$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: W49lzxp6FwuLPvcrlLJxPwmbfobgvTCr+kkqXH3S6o8= Subject key identifier: C6:91:8F:E3:1D:2A:E1:17:49:76:82:3E:39:E8:0D:CB:0B:65:8E:9C Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 0117 Signing time: Fri 13 Jun 2025 03:52:39 +0000 Manifest this update: Fri 13 Jun 2025 03:52:38 +0000 Manifest next update: Fri 20 Jun 2025 03:52:38 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: /UjBHUVyoxb4vUbZjJ0az0gV1AFtB7SB7zI01drLlqU=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: g8Elzlw4tRoXrBliL3a4u/fyR/SHOUoxq/RpKAIAzgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Jun 13 03:52:38 2025 GMT Not After : Jun 20 03:52:38 2025 GMT Subject: CN=684ba086-23e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:49:65:60:8a:44:73:39:6f:1e:f6:39:4e: b6:68:92:00:5a:0b:28:50:05:97:d9:71:1f:e7:ab: 80:62:24:85:c5:56:cc:da:d2:dd:0b:9e:3b:5d:5a: 28:39:55:ad:48:c3:d4:af:60:af:26:d7:e0:32:7a: 14:0b:97:2a:0d:b3:71:e9:08:2c:57:25:88:fc:80: af:05:5c:6c:b9:76:89:7b:48:70:e6:30:f6:3d:ec: d7:91:b5:98:15:8d:06:9a:05:a8:13:48:25:1c:d3: c6:1e:1a:54:d7:ae:3e:0a:cb:61:79:4f:ff:cb:f1: b1:88:46:d0:91:9c:31:96:ee:5d:21:27:4c:85:00: 4b:51:51:ac:a5:71:04:99:34:87:28:08:b3:af:b1: 32:93:e1:b1:f9:ce:e7:1a:c7:5b:81:69:99:a8:01: 50:00:f1:92:74:c3:f9:1a:ec:fe:a7:92:3a:a3:bc: df:3c:b7:03:08:62:59:5e:f9:90:01:37:cc:a3:3d: c9:b6:78:2f:c2:cf:73:e3:71:97:ba:ba:98:ec:3a: b6:f6:19:c3:ea:7a:c3:4f:09:49:c4:56:74:38:f6: b8:24:91:92:28:2f:32:61:b3:ad:97:06:93:4e:3a: 32:37:db:5b:61:f0:49:b3:5d:57:48:b2:0b:65:d9: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:8F:E3:1D:2A:E1:17:49:76:82:3E:39:E8:0D:CB:0B:65:8E:9C X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:30:8b:34:57:15:19:57:ba:a0:17:18:6a:7b:56:27:3c:93: 73:12:67:29:35:c7:21:5d:73:53:5c:d6:b4:c4:fc:89:1b:95: 65:59:10:d8:90:28:11:d9:f2:0d:bd:87:b0:d5:69:de:65:6e: 1e:45:c8:65:c2:b5:ef:ca:f6:44:7a:be:6d:46:62:10:54:f6: 50:cf:72:09:3e:6e:08:5a:bb:24:d0:53:1f:c0:ab:df:ec:f8: 86:70:2f:80:32:52:a8:d0:71:5e:d7:0f:2b:2c:32:ee:95:25: a6:f1:45:09:e0:c6:95:9f:a1:45:0c:44:9c:13:a6:25:bb:bc: 02:3d:a2:0c:b7:29:36:3b:c5:84:a9:6a:9c:1a:ea:56:c3:5a: 32:24:95:9c:e6:64:5c:45:e2:ff:c5:09:5f:a3:c2:bc:8b:49: 4b:45:00:e2:5f:fa:82:c4:88:29:b2:01:b4:04:e7:2a:7f:fd: 9b:50:57:31:b2:09:86:bb:10:95:22:9f:08:d6:42:4a:8d:f3: c5:d0:82:77:02:2e:1c:98:f1:f6:b7:2c:45:84:d0:96:36:30: 41:b2:62:ee:11:63:86:27:5b:94:a3:f8:e6:f3:ca:8a:93:be: c6:70:4a:34:74:73:83:e3:a2:e8:4f:fc:98:a2:5a:7d:a7:28: 33:32:a5:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjUwNjEzMDM1MjM4WhcNMjUwNjIwMDM1MjM4WjAYMRYwFAYD VQQDEw02ODRiYTA4Ni0yM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndBJZWCKRHM5bx72OU62aJIAWgsoUAWX2XEf56uAYiSFxVbM2tLdC547XVoo OVWtSMPUr2CvJtfgMnoUC5cqDbNx6QgsVyWI/ICvBVxsuXaJe0hw5jD2PezXkbWY FY0GmgWoE0glHNPGHhpU164+CstheU//y/GxiEbQkZwxlu5dISdMhQBLUVGspXEE mTSHKAizr7Eyk+Gx+c7nGsdbgWmZqAFQAPGSdMP5Guz+p5I6o7zfPLcDCGJZXvmQ ATfMoz3Jtngvws9z43GXurqY7Dq29hnD6nrDTwlJxFZ0OPa4JJGSKC8yYbOtlwaT TjoyN9tbYfBJs11XSLILZdmw7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaRj+Md KuEXSXaCPjnoDcsLZY6cMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwMIs0VxUZV7qgFxhqe1YnPJNzEmcpNcchXXNTXNa0xPyJG5VlWRDY kCgR2fINvYew1WneZW4eRchlwrXvyvZEer5tRmIQVPZQz3IJPm4IWrsk0FMfwKvf 7PiGcC+AMlKo0HFe1w8rLDLulSWm8UUJ4MaVn6FFDEScE6Ylu7wCPaIMtyk2O8WE qWqcGupWw1oyJJWc5mRcReL/xQlfo8K8i0lLRQDiX/qCxIgpsgG0BOcqf/2bUFcx sgmGuxCVIp8I1kJKjfPF0IJ3Ai4cmPH2tyxFhNCWNjBBsmLuEWOGJ1uUo/jm88qK k77GcEo0dHOD46LoT/yYolp9pygzMqUU -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:06 2025 by rpki-client