$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: WRx8c4+Qoh89lqAMFZo8vXD1LVxU0osSO4BSMCDMtIQ= Subject key identifier: 2F:19:3D:4D:C3:68:FC:25:41:69:76:69:0F:12:63:B8:1E:1D:36:08 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01B1 Signing time: Sun 29 Jun 2025 02:17:22 +0000 Manifest this update: Sun 29 Jun 2025 02:17:21 +0000 Manifest next update: Sun 06 Jul 2025 02:17:21 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: QiRQKp1pQ2dM9Gtyg9KFzgrb5GOvkjP4LKMJ3Yhz+rM=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Jun 29 02:17:21 2025 GMT Not After : Jul 6 02:17:21 2025 GMT Subject: CN=6860a232-a4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:f9:58:b9:9f:dc:0a:79:0b:e8:b2:f4:eb: 6e:7e:c8:89:27:7b:f6:29:2a:79:b7:f8:8e:51:ce: 61:7d:91:79:9a:bb:23:d1:a0:c7:1f:fa:12:fc:3f: 08:ca:e5:5c:b0:49:21:62:b2:87:af:19:9a:d6:b7: a9:86:01:66:8a:b8:1d:3e:a7:1c:b2:1f:0c:49:a7: e8:1f:4b:79:aa:30:df:2c:18:e9:0b:10:b8:e9:9e: 0e:bf:ce:93:06:3a:67:ba:70:8c:da:31:1d:54:45: 9c:b2:6e:91:cb:75:40:9a:b9:32:13:21:09:02:a4: ce:a6:bf:90:07:6e:75:ec:79:ed:b2:36:59:c2:af: f3:6e:80:83:40:32:d2:19:9b:cf:d2:18:75:16:f0: d4:94:3b:5b:22:43:6b:2d:12:2c:70:ed:2d:0c:33: 26:69:f4:8d:ba:b0:7f:da:ae:bb:c7:80:58:0d:9d: 7d:1b:c0:5d:59:44:7d:a6:ab:b3:c3:5f:0d:79:4d: d4:fb:86:f5:d4:11:d2:a0:f5:e3:2e:08:43:c5:fd: 01:24:9d:7b:50:26:5d:a6:af:f6:bb:38:fd:6a:72: ca:a8:22:ea:7d:8e:06:c6:e5:64:db:e9:a8:e2:17: 3d:b9:43:8a:e5:30:65:10:50:03:fb:14:23:e4:b3: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:19:3D:4D:C3:68:FC:25:41:69:76:69:0F:12:63:B8:1E:1D:36:08 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:39:de:42:09:57:22:da:13:6d:33:2d:4a:0b:4d:b7:63:d3: b5:a4:53:8f:9f:17:9e:85:ed:54:b7:d6:cc:81:a2:44:6e:6e: 4f:22:26:6a:37:6b:eb:51:70:65:9d:ad:69:84:e1:cb:2a:e7: dc:31:97:25:63:04:d1:6a:15:ec:87:ff:f6:93:8e:da:b1:9c: 4d:98:95:cb:ef:16:49:f2:56:bc:c6:00:29:59:a1:98:e0:eb: 8b:51:bb:81:60:1b:08:6a:c5:bc:d3:51:4f:b4:89:0a:fb:b0: 5e:de:a2:7e:a7:fd:3d:79:50:f7:8a:86:39:c7:73:0e:1e:22: 57:90:66:49:bb:66:23:63:35:ba:55:8f:75:67:5b:5e:ba:da: d4:3e:cc:18:bc:f5:57:6a:b4:b4:ab:55:0d:c4:e3:cb:8b:3d: 58:6c:85:31:b1:e7:5d:63:e1:c3:81:60:7d:d0:db:25:17:f7: 6d:ef:57:29:1b:38:c8:f6:66:5d:93:39:40:ab:06:9d:63:b7: fc:0d:92:28:cd:f5:c0:c0:ad:e2:b2:fd:c1:80:7a:ea:4a:91: 77:ae:65:8d:45:d5:60:5e:1f:7d:29:50:d6:0b:a0:11:56:4a: 13:a0:3b:aa:7e:63:a9:45:d1:15:67:5f:d9:a1:8a:64:62:35: d1:f6:2a:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwNjI5MDIxNzIxWhcNMjUwNzA2MDIxNzIxWjAYMRYwFAYD VQQDEw02ODYwYTIzMi1hNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGH5WLmf3Ap5C+iy9OtufsiJJ3v2KSp5t/iOUc5hfZF5mrsj0aDHH/oS/D8I yuVcsEkhYrKHrxma1rephgFmirgdPqccsh8MSafoH0t5qjDfLBjpCxC46Z4Ov86T BjpnunCM2jEdVEWcsm6Ry3VAmrkyEyEJAqTOpr+QB2517HntsjZZwq/zboCDQDLS GZvP0hh1FvDUlDtbIkNrLRIscO0tDDMmafSNurB/2q67x4BYDZ19G8BdWUR9pquz w18NeU3U+4b11BHSoPXjLghDxf0BJJ17UCZdpq/2uzj9anLKqCLqfY4GxuVk2+mo 4hc9uUOK5TBlEFAD+xQj5LNZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8ZPU3D aPwlQWl2aQ8SY7geHTYIMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGOd5CCVci2hNtMy1KC023Y9O1pFOPnxeehe1Ut9bMgaJEbm5PIiZq N2vrUXBlna1phOHLKufcMZclYwTRahXsh//2k47asZxNmJXL7xZJ8la8xgApWaGY 4OuLUbuBYBsIasW801FPtIkK+7Be3qJ+p/09eVD3ioY5x3MOHiJXkGZJu2YjYzW6 VY91Z1teutrUPswYvPVXarS0q1UNxOPLiz1YbIUxseddY+HDgWB90NslF/dt71cp GzjI9mZdkzlAqwadY7f8DZIozfXAwK3isv3BgHrqSpF3rmWNRdVgXh99KVDWC6AR VkoToDuqfmOpRdEVZ1/ZoYpkYjXR9ion -----END CERTIFICATE-----Generated at Sun Jun 29 20:16:13 2025 by rpki-client