$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: l2R1ECr/A6BkNSGGZUt4RnaeOTLEvn3+gjh0nAarIdY= Subject key identifier: F3:37:C4:E1:43:04:52:25:67:C2:05:F5:23:50:2F:AF:23:EB:E9:09 Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 02CD Signing time: Sun 15 Jun 2025 01:06:12 +0000 Manifest this update: Sun 15 Jun 2025 01:06:12 +0000 Manifest next update: Sun 22 Jun 2025 01:06:12 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: igslPgGGuDmOgsGTZCoemN9lBfscco5Mxpr1RQPLJg4=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Jun 15 01:06:12 2025 GMT Not After : Jun 22 01:06:12 2025 GMT Subject: CN=684e1c84-2dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:42:33:85:aa:3e:ec:c2:c7:b3:4c:f1:34: ed:5c:12:fc:21:51:f1:c7:e5:3b:a9:e3:ab:bd:9d: 08:56:34:48:7a:53:66:5b:4d:b7:21:b4:9a:a8:58: 1e:2d:ce:f9:b6:b9:82:d9:50:09:b5:96:58:d7:67: ab:e1:d8:4b:6b:f8:a0:2e:58:44:ba:05:50:5f:74: 78:b8:6a:32:1f:c7:1c:2d:41:22:0e:7b:80:51:2c: f2:05:4a:eb:1e:96:dd:8d:ef:1e:3a:70:62:cf:8b: f0:cb:48:4b:07:62:ad:8d:06:ed:d0:fa:91:45:d2: ec:28:3d:7f:14:04:73:8a:fd:26:0b:e2:89:d2:1d: 17:7b:23:48:20:7f:a3:d3:c2:93:5f:72:00:70:13: 89:c2:7b:79:4f:24:6d:aa:0c:52:4b:7d:b1:f0:b6: 55:3a:7e:b9:df:e0:17:b0:68:3b:a8:73:ff:6a:15: 67:7e:08:30:3e:a8:81:d6:9c:b3:5a:f1:88:02:69: 77:2b:42:01:94:c5:d2:03:ba:4d:5f:49:92:7c:92: d5:41:fe:f3:6f:73:2d:47:fe:ac:d6:f1:f1:f4:db: 12:f6:7a:88:c9:76:41:0d:cf:0c:aa:c6:34:80:45: ab:29:e0:e7:6d:32:22:7f:3d:95:5a:92:50:7c:6b: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:37:C4:E1:43:04:52:25:67:C2:05:F5:23:50:2F:AF:23:EB:E9:09 X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ea:52:d9:5f:ef:82:a9:10:87:a4:ba:f4:6b:7b:21:45:7a: 39:87:61:76:1c:9b:94:3d:ea:db:a3:d9:60:58:82:c0:d2:2a: c4:e8:5d:5a:74:bd:c8:61:6d:39:8f:2a:b8:85:5a:02:78:99: fc:56:13:e0:02:69:52:99:79:3f:34:19:e0:88:80:53:d5:20: 7a:d2:bb:d9:5b:2c:12:a0:cd:49:8c:89:2f:83:87:38:34:aa: bc:4c:37:75:1a:8c:c0:a9:4d:e2:15:e2:33:f6:ea:96:e0:68: 29:a1:fb:c5:04:35:22:d8:a2:16:fb:c2:1b:3c:92:94:7e:4e: 9f:f4:f8:f3:b3:c5:16:c5:81:57:a4:d0:79:1f:80:ae:79:74: 20:7c:68:46:10:61:77:7f:1f:7d:e0:c6:35:8e:48:e9:bd:71: 1e:d2:a8:c9:bc:54:8f:a3:4f:ee:88:83:bd:17:00:1b:cc:ac: d6:d7:05:fe:03:c1:e8:c3:64:b3:ef:0f:17:81:a4:42:5b:7b: 16:fc:eb:24:2d:d0:b6:98:9a:90:ad:2c:46:05:30:b0:98:b0: b7:00:c5:0f:d7:c1:e6:ac:80:6c:ee:f6:16:25:3c:aa:a7:1b: 87:98:c7:a1:86:0d:c7:4e:79:69:81:88:5a:38:d5:c2:b7:94: d9:7a:1b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUwNjE1MDEwNjEyWhcNMjUwNjIyMDEwNjEyWjAYMRYwFAYD VQQDEw02ODRlMWM4NC0yZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+9CM4WqPuzCx7NM8TTtXBL8IVHxx+U7qeOrvZ0IVjRIelNmW023IbSaqFge Lc75trmC2VAJtZZY12er4dhLa/igLlhEugVQX3R4uGoyH8ccLUEiDnuAUSzyBUrr Hpbdje8eOnBiz4vwy0hLB2KtjQbt0PqRRdLsKD1/FARziv0mC+KJ0h0XeyNIIH+j 08KTX3IAcBOJwnt5TyRtqgxSS32x8LZVOn653+AXsGg7qHP/ahVnfggwPqiB1pyz WvGIAml3K0IBlMXSA7pNX0mSfJLVQf7zb3MtR/6s1vHx9NsS9nqIyXZBDc8MqsY0 gEWrKeDnbTIifz2VWpJQfGsGIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM3xOFD BFIlZ8IF9SNQL68j6+kJMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+6lLZX++CqRCHpLr0a3shRXo5h2F2HJuUPerbo9lgWILA0irE6F1a dL3IYW05jyq4hVoCeJn8VhPgAmlSmXk/NBngiIBT1SB60rvZWywSoM1JjIkvg4c4 NKq8TDd1GozAqU3iFeIz9uqW4GgpofvFBDUi2KIW+8IbPJKUfk6f9Pjzs8UWxYFX pNB5H4CueXQgfGhGEGF3fx994MY1jkjpvXEe0qjJvFSPo0/uiIO9FwAbzKzW1wX+ A8How2Sz7w8XgaRCW3sW/OskLdC2mJqQrSxGBTCwmLC3AMUP18HmrIBs7vYWJTyq pxuHmMehhg3HTnlpgYhaONXCt5TZeht8 -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:50 2025 by rpki-client