$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: jAiY6MwLsUEbeOYnoa4DrGxDvIopHEFEdZwyGs3P39w= Subject key identifier: 0E:84:6D:1D:E2:B8:D7:30:4D:22:0F:D9:C6:CA:ED:84:84:52:B3:D6 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0D5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0D4B Signing time: Thu 12 Jun 2025 17:52:33 +0000 Manifest this update: Thu 12 Jun 2025 17:52:33 +0000 Manifest next update: Thu 19 Jun 2025 17:52:33 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: wpqLpmBCieWWlIYzorLpAy9eQBHpTCSjfNk78g4E9qI=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 2//beVUEUtWDd/tf9scv/4G9JclsWxR4JDywFndSmnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3418 (0xd5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Jun 12 17:52:33 2025 GMT Not After : Jun 19 17:52:33 2025 GMT Subject: CN=684b13e1-c311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:f2:3f:11:00:28:c6:4b:d3:86:7b:c1:86: c6:47:38:be:a1:67:1c:2f:62:3d:f6:09:f9:42:7e: 7b:29:1d:db:07:ef:f6:3d:8a:8e:eb:bb:0f:07:f5: 94:d7:93:1c:8d:6a:c7:92:89:d8:65:4a:f9:24:63: a1:44:f2:fb:da:50:e6:2f:bd:16:4f:ce:1b:6e:4a: f9:5d:09:a5:6b:55:51:ab:5b:84:88:b9:78:07:3d: 48:c9:f8:1b:55:83:ab:e7:e1:cb:96:68:47:28:ec: 46:6f:f3:d5:9d:51:14:5e:45:3f:a9:6c:ea:ba:89: 5c:57:eb:b7:4e:a6:1f:b4:55:08:36:d3:56:20:08: e5:70:96:6e:e6:6e:4c:9c:9f:a2:29:9c:c9:b6:45: 33:42:fc:b5:01:42:f8:91:24:d7:8f:10:9c:ab:30: e7:ab:c3:ce:a0:aa:98:5c:34:f5:34:c9:24:b6:b9: c6:07:c3:1c:9f:4e:c2:84:e3:9c:b7:3b:44:1c:06: 4b:ed:75:7f:38:17:bc:ca:69:65:3c:d0:55:86:11: 46:eb:0c:18:bc:f2:48:b5:fc:eb:00:6f:53:b6:1f: 72:fa:65:0a:e1:ff:85:4a:60:ec:95:67:86:3c:c7: 8a:95:4f:36:f8:dd:5d:56:6d:f3:22:2b:db:30:8f: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:84:6D:1D:E2:B8:D7:30:4D:22:0F:D9:C6:CA:ED:84:84:52:B3:D6 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:da:97:90:d5:ef:bb:8e:12:a5:ec:71:b8:c8:6b:98:62:9d: 5c:bb:f5:a4:c6:9c:b3:96:68:c3:b3:60:5b:46:4c:ac:a7:17: 26:b1:f7:f9:dd:b3:e5:03:6e:d2:64:9b:34:0e:f7:3a:74:87: ee:06:8b:17:7d:b4:cf:fc:f9:82:2e:9c:3a:e9:9c:0b:94:42: ab:0f:d2:3e:3f:74:91:54:c2:e9:50:bf:b6:eb:7e:01:ee:b6: c2:4b:aa:de:8f:28:53:3e:ae:11:19:84:96:f9:d4:c0:6b:f2: af:8e:98:7d:a3:db:7b:ff:a9:64:ae:d5:08:32:b1:f8:b6:af: a6:9a:ed:09:08:a1:ad:2a:5d:ad:7a:68:33:ab:59:a2:0e:57: e3:10:8a:f2:ab:da:82:de:42:16:31:4e:54:79:41:25:56:94: 68:86:2a:80:64:93:f5:fe:f7:4f:00:7c:44:14:59:88:bc:f7: e3:a4:a4:03:57:fc:4f:eb:71:e3:d0:d2:b3:df:2e:b3:be:8d: 7a:a4:41:ea:d3:bf:92:a3:1e:7c:c8:6d:51:35:99:96:fa:8a: 97:38:db:1a:7a:2d:82:12:da:e2:da:1d:07:52:61:6b:83:4f: 48:8a:e9:3c:9d:51:c8:ae:f2:60:c4:2c:ef:43:71:68:65:d0: 2a:5e:77:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUwNjEyMTc1MjMzWhcNMjUwNjE5MTc1MjMzWjAYMRYwFAYD VQQDEw02ODRiMTNlMS1jMzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaXyPxEAKMZL04Z7wYbGRzi+oWccL2I99gn5Qn57KR3bB+/2PYqO67sPB/WU 15McjWrHkonYZUr5JGOhRPL72lDmL70WT84bbkr5XQmla1VRq1uEiLl4Bz1Iyfgb VYOr5+HLlmhHKOxGb/PVnVEUXkU/qWzquolcV+u3TqYftFUINtNWIAjlcJZu5m5M nJ+iKZzJtkUzQvy1AUL4kSTXjxCcqzDnq8POoKqYXDT1NMkktrnGB8Mcn07ChOOc tztEHAZL7XV/OBe8ymllPNBVhhFG6wwYvPJItfzrAG9Tth9y+mUK4f+FSmDslWeG PMeKlU82+N1dVm3zIivbMI9+RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6EbR3i uNcwTSIP2cbK7YSEUrPWMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe2peQ1e+7jhKl7HG4yGuYYp1cu/WkxpyzlmjDs2BbRkyspxcmsff5 3bPlA27SZJs0Dvc6dIfuBosXfbTP/PmCLpw66ZwLlEKrD9I+P3SRVMLpUL+2634B 7rbCS6rejyhTPq4RGYSW+dTAa/Kvjph9o9t7/6lkrtUIMrH4tq+mmu0JCKGtKl2t emgzq1miDlfjEIryq9qC3kIWMU5UeUElVpRohiqAZJP1/vdPAHxEFFmIvPfjpKQD V/xP63Hj0NKz3y6zvo16pEHq07+Sox58yG1RNZmW+oqXONsaei2CEtri2h0HUmFr g09Iiuk8nVHIrvJgxCzvQ3FoZdAqXnea -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:58 2025 by rpki-client