$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: 8FpLZzVRBk45KbbOlCEwOZWsoqDsEglM9WpppwAQFc0= Subject key identifier: 8D:49:0C:A9:BF:D9:B6:3E:5E:7C:62:89:CB:FF:2D:FF:5F:E8:C4:0A Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: CB Signing time: Fri 13 Jun 2025 04:41:15 +0000 Manifest this update: Fri 13 Jun 2025 04:41:14 +0000 Manifest next update: Fri 20 Jun 2025 04:41:14 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: GB3ML1IzqR0osd5lYFaUXNmoEB9qFX5FzCDh20wMGa4=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Jun 13 04:41:14 2025 GMT Not After : Jun 20 04:41:14 2025 GMT Subject: CN=684babea-cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:fd:03:40:b1:00:eb:3d:af:b2:93:bb:fe: 47:10:70:13:e8:b2:cf:7e:00:f2:40:78:1b:ed:3f: 90:f5:c4:7e:ac:33:3d:17:e3:b6:58:40:d5:af:f3: b4:7a:a3:cf:a9:a5:59:74:f8:53:24:26:58:64:93: fe:31:83:7d:55:fb:94:92:0f:a0:cd:f5:7d:a9:41: 9c:02:40:0b:42:54:61:4b:5a:4b:6d:30:ad:03:9c: ec:30:05:34:9b:0e:9d:a8:39:09:24:e4:ae:1f:d1: 1f:c4:a7:54:1c:85:88:eb:6f:c4:b8:2f:41:27:fd: 3c:5c:54:00:f5:4a:43:4f:43:60:b2:d4:c4:0f:6e: a0:0b:52:1c:b5:01:4f:67:6a:c4:ee:94:d3:bb:29: e4:3a:f0:48:c0:c4:1d:a0:f4:11:e2:2d:c6:db:08: 28:74:7b:c7:d1:70:1f:71:dd:64:a8:13:96:d6:cd: af:87:ba:b7:de:4f:1e:f8:9d:5a:5b:82:c8:26:40: ac:46:9c:87:5e:0f:c3:67:52:be:07:51:5b:2b:55: c3:67:48:63:0a:a2:dc:bc:82:6f:32:dd:54:b9:37: 5b:a6:cd:a0:49:64:1d:94:90:21:00:59:ad:77:e8: 91:91:e3:63:79:e6:1e:27:7e:1d:88:10:a2:aa:35: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:0C:A9:BF:D9:B6:3E:5E:7C:62:89:CB:FF:2D:FF:5F:E8:C4:0A X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:e6:bc:12:c4:79:cb:de:ca:97:3f:52:69:ab:53:8b:97: 4c:08:15:76:3d:4a:b0:e4:6b:60:51:8e:80:ed:a5:04:27:e0: 8f:b3:bf:f4:70:84:ce:25:30:90:96:e6:d6:b2:28:57:6f:31: f8:a1:49:82:72:4b:5d:78:f1:0a:9b:66:2a:21:64:f1:3b:3a: 9b:da:f9:25:40:24:47:6d:6f:2b:7e:62:14:cb:8d:80:fc:f3: 08:8a:6a:91:90:f6:7e:e9:95:ad:38:26:bf:ed:13:10:d8:9d: f3:2f:34:34:00:90:e0:5a:86:f9:71:a4:dd:50:8a:67:31:f0: 82:62:f3:43:8b:bb:ad:b9:80:f3:91:7b:aa:27:4e:e4:61:49: 97:3f:79:38:eb:e0:17:49:0c:9d:70:ee:61:99:ad:0f:99:27: c2:49:3d:dc:28:64:75:1e:cb:7e:17:58:86:2b:35:5c:ca:13: cf:1d:7f:62:12:49:67:45:b4:1c:e5:4c:28:5a:8f:5c:06:16: 74:73:dc:81:a1:f8:e8:79:10:3e:59:71:78:a9:2d:9f:16:33: 56:47:ae:09:22:a8:79:83:6f:7c:52:3e:64:bf:15:28:b1:45: 2f:a5:21:36:1b:7a:52:a9:b6:92:67:2c:e5:04:83:82:ed:d8: 6b:20:68:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwNjEzMDQ0MTE0WhcNMjUwNjIwMDQ0MTE0WjAYMRYwFAYD VQQDEw02ODRiYWJlYS1jZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqD9A0CxAOs9r7KTu/5HEHAT6LLPfgDyQHgb7T+Q9cR+rDM9F+O2WEDVr/O0 eqPPqaVZdPhTJCZYZJP+MYN9VfuUkg+gzfV9qUGcAkALQlRhS1pLbTCtA5zsMAU0 mw6dqDkJJOSuH9EfxKdUHIWI62/EuC9BJ/08XFQA9UpDT0NgstTED26gC1IctQFP Z2rE7pTTuynkOvBIwMQdoPQR4i3G2wgodHvH0XAfcd1kqBOW1s2vh7q33k8e+J1a W4LIJkCsRpyHXg/DZ1K+B1FbK1XDZ0hjCqLcvIJvMt1UuTdbps2gSWQdlJAhAFmt d+iRkeNjeeYeJ34diBCiqjXsmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1JDKm/ 2bY+Xnxiicv/Lf9f6MQKMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvwea8EsR5y97Klz9SaatTi5dMCBV2PUqw5GtgUY6A7aUEJ+CPs7/0 cITOJTCQlubWsihXbzH4oUmCcktdePEKm2YqIWTxOzqb2vklQCRHbW8rfmIUy42A /PMIimqRkPZ+6ZWtOCa/7RMQ2J3zLzQ0AJDgWob5caTdUIpnMfCCYvNDi7utuYDz kXuqJ07kYUmXP3k46+AXSQydcO5hma0PmSfCST3cKGR1Hst+F1iGKzVcyhPPHX9i EklnRbQc5UwoWo9cBhZ0c9yBofjoeRA+WXF4qS2fFjNWR64JIqh5g298Uj5kvxUo sUUvpSE2G3pSqbaSZyzlBIOC7dhrIGhL -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:20 2025 by rpki-client