$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: asoI9TQoFEjwzRTu95S8tQO6L32/7gXzuO/UvmIY8KY= Subject key identifier: 24:2F:43:5F:F3:54:BE:70:CF:96:EA:8F:C7:D4:AC:0A:6E:A8:3E:BE Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 5F Signing time: Fri 25 Apr 2025 06:06:57 +0000 Manifest this update: Fri 25 Apr 2025 06:06:57 +0000 Manifest next update: Fri 02 May 2025 06:06:57 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: jLnP/4H2yaEKmySu4rdgmYkkGnQ5ER++5719ZgbXrJ0=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: Apr 25 06:06:57 2025 GMT Not After : May 2 06:06:57 2025 GMT Subject: CN=680b2681-0003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:2b:c5:b8:f6:73:15:a8:87:a1:e7:0b:9d: 6e:ff:93:96:78:87:42:5d:4e:c2:dc:9c:1d:aa:28: 4c:35:fa:8d:64:0f:fe:bd:43:58:0c:d7:05:42:cc: c0:b7:c3:74:c4:eb:f9:a9:53:a0:b2:72:6c:25:08: 9a:dd:f3:07:76:bc:a2:fd:2f:75:22:ed:34:5a:c9: f3:dc:04:34:73:be:9e:71:39:6d:5a:df:02:bb:89: c8:8b:71:36:04:b2:ee:d8:bc:29:e7:f9:15:8a:2e: 7d:c0:7a:d6:30:65:15:c2:eb:07:d8:64:ff:6c:b2: e3:21:d0:6a:8a:75:2b:3a:7b:a0:cd:bd:1e:9d:15: 40:b0:db:ca:3c:a2:24:d5:44:44:ff:7b:0c:a3:15: e5:6c:8e:25:2b:8b:0a:88:1e:0a:f9:cd:77:23:92: ef:f9:92:76:1b:4f:c3:19:be:0e:c3:e6:0d:e7:f9: d5:5b:ea:ef:82:50:6d:af:39:23:f1:3c:0f:30:93: 1a:7e:cb:d2:c6:26:96:c4:c0:e0:2c:ab:11:fe:be: c9:74:15:fe:96:9a:64:b4:a4:47:1e:b2:41:3d:ed: 8e:3f:a6:17:c0:79:a6:81:1a:fd:1e:77:95:7d:78: c1:8c:9f:7b:4c:fb:05:c6:17:ec:21:76:ff:3c:0b: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:43:5F:F3:54:BE:70:CF:96:EA:8F:C7:D4:AC:0A:6E:A8:3E:BE X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ca:a0:79:fd:5b:f4:24:c0:cb:59:ee:bc:77:ae:c8:0f:a8: 6a:ac:04:b7:ec:99:5f:0d:7f:c4:13:31:59:71:d6:f6:30:7f: 31:a8:ab:9b:91:d7:2a:23:9d:c3:57:a1:58:97:c8:56:21:59: 1d:c2:94:60:ad:a3:d8:07:9d:da:1f:8e:f7:ba:8e:ce:11:b1: f7:25:9d:a7:eb:a2:81:c2:fa:1b:72:a3:60:6d:0e:bf:5e:67: ac:08:2d:44:14:93:1d:36:0e:61:44:ee:42:d2:93:61:2d:12: 90:0c:57:3e:85:70:7f:a3:45:6f:74:54:29:0c:cf:dc:8b:8c: a4:36:60:0d:1f:9c:56:f7:82:63:c1:d2:5f:10:30:88:71:de: e6:28:83:58:95:52:04:ba:e8:61:4e:c2:33:31:e1:c8:25:02: a5:68:0f:56:d7:8c:2d:aa:0c:85:69:1e:8f:4c:d1:21:69:ac: af:54:81:02:e1:a0:62:fe:f5:01:bc:88:41:ae:13:11:e9:37: 2e:e9:aa:40:f6:64:0a:65:09:d9:7d:d1:5f:da:09:4b:0f:cf: ec:97:f3:c4:49:d3:b5:18:0b:e2:a0:46:fb:b5:5e:fd:00:00: 71:6b:cf:74:46:bc:93:1a:a7:29:65:ed:97:f4:d3:d6:30:e3: de:f9:61:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMxQjExMC8GA1UEBRMoMkNGQjBDRUY2RDE2RDY2NzZFRUEyMTE2NDNFQzhFODVD MjVDRjJGRjAeFw0yNTA0MjUwNjA2NTdaFw0yNTA1MDIwNjA2NTdaMBgxFjAUBgNV BAMTDTY4MGIyNjgxLTAwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChFCvFuPZzFaiHoecLnW7/k5Z4h0JdTsLcnB2qKEw1+o1kD/69Q1gM1wVCzMC3 w3TE6/mpU6CycmwlCJrd8wd2vKL9L3Ui7TRayfPcBDRzvp5xOW1a3wK7iciLcTYE su7YvCnn+RWKLn3AetYwZRXC6wfYZP9ssuMh0GqKdSs6e6DNvR6dFUCw28o8oiTV RET/ewyjFeVsjiUriwqIHgr5zXcjku/5knYbT8MZvg7D5g3n+dVb6u+CUG2vOSPx PA8wkxp+y9LGJpbEwOAsqxH+vsl0Ff6WmmS0pEceskE97Y4/phfAeaaBGv0ed5V9 eMGMn3tM+wXGF+whdv88C9oxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJC9DX/NU vnDPluqPx9SsCm6oPr4wHwYDVR0jBBgwFoAULPsM720W1mdu6iEWQ+yOhcJc8v8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzFCL0U1NzMwNkNBOUE3 MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBzTTcyMFcxbWR1NmlFV1EteU9oY0pjOHY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzFCL0U1NzMwNkNBOUE3MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1k dTZpRVdRLXlPaGNKYzh2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADjKoHn9W/QkwMtZ7rx3rsgPqGqsBLfsmV8Nf8QTMVlx1vYwfzGoq5uR 1yojncNXoViXyFYhWR3ClGCto9gHndofjve6js4RsfclnafrooHC+htyo2BtDr9e Z6wILUQUkx02DmFE7kLSk2EtEpAMVz6FcH+jRW90VCkMz9yLjKQ2YA0fnFb3gmPB 0l8QMIhx3uYog1iVUgS66GFOwjMx4cglAqVoD1bXjC2qDIVpHo9M0SFprK9UgQLh oGL+9QG8iEGuExHpNy7pqkD2ZAplCdl90V/aCUsPz+yX88RJ07UYC+KgRvu1Xv0A AHFrz3RGvJMapyll7Zf009Yw4975Yb0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:17 2025 by rpki-client