57:5e: 8b:5c:80:96:41:99:b2:e8:8a:d2:49:1a:c2:4a:eb:be:20:44: 3e:69:00:b9:df:81:1b:8c:36:5a:02:c3:d3:6d:17:8b:60:e8: 90:49:b4:3a:5d:6b:19:e8:e8:9f:32:1b:3e:2b:c7:8b:74:f2: b7:88:fb:cd:dd:91:e9:11:bc:ed:ae:61:1e:95:dd:28:95:c3: 02:4b:f4:95:4b:0a:f2:b3:49:e3:47:36:16:08:ab:62:34:e6: a9:bc:ae:52:1a:64:95:71:59:1d:31:6b:58:4a:40:e0:d0:e5: 69:af:42:2b:70:d5:62:3f:f0:5a:ff:9c:9b:a7:2b:57:0c:18: 36:3e:63:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwNjAxMDQ1MjE4WhcNMjUwNjA4MDQ1MjE4WjAYMRYwFAYD VQQDEw02ODNiZGM4My1mODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLmkCSb/NQJKQtr/IuAMKu3O3CFqc5AviFqxUTJgoRurtYfGSrDRVIaPRBT9 owc0kw6rQeyZzGQfM/cNDs52kgeGDXCEu/eRl7+HMuucQadzCvRjIqWQ97ti54gA 7lyZE1OmnRlCPRXphnqiYwiC9BaIQj3d0WbmUg7Kwp1uK8PuYr10LMn/nl9FRIvV mW3MM2uXCX/WpoM7a5T09aqRFZTe+uIoRx3VPmAE1cDmoDeP8dlUOSzAkaw2c4aV efz54xlHdER8TFSqcqiEYaPXOhryCntFXJpt3RGEHP3q7ByjzhDBRlkHe8Bj21m7 fCL44nXMceDW9mwC0vVQHJ5UhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwNTYiK xol7yju3UHVVX6jbVDqYMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuPtHvNrM7UZG8xBLpbWDf/6WUrgNU5rgVI3yz3XNonP6l6t8y5PsB 7tjDsTY8xNgo6HZ6fTSBpM02gTWMclukYl1y66zlXh2TSnCAyUqjdR51iMeoxhzO il/IpRP0NBgNDTxMQDfwFRnQbJHrN4GXyS0EO6Fv5/IblAIhV16LXICWQZmy6IrS SRrCSuu+IEQ+aQC534EbjDZaAsPTbReLYOiQSbQ6XWsZ6OifMhs+K8eLdPK3iPvN 3ZHpEbztrmEeld0olcMCS/SVSwrys0njRzYWCKtiNOapvK5SGmSVcVkdMWtYSkDg 0OVpr0IrcNViP/Ba/5ybpytXDBg2PmOu -----END CERTIFICATE-----Generated at Mon Jun 2 18:44:55 2025 by rpki-client