$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: psDApM1O+wamAkC/JvUHA64IM88SY2wTm2QVtXgPlwI= Subject key identifier: 7B:A4:63:0C:D8:D6:A3:DE:09:C5:A9:6E:BE:32:6B:D0:C0:27:64:1E Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01CD Signing time: Sat 23 Aug 2025 02:57:51 +0000 Manifest this update: Sat 23 Aug 2025 02:57:51 +0000 Manifest next update: Sat 30 Aug 2025 02:57:51 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: BCpL2il6tgYUxT3+vQJf9hPFyz2CeAcQjrbeeIEMfbw=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Aug 23 02:57:51 2025 GMT Not After : Aug 30 02:57:51 2025 GMT Subject: CN=68a92e2f-ff34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:1b:bd:17:fc:4c:11:64:06:de:92:fc:7a: bd:68:fe:3f:bb:37:3b:6e:b3:d8:2a:cb:92:0d:f9: 8e:d4:19:de:94:69:4d:0d:51:d1:47:08:10:75:02: c8:21:76:f1:54:f9:28:89:a3:b7:ee:05:88:e6:68: 2d:40:6e:0d:bc:26:6d:af:fe:e6:99:e8:45:54:51: 9a:df:aa:9f:73:35:36:a9:d2:24:bb:0e:8d:b0:cf: 97:a4:a9:da:5d:b0:3a:76:f2:f8:d5:78:f0:59:05: cb:14:9a:e0:08:6c:4b:38:fb:05:a5:83:d1:92:68: 0f:8a:bb:cf:9d:e0:2d:67:09:e0:98:65:00:8f:b8: 64:de:78:53:4b:aa:74:2d:e0:ba:72:6f:a6:1d:49: 52:14:70:df:ee:13:a4:d0:50:a3:6d:3f:84:48:65: 9b:9b:82:42:ff:55:db:0c:44:c7:e7:b0:18:e8:5b: 01:c3:9f:d6:11:7e:67:3e:8b:a7:86:84:8f:82:50: 67:37:7b:d5:f0:2f:b3:05:2d:90:81:01:3b:7c:c4: c8:13:70:c7:3e:03:13:70:41:1d:db:cc:2d:d8:1a: a4:6a:f0:b3:41:f1:b6:8c:41:e5:fd:9f:41:e3:9e: ff:74:2f:0a:b0:da:29:df:53:f4:6a:d4:5a:e2:32: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A4:63:0C:D8:D6:A3:DE:09:C5:A9:6E:BE:32:6B:D0:C0:27:64:1E X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:dc:94:75:47:f6:60:28:3a:84:dd:d8:f5:f2:8f:33:53: 79:9c:c4:7b:10:ea:8e:63:39:57:6d:22:45:98:ba:55:eb:86: 1e:4f:c0:b1:cd:c9:64:c3:4c:7d:09:c2:1e:c1:35:2c:47:2d: a3:c4:38:a8:4c:fd:07:31:d3:c6:8f:e0:0f:ab:42:1f:4c:6c: e2:ae:ff:21:18:5b:48:14:2d:56:ba:a2:6f:de:a6:67:7f:be: 98:11:3e:1d:4f:22:92:2e:2c:19:b4:1e:33:92:51:b9:cb:5a: 3e:11:4a:96:fb:9e:2f:28:bf:0a:9d:78:ed:90:65:ed:04:29: 66:9f:bf:8a:a5:31:b8:af:36:c6:b3:cd:f8:2b:ea:b6:3d:68: 2d:d1:7e:54:c5:81:20:9b:bf:f9:9f:7c:72:d1:a7:33:78:8f: 47:21:d5:fd:1d:0d:da:ed:58:7d:54:a8:f6:5d:63:79:d7:ff: 98:d2:80:09:c3:81:d5:59:29:f6:21:cc:c8:72:c0:26:95:02: 4d:3e:e0:da:88:69:3e:e3:95:66:8b:4f:7d:d1:cc:8d:6d:24: 82:e6:6c:9f:8c:2b:8c:8d:4a:fa:fc:2d:1c:d0:08:8d:77:2b: 0d:f4:8d:5a:51:b3:61:ef:fa:03:d9:37:68:71:5b:de:c0:67: 64:0b:af:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwODIzMDI1NzUxWhcNMjUwODMwMDI1NzUxWjAYMRYwFAYD VQQDEw02OGE5MmUyZi1mZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX0bvRf8TBFkBt6S/Hq9aP4/uzc7brPYKsuSDfmO1BnelGlNDVHRRwgQdQLI IXbxVPkoiaO37gWI5mgtQG4NvCZtr/7mmehFVFGa36qfczU2qdIkuw6NsM+XpKna XbA6dvL41XjwWQXLFJrgCGxLOPsFpYPRkmgPirvPneAtZwngmGUAj7hk3nhTS6p0 LeC6cm+mHUlSFHDf7hOk0FCjbT+ESGWbm4JC/1XbDETH57AY6FsBw5/WEX5nPoun hoSPglBnN3vV8C+zBS2QgQE7fMTIE3DHPgMTcEEd28wt2BqkavCzQfG2jEHl/Z9B 457/dC8KsNop31P0atRa4jIo3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHukYwzY 1qPeCcWpbr4ya9DAJ2QeMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG3NyUdUf2YCg6hN3Y9fKPM1N5nMR7EOqOYzlXbSJFmLpV64YeT8Cx zclkw0x9CcIewTUsRy2jxDioTP0HMdPGj+APq0IfTGzirv8hGFtIFC1WuqJv3qZn f76YET4dTyKSLiwZtB4zklG5y1o+EUqW+54vKL8KnXjtkGXtBClmn7+KpTG4rzbG s834K+q2PWgt0X5UxYEgm7/5n3xy0aczeI9HIdX9HQ3a7Vh9VKj2XWN51/+Y0oAJ w4HVWSn2IczIcsAmlQJNPuDaiGk+45Vmi0990cyNbSSC5myfjCuMjUr6/C0c0AiN dysN9I1aUbNh7/oD2TdocVvewGdkC69w -----END CERTIFICATE-----Generated at Sat Aug 23 16:14:18 2025 by rpki-client