$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: 8B9kHxFcAwb1NsnHDz/nzjHpQ+F0d1imB8aGb14DHws= Subject key identifier: F3:7C:14:A5:61:7A:B5:88:EA:01:0F:8F:0A:4E:56:01:01:B2:DE:A6 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 012A Signing time: Fri 05 Sep 2025 05:00:17 +0000 Manifest this update: Fri 05 Sep 2025 05:00:16 +0000 Manifest next update: Fri 12 Sep 2025 05:00:16 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: gj1HnMq5WfRorAgg/U+a+eKKTAkXKN1N12NIfvrEb9s=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Sep 5 05:00:16 2025 GMT Not After : Sep 12 05:00:16 2025 GMT Subject: CN=68ba6e61-76d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:39:c0:4f:39:00:ea:17:5a:db:3c:e9:56: d4:1c:6c:8f:fc:29:6c:30:a4:26:ae:62:bf:ca:3c: a3:e3:92:1b:b3:aa:d4:eb:ec:a9:cf:b8:06:64:5c: fd:65:e1:ca:1e:a6:23:e2:d4:61:38:03:d3:a3:36: 5b:0a:e4:b1:e5:f4:a2:30:a2:80:ae:32:ec:2e:fc: 9d:fc:2b:e7:37:ed:5a:8a:07:2b:ae:9a:24:ce:ae: 88:d0:ee:db:32:1d:f9:52:8f:26:b5:fa:13:a6:f9: 2f:bc:c0:de:25:8c:c0:3d:ee:e6:04:d8:10:24:93: b8:b1:03:2d:89:d8:27:4e:0b:0a:e1:6f:9c:31:38: 75:f6:b0:5b:55:1c:6e:2f:c3:82:73:e3:1e:08:31: ec:a3:04:1c:ca:4c:09:fa:51:ad:c0:a2:05:c5:a2: bf:79:79:7f:ea:f9:9f:34:b8:d5:56:a1:fc:c1:e9: 15:05:25:99:b9:fa:48:ce:72:4c:b6:00:1b:14:c3: ab:44:bd:89:31:66:a4:59:6c:e1:ce:ea:72:66:6a: 8b:7d:5a:d5:29:9d:8c:1c:31:8c:af:7b:70:a4:a8: 0f:6f:30:e0:d5:0e:8a:dc:0d:33:19:a4:fb:a2:9c: d7:e6:49:f7:be:f6:3b:86:5b:b5:6b:79:0a:20:87: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7C:14:A5:61:7A:B5:88:EA:01:0F:8F:0A:4E:56:01:01:B2:DE:A6 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:07:5f:89:56:7c:1c:59:83:13:91:41:41:6c:be:97:9f:ed: 74:0c:ff:53:92:93:c8:b9:e4:9d:f4:21:50:e9:b8:f1:28:42: ea:56:32:53:96:0c:56:52:ce:1c:16:c2:44:b0:a3:a3:a5:d3: da:70:75:50:c1:7f:b2:8b:a3:e7:b4:4d:3f:e1:24:09:1b:75: f9:74:de:3a:45:09:6e:b8:df:d6:5d:22:fe:47:37:68:4d:f9: 05:7d:1f:b2:80:af:7f:d1:93:8e:7e:5c:07:99:65:a7:88:46: 1d:38:a8:7f:5a:04:d9:d8:02:0a:2b:fd:c7:22:69:9c:bb:65: cc:19:a2:6b:e4:84:46:77:d5:d2:df:d9:d8:eb:03:72:4c:29: 48:4c:55:e0:22:37:df:4f:c9:0f:3c:8a:f9:70:eb:bb:4b:99: 8f:39:9b:87:09:1c:3c:51:37:46:33:44:f2:38:a9:6a:c6:ac: 62:ff:c8:60:0a:c5:44:d2:63:f7:0b:ce:22:fb:fd:bc:e8:2d: 45:cc:ce:1b:3e:98:43:0d:f3:fe:1c:6a:34:d3:b0:52:2e:47: c5:5d:df:0a:56:6c:1c:11:50:8f:6f:21:27:e8:be:9e:fa:06: 78:db:f0:61:ea:38:89:c2:e2:6f:da:37:07:86:1a:47:b4:7d: 99:e0:30:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwOTA1MDUwMDE2WhcNMjUwOTEyMDUwMDE2WjAYMRYwFAYD VQQDEw02OGJhNmU2MS03NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAod05wE85AOoXWts86VbUHGyP/ClsMKQmrmK/yjyj45Ibs6rU6+ypz7gGZFz9 ZeHKHqYj4tRhOAPTozZbCuSx5fSiMKKArjLsLvyd/CvnN+1aigcrrpokzq6I0O7b Mh35Uo8mtfoTpvkvvMDeJYzAPe7mBNgQJJO4sQMtidgnTgsK4W+cMTh19rBbVRxu L8OCc+MeCDHsowQcykwJ+lGtwKIFxaK/eXl/6vmfNLjVVqH8wekVBSWZufpIznJM tgAbFMOrRL2JMWakWWzhzupyZmqLfVrVKZ2MHDGMr3twpKgPbzDg1Q6K3A0zGaT7 opzX5kn3vvY7hlu1a3kKIIdh9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN8FKVh erWI6gEPjwpOVgEBst6mMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOB1+JVnwcWYMTkUFBbL6Xn+10DP9TkpPIueSd9CFQ6bjxKELqVjJT lgxWUs4cFsJEsKOjpdPacHVQwX+yi6PntE0/4SQJG3X5dN46RQluuN/WXSL+Rzdo TfkFfR+ygK9/0ZOOflwHmWWniEYdOKh/WgTZ2AIKK/3HImmcu2XMGaJr5IRGd9XS 39nY6wNyTClITFXgIjffT8kPPIr5cOu7S5mPOZuHCRw8UTdGM0TyOKlqxqxi/8hg CsVE0mP3C84i+/286C1FzM4bPphDDfP+HGo007BSLkfFXd8KVmwcEVCPbyEn6L6e +gZ42/Bh6jiJwuJv2jcHhhpHtH2Z4DBl -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:19 2025 by rpki-client