$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: Ah44spafCjwH02UlI1ujYIiJOzR/sera0IrshON8K1Q= Subject key identifier: 67:B5:4E:4A:AC:2A:55:46:BB:09:ED:81:47:00:59:03:F7:84:00:5A Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0D97 Signing time: Tue 04 Nov 2025 18:01:01 +0000 Manifest this update: Tue 04 Nov 2025 18:01:01 +0000 Manifest next update: Tue 11 Nov 2025 18:01:01 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: iZje/3Sd6qmtuTi+B4xfbYyi2uTPDrQF9T/oyj7iVxI=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: +juOaIxrjQ6IhGwMB3Bm9h5unXUiB8xR+dHj1D1njhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Nov 4 18:01:01 2025 GMT Not After : Nov 11 18:01:01 2025 GMT Subject: CN=690a3f5d-cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:94:b8:9f:64:56:20:ed:6f:ed:4f:8a:7d: 8b:ab:11:7b:08:6f:38:df:a8:33:87:79:08:a0:03: 51:2d:2f:69:4e:82:98:e2:1e:df:8b:a4:04:eb:bf: f2:84:48:ca:cb:3a:b0:f9:49:c6:0f:39:2d:1a:35: e5:81:37:f7:d1:ef:51:29:c0:38:92:0d:d2:11:52: 51:96:c8:ae:a2:99:b4:f1:23:91:82:27:f6:44:0f: 44:28:45:a9:d5:16:f5:bd:d5:59:02:e0:f1:c0:69: 04:32:6a:79:b4:bb:99:20:81:81:f8:e6:98:f8:60: 79:a9:f3:68:27:5a:ec:04:8d:80:97:67:b3:3c:61: 1a:a8:74:be:93:20:a6:4e:1b:2b:30:fc:cd:96:d2: f7:c3:ed:3f:bf:a4:3a:5b:8b:d5:2c:b6:ae:9f:7d: 3e:ea:e8:99:64:a4:03:70:59:5c:24:77:21:da:25: 81:b5:6e:9c:f6:30:1b:9f:b2:b7:bc:6d:fd:c5:83: d1:50:69:2f:a0:ca:cc:25:81:69:49:29:f3:20:56: d6:3a:6e:17:23:fa:01:93:62:83:77:36:72:2c:ef: 1d:3c:34:f3:e2:99:36:8b:c5:ee:e5:08:07:0b:a3: 31:84:23:87:21:80:ac:98:75:d3:2c:06:d3:a0:82: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B5:4E:4A:AC:2A:55:46:BB:09:ED:81:47:00:59:03:F7:84:00:5A X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:54:4c:48:9b:6a:88:d4:bb:22:e3:bd:0c:e8:fa:33:6c:64: d8:d8:25:7c:99:95:ea:88:97:f8:d1:e6:96:c5:27:19:a8:2e: f9:9d:73:64:bb:03:ee:e3:dc:b7:3e:e8:b0:fb:6d:f6:18:86: f4:dc:ba:9e:80:35:4c:eb:5b:f4:48:14:7c:cb:d3:ae:6c:b2: f1:c6:22:d4:49:21:8f:82:8f:f5:c7:99:49:33:a1:e5:c4:e0: 24:77:8c:7e:e3:b8:0d:91:5b:9f:ef:6c:84:5d:42:55:4e:d5: ba:9e:eb:34:b5:69:67:ed:aa:c0:cd:3f:7b:b4:0d:c9:0a:30: 12:78:ab:24:f7:4f:45:84:44:0d:09:8b:1f:e2:b5:6c:ba:6a: e2:29:8e:85:34:14:a6:3e:c6:26:d3:9a:15:f6:39:61:66:2d: 40:5d:9e:5f:c3:41:83:51:60:99:30:bb:18:8e:df:78:29:ff: 87:a8:6e:32:dc:78:b2:d1:72:38:d0:c7:98:f4:bd:09:7b:48: c1:11:b9:2e:26:43:b9:13:13:e7:72:61:b6:df:a0:c7:c2:ec: 0c:d9:f0:c9:94:92:51:9c:79:43:4b:0a:04:9f:6c:5f:ca:c7: 6d:dd:3b:a0:1e:65:29:d4:bc:0a:d7:e2:71:15:7a:68:ba:bf: 3d:8e:f8:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUxMTA0MTgwMTAxWhcNMjUxMTExMTgwMTAxWjAYMRYwFAYD VQQDEw02OTBhM2Y1ZC1jYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoOUuJ9kViDtb+1Pin2LqxF7CG8436gzh3kIoANRLS9pToKY4h7fi6QE67/y hEjKyzqw+UnGDzktGjXlgTf30e9RKcA4kg3SEVJRlsiuopm08SORgif2RA9EKEWp 1Rb1vdVZAuDxwGkEMmp5tLuZIIGB+OaY+GB5qfNoJ1rsBI2Al2ezPGEaqHS+kyCm ThsrMPzNltL3w+0/v6Q6W4vVLLaun30+6uiZZKQDcFlcJHch2iWBtW6c9jAbn7K3 vG39xYPRUGkvoMrMJYFpSSnzIFbWOm4XI/oBk2KDdzZyLO8dPDTz4pk2i8Xu5QgH C6MxhCOHIYCsmHXTLAbToIIx2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe1Tkqs KlVGuwntgUcAWQP3hABaMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVVExIm2qI1Lsi470M6PozbGTY2CV8mZXqiJf40eaWxScZqC75nXNk uwPu49y3Puiw+232GIb03LqegDVM61v0SBR8y9OubLLxxiLUSSGPgo/1x5lJM6Hl xOAkd4x+47gNkVuf72yEXUJVTtW6nus0tWln7arAzT97tA3JCjASeKsk909FhEQN CYsf4rVsumriKY6FNBSmPsYm05oV9jlhZi1AXZ5fw0GDUWCZMLsYjt94Kf+HqG4y 3Hiy0XI40MeY9L0Je0jBEbkuJkO5ExPncmG236DHwuwM2fDJlJJRnHlDSwoEn2xf ysdt3TugHmUp1LwK1+JxFXpour89jvhQ -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:12 2025 by rpki-client