$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: 4GxG4K2u2q/tLNQBfGQhF9Wkyuvd+r6dONWBw7IEBXU= Subject key identifier: 5C:6B:CA:F8:0E:A0:36:0A:1E:90:DE:35:72:89:82:40:AE:9B:67:19 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0111 Signing time: Sat 19 Jul 2025 05:07:17 +0000 Manifest this update: Sat 19 Jul 2025 05:07:17 +0000 Manifest next update: Sat 26 Jul 2025 05:07:17 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: Vv/OYWkh1+RmRP7/UHXJZtUOWVQkhBF57Noi6IlHXYY=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Jul 19 05:07:17 2025 GMT Not After : Jul 26 05:07:17 2025 GMT Subject: CN=687b2805-91e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:43:d6:29:e8:57:55:53:55:b2:87:58:68: 28:af:cd:48:ac:6b:d3:e1:9a:0f:d2:8a:33:e5:67: ba:13:e6:bd:9c:99:55:16:8f:3a:3a:2e:56:f1:ee: a6:07:41:90:7b:1b:7b:59:d6:22:66:72:cb:e4:3c: 2a:02:19:e4:b8:2a:dd:76:38:d2:b8:b2:ac:97:df: ad:f6:fa:75:33:2b:5f:48:79:4a:e8:26:5f:87:03: 18:78:7f:7f:46:c8:cf:9f:6c:55:fa:1f:5b:4a:97: d4:ea:a2:05:f7:c3:53:2e:bf:ab:09:ea:b2:26:d1: a7:f1:34:85:07:fb:80:92:5d:e6:5f:9d:a5:63:2c: 94:69:b8:0c:7b:a8:ea:cc:f0:2d:9e:cb:e2:f6:7e: 4f:92:4e:d5:6c:a2:7d:da:3d:71:fa:74:48:07:75: c0:d9:a2:e7:8a:25:2f:9e:2f:12:f6:1f:39:10:51: 56:02:68:ea:2f:61:01:73:fb:14:c1:fc:5f:41:b8: ff:c8:35:91:69:9f:6b:9e:c2:a9:9b:ea:51:00:c4: de:a4:45:29:0b:59:3d:1d:e4:f7:02:6a:5d:20:df: d2:ca:7b:eb:04:ed:a6:56:07:0a:27:89:a6:42:ad: d0:af:6b:1c:a8:c1:0b:6c:33:7f:25:25:f4:5a:51: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:CA:F8:0E:A0:36:0A:1E:90:DE:35:72:89:82:40:AE:9B:67:19 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:63:9c:b4:45:5a:f6:4a:62:4e:9b:c9:97:68:bc:b4:f0: dd:c9:fd:85:8f:47:0d:d7:f8:22:7e:52:c6:88:d2:38:73:f0: a6:a8:6d:c4:10:6b:47:ae:4f:c8:5f:31:a8:26:a8:e5:4f:b3: bc:db:f2:23:fa:2e:61:e3:62:bc:1a:8e:9a:85:18:94:c8:16: 6c:a5:a5:b2:d9:a4:57:2a:46:4f:c8:fa:34:ef:fc:b6:3c:51: e7:b5:13:7c:24:7b:06:10:ec:d8:c4:1c:f7:76:ce:af:45:5c: b7:79:ca:8d:bc:75:f9:b5:ff:8f:32:ef:23:50:47:75:47:19: 41:b5:c8:f9:27:bb:23:a8:f4:11:09:e8:6f:b5:ef:6e:9f:43: 59:af:87:83:e5:31:07:b3:61:e7:0c:b3:d9:f9:00:38:a0:bd: 40:44:59:ab:0f:85:33:19:5d:42:d1:85:45:6f:d6:5c:89:ff: e2:fe:e6:ae:9a:e4:8d:b6:8e:21:63:4f:22:71:46:54:fe:0c: 23:de:e2:1d:e5:c1:25:9e:df:95:f5:42:32:5d:3a:a9:95:1a: be:ea:57:09:64:fd:ac:93:c0:e6:e0:7c:35:41:e3:24:c7:4e: a1:89:7f:f7:c2:92:86:03:eb:b6:cd:ff:ef:7a:9a:de:16:82: 98:79:8f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwNzE5MDUwNzE3WhcNMjUwNzI2MDUwNzE3WjAYMRYwFAYD VQQDEw02ODdiMjgwNS05MWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEBD1inoV1VTVbKHWGgor81IrGvT4ZoP0ooz5We6E+a9nJlVFo86Oi5W8e6m B0GQext7WdYiZnLL5DwqAhnkuCrddjjSuLKsl9+t9vp1MytfSHlK6CZfhwMYeH9/ RsjPn2xV+h9bSpfU6qIF98NTLr+rCeqyJtGn8TSFB/uAkl3mX52lYyyUabgMe6jq zPAtnsvi9n5Pkk7VbKJ92j1x+nRIB3XA2aLniiUvni8S9h85EFFWAmjqL2EBc/sU wfxfQbj/yDWRaZ9rnsKpm+pRAMTepEUpC1k9HeT3AmpdIN/SynvrBO2mVgcKJ4mm Qq3Qr2scqMELbDN/JSX0WlFNnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxryvgO oDYKHpDeNXKJgkCum2cZMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALiGOctEVa9kpiTpvJl2i8tPDdyf2Fj0cN1/giflLGiNI4c/CmqG3E EGtHrk/IXzGoJqjlT7O82/Ij+i5h42K8Go6ahRiUyBZspaWy2aRXKkZPyPo07/y2 PFHntRN8JHsGEOzYxBz3ds6vRVy3ecqNvHX5tf+PMu8jUEd1RxlBtcj5J7sjqPQR Cehvte9un0NZr4eD5TEHs2HnDLPZ+QA4oL1ARFmrD4UzGV1C0YVFb9Zcif/i/uau muSNto4hY08icUZU/gwj3uId5cElnt+V9UIyXTqplRq+6lcJZP2sk8Dm4Hw1QeMk x06hiX/3wpKGA+u2zf/vepreFoKYeY8U -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:35 2025 by rpki-client