$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: KQ7n4jrkgaFNxstMBeGUKnDb8uclw3Ge1mRChOqgyjE= Subject key identifier: 98:8A:4B:B0:A9:A2:70:E5:14:1C:DC:D0:94:D8:A0:B2:14:28:A8:97 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 011A Signing time: Tue 05 Aug 2025 05:15:32 +0000 Manifest this update: Tue 05 Aug 2025 05:15:32 +0000 Manifest next update: Tue 12 Aug 2025 05:15:31 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: WAJSi/7GR6DRfmyYJVApCBnkfRvoK2dp5UwooL6X0SI=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Aug 5 05:15:32 2025 GMT Not After : Aug 12 05:15:31 2025 GMT Subject: CN=68919374-4710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:5f:a9:bb:b5:64:eb:1b:da:42:db:56:ef: 9c:07:3c:56:74:f2:77:30:f0:2b:c2:c8:ae:11:41: 79:7e:b4:fc:08:87:ca:91:94:ba:a4:d9:6a:e5:5b: e0:ac:3c:19:23:10:50:6a:3e:82:22:21:12:76:58: 8a:9c:86:1b:43:ec:a6:1b:cb:6b:17:4c:1b:14:93: c9:6c:fd:e4:09:e6:8f:2b:a5:8f:81:2a:60:63:e5: 76:64:24:54:42:fe:09:df:02:3e:30:12:78:73:49: 67:a1:47:b2:24:ac:eb:94:0c:32:23:a4:00:84:1d: 90:2c:da:db:8d:b4:6a:07:fd:dd:2f:0e:e2:fc:74: a3:c2:b7:6f:34:b0:a4:4f:59:5a:a7:1b:ca:6c:f1: 65:ca:5b:a3:a6:f7:23:77:a5:9b:07:aa:d0:95:7f: fd:02:b9:a5:18:de:9a:14:47:2f:64:e9:2d:04:6b: 35:8d:cd:94:c6:fa:2a:81:4c:2f:ce:e7:c1:47:4d: ca:2b:f4:2b:3d:da:bb:d7:28:b0:4e:40:1f:c1:90: 25:44:f1:d5:84:ed:05:d7:85:d7:73:9e:87:dc:ea: 88:4a:0d:6a:26:2b:8a:51:84:2a:e7:c5:29:6d:0b: e1:d6:6f:ad:d7:47:22:d9:77:e8:41:2f:ce:9a:0a: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8A:4B:B0:A9:A2:70:E5:14:1C:DC:D0:94:D8:A0:B2:14:28:A8:97 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:6c:aa:44:5f:6c:e0:ec:db:c5:d7:38:10:84:3b:58:dc: 46:ef:d2:8a:bd:03:80:cc:51:f5:6c:b7:11:e0:89:35:fc:ed: 09:c6:45:d3:c5:f8:8d:c1:22:5a:97:b7:03:15:c5:61:7a:20: 78:ff:24:49:a1:e2:aa:16:77:cc:7e:99:98:9d:a1:7c:dc:23: 11:d3:d7:bf:62:5d:85:ec:2e:86:95:ee:41:12:5a:de:fd:bc: 10:25:fe:03:c1:c9:9f:4b:6b:9a:aa:8f:69:f1:3a:09:4b:50: d1:13:41:e1:5b:38:c5:93:0d:c5:3f:50:a2:39:3a:c6:86:7e: 7d:bf:68:52:04:a3:3e:f6:43:cc:67:a9:07:db:bb:59:37:6c: 06:25:d0:b4:e7:8d:6e:fe:33:6c:6e:34:57:1a:bb:de:cf:47: ba:2f:1d:6f:23:03:1c:bb:94:f8:e3:f6:51:39:c6:44:3a:f6: e3:02:91:b5:ac:82:bb:bf:b7:d1:6a:87:6e:8c:c9:26:4b:a8: ad:82:b9:33:32:df:57:ea:17:f3:2f:1e:54:b4:8f:3f:15:a7: 1a:67:12:03:64:4d:50:e8:d1:d5:02:20:89:fb:4d:64:a9:70: ac:55:2b:70:69:a8:88:3d:b9:32:6f:38:a3:1f:2b:25:bf:aa: 54:94:b8:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwODA1MDUxNTMyWhcNMjUwODEyMDUxNTMxWjAYMRYwFAYD VQQDEw02ODkxOTM3NC00NzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ylfqbu1ZOsb2kLbVu+cBzxWdPJ3MPArwsiuEUF5frT8CIfKkZS6pNlq5Vvg rDwZIxBQaj6CIiESdliKnIYbQ+ymG8trF0wbFJPJbP3kCeaPK6WPgSpgY+V2ZCRU Qv4J3wI+MBJ4c0lnoUeyJKzrlAwyI6QAhB2QLNrbjbRqB/3dLw7i/HSjwrdvNLCk T1lapxvKbPFlylujpvcjd6WbB6rQlX/9ArmlGN6aFEcvZOktBGs1jc2UxvoqgUwv zufBR03KK/QrPdq71yiwTkAfwZAlRPHVhO0F14XXc56H3OqISg1qJiuKUYQq58Up bQvh1m+t10ci2XfoQS/OmgrR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiKS7Cp onDlFBzc0JTYoLIUKKiXMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsuWyqRF9s4Ozbxdc4EIQ7WNxG79KKvQOAzFH1bLcR4Ik1/O0JxkXT xfiNwSJal7cDFcVheiB4/yRJoeKqFnfMfpmYnaF83CMR09e/Yl2F7C6Gle5BElre /bwQJf4DwcmfS2uaqo9p8ToJS1DRE0HhWzjFkw3FP1CiOTrGhn59v2hSBKM+9kPM Z6kH27tZN2wGJdC0541u/jNsbjRXGrvez0e6Lx1vIwMcu5T44/ZROcZEOvbjApG1 rIK7v7fRaodujMkmS6itgrkzMt9X6hfzLx5UtI8/FacaZxIDZE1Q6NHVAiCJ+01k qXCsVStwaaiIPbkybzijHyslv6pUlLie -----END CERTIFICATE-----Generated at Wed Aug 6 14:08:02 2025 by rpki-client