$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: VfpTq3ZWeF/F4RBK9BQLzqsZeOJmztGr07p8KjM2j8A= Subject key identifier: 37:FD:9F:2B:5A:8A:2F:DA:9D:75:E2:43:7E:91:B5:35:4A:15:5F:99 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: E9 Signing time: Tue 29 Apr 2025 05:24:06 +0000 Manifest this update: Tue 29 Apr 2025 05:24:05 +0000 Manifest next update: Tue 06 May 2025 05:24:05 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: dm6HzXpd8RYjd1OwxiZ2mfRF5TpPqtzK9qwCKiiz7ew=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 03:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Apr 29 05:24:05 2025 GMT Not After : May 6 05:24:05 2025 GMT Subject: CN=68106276-d2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:e0:bf:2f:5b:db:5b:8d:bd:3d:e1:65:13: 09:fc:29:cb:d1:41:8e:6a:54:09:38:b1:bb:3e:80: 81:b4:59:bb:93:94:e1:31:6e:a2:2e:e3:2d:22:0d: 51:dc:15:e5:17:05:68:5e:a0:c1:65:18:74:55:38: fb:3a:60:a1:a9:f6:ba:4a:21:9b:46:b4:6a:f0:4f: c9:aa:a1:0e:77:8d:82:61:9e:60:eb:80:a2:19:9b: c7:20:ad:c4:88:1e:46:e9:19:3b:9d:2b:83:35:2d: f1:79:22:34:32:fa:78:b5:ba:18:bc:4b:39:9e:b0: 6b:00:24:e1:64:51:5e:ee:ca:34:e2:64:2a:c5:72: 41:7b:3b:a9:61:1a:41:41:fd:48:12:31:fe:04:27: 04:67:af:16:2c:99:45:61:25:42:50:6f:76:d5:23: 31:3f:60:ca:de:e3:43:dc:3f:f4:3b:f5:e8:df:b2: f5:ff:f3:64:a1:5a:93:c0:44:9e:9b:2f:d9:59:ab: 31:f5:6e:af:d3:f8:33:ab:48:f5:17:1c:26:c5:41: 02:79:f8:43:88:82:cc:94:cc:22:5e:ce:88:52:4e: 07:ba:2a:de:86:e1:bf:0c:ef:04:5c:d5:29:12:78: 9f:df:30:3f:9f:90:33:0a:4b:14:67:68:68:cc:31: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FD:9F:2B:5A:8A:2F:DA:9D:75:E2:43:7E:91:B5:35:4A:15:5F:99 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9d:89:5d:0b:d7:f2:0d:ab:03:21:cd:38:0a:db:e1:a3:27: 7f:08:c3:b6:9c:79:23:1a:8d:ab:1d:5e:50:33:37:eb:40:25: 79:09:ce:6f:54:b8:d1:0d:ca:58:02:d9:e5:2c:1f:c9:db:1d: 70:44:8d:f7:e1:f4:39:01:5f:56:e7:f1:80:a1:c9:f7:0c:97: a2:d7:39:11:a3:c3:21:f1:9c:dc:0f:c6:5b:0a:26:61:ec:1a: d6:df:18:4a:78:a6:4d:0f:cc:47:b2:54:44:45:48:d5:ea:82: 41:3a:9f:8e:e2:9c:b4:1a:1a:57:05:fe:45:9b:d3:92:ec:d8: 2c:cc:fb:80:ec:c8:d3:71:6d:49:ea:07:d2:52:47:07:01:0a: 15:0f:f9:bf:de:1c:bd:5f:3f:69:53:e5:41:07:20:01:76:92: e9:88:31:14:36:d0:73:28:15:f8:78:e0:c7:4d:f1:ab:88:23: d5:55:83:cf:72:33:62:0c:9a:e4:77:2b:9b:f0:4c:fb:a7:f0: 65:be:de:6a:ea:37:fd:31:41:05:d6:f5:1c:5b:cc:cf:66:ca: 6d:0a:78:71:3d:d6:dc:ff:be:b3:a0:15:48:7e:11:ac:b5:93: e7:3b:01:ea:77:05:be:5e:63:a2:5e:ab:2a:f2:52:1e:f6:d8: ab:e7:71:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUwNDI5MDUyNDA1WhcNMjUwNTA2MDUyNDA1WjAYMRYwFAYD VQQDEw02ODEwNjI3Ni1kMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGPgvy9b21uNvT3hZRMJ/CnL0UGOalQJOLG7PoCBtFm7k5ThMW6iLuMtIg1R 3BXlFwVoXqDBZRh0VTj7OmChqfa6SiGbRrRq8E/JqqEOd42CYZ5g64CiGZvHIK3E iB5G6Rk7nSuDNS3xeSI0Mvp4tboYvEs5nrBrACThZFFe7so04mQqxXJBezupYRpB Qf1IEjH+BCcEZ68WLJlFYSVCUG921SMxP2DK3uND3D/0O/Xo37L1//NkoVqTwESe my/ZWasx9W6v0/gzq0j1FxwmxUECefhDiILMlMwiXs6IUk4HuirehuG/DO8EXNUp Enif3zA/n5AzCksUZ2hozDH7PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf9nyta ii/anXXiQ36RtTVKFV+ZMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMnYldC9fyDasDIc04Ctvhoyd/CMO2nHkjGo2rHV5QMzfrQCV5Cc5v VLjRDcpYAtnlLB/J2x1wRI334fQ5AV9W5/GAocn3DJei1zkRo8Mh8ZzcD8ZbCiZh 7BrW3xhKeKZND8xHslRERUjV6oJBOp+O4py0GhpXBf5Fm9OS7NgszPuA7MjTcW1J 6gfSUkcHAQoVD/m/3hy9Xz9pU+VBByABdpLpiDEUNtBzKBX4eODHTfGriCPVVYPP cjNiDJrkdyub8Ez7p/Blvt5q6jf9MUEF1vUcW8zPZsptCnhxPdbc/76zoBVIfhGs tZPnOwHqdwW+XmOiXqsq8lIe9tir53E3 -----END CERTIFICATE-----Generated at Tue Apr 29 07:27:24 2025 by rpki-client