$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: TIsqxDGtwc/brTwEEq3jaZhU/GlfTtHyOTdN8hm3eZA= Subject key identifier: 78:E3:89:93:A2:1B:52:E5:EF:E6:B0:EF:7C:3D:C3:60:6B:16:C0:6B Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0D33 Signing time: Thu 24 Apr 2025 17:59:04 +0000 Manifest this update: Thu 24 Apr 2025 17:59:03 +0000 Manifest next update: Thu 01 May 2025 17:59:03 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: f1ly5tQeLPihuMf20JmTDIX8u2SJplV5rjBnQbfHoPI=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 2//beVUEUtWDd/tf9scv/4G9JclsWxR4JDywFndSmnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Apr 24 17:59:03 2025 GMT Not After : May 1 17:59:03 2025 GMT Subject: CN=680a7be8-4bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:59:70:81:6f:ef:b4:8c:1c:4a:3f:21:2b:7a: 25:a6:79:c0:a0:a4:34:80:40:a3:b0:04:f7:65:40: 6e:1d:aa:72:2b:95:e4:a5:e5:26:8c:e9:da:a9:28: 38:61:62:19:69:d2:23:27:ec:b0:88:36:6e:3e:e7: b4:0b:97:06:5a:0c:42:92:3f:cf:ac:36:bf:c8:e2: ea:38:11:e6:94:59:4c:ff:09:7b:a6:a7:9e:a9:91: 49:58:99:15:a4:14:81:8b:9f:33:db:6f:94:88:bf: 1e:d4:f5:b3:cf:15:9d:c2:66:42:6e:47:92:09:91: 45:66:e7:af:43:0c:b3:18:5f:2b:2b:bf:73:22:13: d4:e9:0b:ef:1a:d5:91:af:39:b4:20:b2:ca:bb:ec: 77:f3:02:d7:bf:18:46:9e:0c:12:cd:80:62:10:96: 06:57:08:23:04:c6:11:65:6b:39:a6:81:ed:6a:09: 07:74:35:aa:ef:42:3b:6b:75:73:de:00:84:1f:0c: 26:d4:cf:ea:1a:61:cd:9e:62:73:19:42:50:c7:cc: 69:3e:dd:c0:58:b8:68:23:f3:26:10:a7:2c:7d:88: 21:41:64:19:62:f5:ce:55:d8:9f:86:13:d2:16:96: 15:e8:3e:ac:aa:9f:bf:14:31:e9:fc:ef:2b:6b:ac: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:89:93:A2:1B:52:E5:EF:E6:B0:EF:7C:3D:C3:60:6B:16:C0:6B X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3b:cb:cd:97:43:a6:9f:8d:a4:0b:fe:c1:72:49:4f:52:da: 34:77:50:b8:05:ee:9d:44:dd:7d:d6:e2:70:d8:61:00:66:e7: 60:3e:b7:f6:ef:59:51:64:5e:e4:1d:2f:75:20:f2:1a:00:0c: 50:7c:c1:79:c6:5a:9b:40:8a:00:8b:10:6d:71:c4:d8:11:cc: 0f:95:7b:4d:2c:7e:ad:82:4b:f5:56:32:1c:de:8e:eb:26:61: 82:41:bc:51:ab:09:ae:6a:91:f4:e5:25:2b:3e:59:8a:02:1d: 7e:4d:9c:3a:0b:4f:52:23:31:99:b4:f4:14:f3:ec:6c:95:ab: 3f:63:14:fe:f8:b8:fc:6e:11:60:9d:fd:9e:7b:c8:16:a7:bb: 3a:cb:14:28:ec:23:00:17:86:45:07:70:6b:a5:09:f2:9a:48: a7:8e:12:bc:77:04:e7:9a:b7:13:70:9f:8c:01:b5:c7:a0:ca: f1:58:df:aa:f3:2e:f4:4a:a6:2f:b6:cb:fc:d6:23:72:6c:30: a8:51:38:21:1f:8a:9e:d9:78:c6:d2:e3:74:4f:3f:0e:27:29: 6c:ac:fc:63:1a:63:84:1e:3d:5d:f4:5c:6a:25:7c:46:d8:12: 79:6d:0c:54:7a:60:aa:b0:89:7f:14:dd:7a:a7:bd:dd:ff:ee: c5:bf:ef:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUwNDI0MTc1OTAzWhcNMjUwNTAxMTc1OTAzWjAYMRYwFAYD VQQDEw02ODBhN2JlOC00YmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4llwgW/vtIwcSj8hK3olpnnAoKQ0gECjsAT3ZUBuHapyK5XkpeUmjOnaqSg4 YWIZadIjJ+ywiDZuPue0C5cGWgxCkj/PrDa/yOLqOBHmlFlM/wl7pqeeqZFJWJkV pBSBi58z22+UiL8e1PWzzxWdwmZCbkeSCZFFZuevQwyzGF8rK79zIhPU6QvvGtWR rzm0ILLKu+x38wLXvxhGngwSzYBiEJYGVwgjBMYRZWs5poHtagkHdDWq70I7a3Vz 3gCEHwwm1M/qGmHNnmJzGUJQx8xpPt3AWLhoI/MmEKcsfYghQWQZYvXOVdifhhPS FpYV6D6sqp+/FDHp/O8ra6zS4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjjiZOi G1Ll7+aw73w9w2BrFsBrMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiO8vNl0Omn42kC/7BcklPUto0d1C4Be6dRN191uJw2GEAZudgPrf2 71lRZF7kHS91IPIaAAxQfMF5xlqbQIoAixBtccTYEcwPlXtNLH6tgkv1VjIc3o7r JmGCQbxRqwmuapH05SUrPlmKAh1+TZw6C09SIzGZtPQU8+xslas/YxT++Lj8bhFg nf2ee8gWp7s6yxQo7CMAF4ZFB3BrpQnymkinjhK8dwTnmrcTcJ+MAbXHoMrxWN+q 8y70SqYvtsv81iNybDCoUTghH4qe2XjG0uN0Tz8OJylsrPxjGmOEHj1d9FxqJXxG 2BJ5bQxUemCqsIl/FN16p73d/+7Fv+94 -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:33 2025 by rpki-client