$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: Aw4nCpW0KRJxAw96MTe5wyVMF2twy9/YF+qVkQZPS3g= Subject key identifier: 77:FC:03:6E:A9:9D:A1:B8:10:F2:50:25:09:EA:C0:FA:7B:BA:1B:19 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0100 Signing time: Sun 15 Jun 2025 04:16:12 +0000 Manifest this update: Sun 15 Jun 2025 04:16:11 +0000 Manifest next update: Sun 22 Jun 2025 04:16:11 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: i98bpQ7kr2DwSYnJWmxuSICwC+n312cc53JdUziPtcc=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Jun 15 04:16:11 2025 GMT Not After : Jun 22 04:16:11 2025 GMT Subject: CN=684e490c-5e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:21:24:5a:1d:24:52:4e:f6:31:57:66:1d:26: b7:cc:b7:3f:b9:b1:ef:5e:42:9a:0d:f0:ff:61:37: 7e:73:98:d0:48:d1:6e:c0:2d:36:9a:3b:3b:88:5d: 09:cf:4f:03:91:fb:7b:ee:2f:48:53:00:8c:e3:49: dd:e4:fb:07:03:00:b8:d1:62:5a:2f:5e:c3:de:6b: c1:75:92:10:20:c9:fc:57:c5:2d:52:68:53:d3:aa: 8a:f0:60:a4:82:44:bb:ac:25:0a:3a:a2:ac:f1:11: 99:4c:6d:a3:32:1a:98:9d:47:3f:c1:e3:bf:bb:46: 61:b2:05:86:60:8f:b2:5b:52:a0:5d:a8:3a:f1:6f: a6:b5:47:67:aa:37:26:d1:61:89:7e:db:dd:11:83: 75:bd:e2:42:0c:63:f8:6d:8e:37:7f:df:fe:72:6b: 34:c6:97:27:51:17:fd:76:e5:86:60:ed:fe:d6:c7: e7:d4:a1:8b:72:a3:03:50:38:ad:5b:c0:61:c5:44: f5:80:6a:be:97:6f:51:9f:69:26:c3:a3:3a:b5:72: 5d:09:61:8b:27:d9:4c:11:78:94:28:c3:62:e7:e7: df:45:fa:b3:84:8c:df:fa:bb:cb:ba:9b:ba:f4:cf: 8d:b8:dd:84:39:c2:10:ed:19:36:07:f8:09:6c:41: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FC:03:6E:A9:9D:A1:B8:10:F2:50:25:09:EA:C0:FA:7B:BA:1B:19 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ba:b9:5d:3f:0d:29:77:19:a9:2a:a3:c4:30:79:a2:9f:4d: df:e8:5c:a1:1b:5d:19:03:8a:b5:d2:93:64:97:35:1b:8f:29: 0a:4c:5b:77:c4:0a:2d:be:dd:ae:7d:26:5f:d4:7b:62:db:1e: f9:8b:54:33:7d:3b:12:c1:cb:ec:8e:ae:91:d5:f0:a7:96:4a: 1b:5e:2f:9b:89:8a:eb:a5:d1:27:3d:de:a9:90:76:de:9f:01: 5b:8a:18:66:43:43:3d:96:71:f7:d5:ba:0f:b1:25:66:57:a8: bb:3b:d0:af:1e:d3:2a:50:46:4f:d5:78:f3:a5:ac:6d:0e:dc: bb:62:bd:89:aa:73:34:85:83:31:10:84:e8:61:94:6d:bd:7c: 83:b5:47:ad:3b:ba:8d:1f:1a:34:39:b5:1f:1c:98:2f:60:46: 6f:92:19:e0:b1:95:85:cf:e3:b6:7c:92:2a:32:d3:6f:63:0b: 99:b3:67:b5:3c:d0:b4:d2:2c:23:2f:d3:94:11:f4:64:23:ad: 83:2d:f9:6d:47:4d:a8:6d:51:33:87:88:79:94:39:32:a2:20: f9:da:3a:99:2f:d3:61:2e:8a:32:48:c6:c6:80:07:f4:52:a6: 85:b5:8b:cf:94:c8:59:83:ea:67:4e:24:b0:e1:1b:22:1c:10: 1e:84:65:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwNjE1MDQxNjExWhcNMjUwNjIyMDQxNjExWjAYMRYwFAYD VQQDEw02ODRlNDkwYy01ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7yEkWh0kUk72MVdmHSa3zLc/ubHvXkKaDfD/YTd+c5jQSNFuwC02mjs7iF0J z08Dkft77i9IUwCM40nd5PsHAwC40WJaL17D3mvBdZIQIMn8V8UtUmhT06qK8GCk gkS7rCUKOqKs8RGZTG2jMhqYnUc/weO/u0ZhsgWGYI+yW1KgXag68W+mtUdnqjcm 0WGJftvdEYN1veJCDGP4bY43f9/+cms0xpcnURf9duWGYO3+1sfn1KGLcqMDUDit W8BhxUT1gGq+l29Rn2kmw6M6tXJdCWGLJ9lMEXiUKMNi5+ffRfqzhIzf+rvLupu6 9M+NuN2EOcIQ7Rk2B/gJbEHXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf8A26p naG4EPJQJQnqwPp7uhsZMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpurldPw0pdxmpKqPEMHmin03f6FyhG10ZA4q10pNklzUbjykKTFt3 xAotvt2ufSZf1Hti2x75i1QzfTsSwcvsjq6R1fCnlkobXi+biYrrpdEnPd6pkHbe nwFbihhmQ0M9lnH31boPsSVmV6i7O9CvHtMqUEZP1XjzpaxtDty7Yr2JqnM0hYMx EIToYZRtvXyDtUetO7qNHxo0ObUfHJgvYEZvkhngsZWFz+O2fJIqMtNvYwuZs2e1 PNC00iwjL9OUEfRkI62DLfltR02obVEzh4h5lDkyoiD52jqZL9NhLooySMbGgAf0 UqaFtYvPlMhZg+pnTiSw4RsiHBAehGX8 -----END CERTIFICATE-----Generated at Mon Jun 16 14:43:44 2025 by rpki-client