$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: eeTEN6afRl+2s6bPNhcEYIZT4jGdsFipIK8jvznLwiA= Subject key identifier: 84:09:31:CA:80:50:EA:82:A5:27:B7:F3:01:F6:D7:20:22:FE:52:6A Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0380 Signing time: Mon 03 Nov 2025 00:49:30 +0000 Manifest this update: Mon 03 Nov 2025 00:49:29 +0000 Manifest next update: Mon 10 Nov 2025 00:49:29 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: XFymQSHBUVHtxXVy6Vnydt/6T0rwTB/zmUkpy/HWXcY=) 2: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=) 3: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=) 5: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=) 6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=) 7: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Nov 3 00:49:29 2025 GMT Not After : Nov 10 00:49:29 2025 GMT Subject: CN=6907fc19-6a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:07:b8:3e:98:ca:66:a2:0f:8f:76:e9:af: a8:9a:f8:cc:c7:f8:76:db:76:b6:f3:53:9b:ce:89: 00:55:ab:c1:c7:5c:50:0c:0f:6b:6f:39:ea:b8:a5: 75:4a:8c:d0:a0:95:40:42:b7:16:2b:17:de:b8:15: a9:cd:ee:e5:d8:a2:2c:fe:66:c8:a2:6c:db:b7:7d: 63:36:35:6f:aa:52:bb:94:76:1d:4b:ff:d6:b0:2c: d1:13:01:36:de:6f:73:a5:0e:15:70:a1:4b:37:ab: 18:3a:b5:d7:6c:7e:1e:e0:90:0c:6a:b5:df:4f:61: b5:da:13:a9:a3:e6:06:b9:50:4a:8a:5c:b1:a6:ca: 98:60:1d:59:48:ec:81:47:b6:79:12:4e:6a:e0:13: 81:60:00:1f:b6:90:5a:fe:38:83:5d:41:46:d3:76: dd:b8:2c:0f:a8:56:ec:d3:79:73:55:fd:34:cc:68: b5:08:05:59:da:08:69:8d:26:b9:83:81:44:a5:ab: 95:93:8c:ca:12:27:11:60:5e:f8:5c:18:b7:f9:6d: 6a:c8:4b:73:bb:90:30:b0:7e:1f:65:cd:02:47:f6: 3a:5c:72:a4:87:81:8d:ea:cd:3d:01:da:d9:d2:b3: 23:1d:59:91:0d:59:e8:47:1a:06:c6:9b:b5:e5:d8: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:31:CA:80:50:EA:82:A5:27:B7:F3:01:F6:D7:20:22:FE:52:6A X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8e:05:6d:1d:a9:3a:b1:32:6d:bb:92:d5:15:5b:ae:37:f1: 34:a5:cb:77:1b:73:25:20:a3:89:fc:2f:b5:a8:60:84:8c:73: ec:3f:1e:31:54:98:82:c0:b6:fb:14:aa:5f:c5:5b:f7:d0:e4: f3:25:96:c9:06:97:21:d6:04:5d:f8:3b:1b:65:ff:f7:b9:5c: db:4f:4f:4e:e7:43:dd:d8:59:82:30:c9:95:9f:a3:eb:46:2b: 4a:3b:06:6c:34:3a:f3:cd:29:8e:83:31:3e:08:7f:85:71:ae: 56:da:c1:9e:5e:6c:1c:c7:ed:da:25:2a:12:f6:72:f8:12:5d: 84:38:ef:42:04:a4:5c:aa:be:50:f0:3e:79:06:cf:ed:93:19: 9c:45:e6:57:f8:f0:e9:0f:99:b2:00:c7:39:5e:7c:70:b1:c9: 73:dc:77:eb:74:a3:e4:96:55:8f:ff:84:1d:f2:d6:6e:b4:29: 99:94:1c:87:7a:47:2f:64:d6:2f:82:52:f9:4e:a3:e1:38:95: c2:b3:60:c7:a1:b6:27:86:83:a0:35:64:35:57:eb:6a:57:7b: b7:95:96:25:e5:67:e7:df:5b:4d:ad:11:35:30:cf:a5:36:cd: d0:f3:2c:f9:01:ed:72:1b:35:7e:a9:ad:69:44:29:02:10:e8: eb:e2:a2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUxMTAzMDA0OTI5WhcNMjUxMTEwMDA0OTI5WjAYMRYwFAYD VQQDEw02OTA3ZmMxOS02YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt38HuD6YymaiD4926a+omvjMx/h223a281ObzokAVavBx1xQDA9rbznquKV1 SozQoJVAQrcWKxfeuBWpze7l2KIs/mbIomzbt31jNjVvqlK7lHYdS//WsCzREwE2 3m9zpQ4VcKFLN6sYOrXXbH4e4JAMarXfT2G12hOpo+YGuVBKilyxpsqYYB1ZSOyB R7Z5Ek5q4BOBYAAftpBa/jiDXUFG03bduCwPqFbs03lzVf00zGi1CAVZ2ghpjSa5 g4FEpauVk4zKEicRYF74XBi3+W1qyEtzu5AwsH4fZc0CR/Y6XHKkh4GN6s09AdrZ 0rMjHVmRDVnoRxoGxpu15dgg2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQJMcqA UOqCpSe38wH21yAi/lJqMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jgVtHak6sTJtu5LVFVuuN/E0pct3G3MlIKOJ/C+1qGCEjHPsPx4x VJiCwLb7FKpfxVv30OTzJZbJBpch1gRd+DsbZf/3uVzbT09O50Pd2FmCMMmVn6Pr RitKOwZsNDrzzSmOgzE+CH+Fca5W2sGeXmwcx+3aJSoS9nL4El2EOO9CBKRcqr5Q 8D55Bs/tkxmcReZX+PDpD5myAMc5Xnxwsclz3HfrdKPkllWP/4Qd8tZutCmZlByH ekcvZNYvglL5TqPhOJXCs2DHobYnhoOgNWQ1V+tqV3u3lZYl5Wfn31tNrRE1MM+l Ns3Q8yz5Ae1yGzV+qa1pRCkCEOjr4qIz -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:08 2025 by rpki-client