$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json) Hash identifier: ciudcp1G3fV0wahglZ6mbhxMkWe6R+b6Kp8k3VT/S2I= Subject key identifier: 21:9B:0B:5A:C5:B9:BD:24:60:C1:D5:BF:30:1B:59:1A:12:BD:90:39 Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft Manifest number: 35 Signing time: Sat 23 Aug 2025 07:52:02 +0000 Manifest this update: Sat 23 Aug 2025 07:52:02 +0000 Manifest next update: Sat 30 Aug 2025 07:52:01 +0000 Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: ysq8anIoUSHKnrlI20im8RAYpLkrOE9h9rsesjsg9Wc=) 2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Validity Not Before: Aug 23 07:52:02 2025 GMT Not After : Aug 30 07:52:01 2025 GMT Subject: CN=68a97322-40ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:d6:02:55:9f:79:0a:2e:1b:4a:f6:f2:a6: 3b:4f:7e:59:dc:ca:17:ee:48:ed:b7:12:f2:8b:0a: e3:fc:49:60:09:19:19:81:d9:3b:fc:94:f9:ec:05: 7c:6a:e1:e2:44:16:01:02:05:4f:e9:96:6c:41:f6: 5a:f9:e9:16:ef:b5:91:02:33:ff:2d:a0:6d:21:b3: 92:c9:fa:2d:e6:9a:94:5d:14:4a:28:66:58:8f:0d: cd:3b:20:f5:eb:f1:1c:4c:d3:de:9f:b1:2d:e7:92: f7:d0:fc:50:26:ea:33:1c:eb:a4:bb:ce:04:2f:4d: 34:bf:71:5b:b3:c0:8b:31:10:c4:41:9c:20:c5:7c: b0:47:c4:d8:33:c7:57:58:03:e7:66:d2:6f:ad:f8: e9:59:a3:78:4b:f0:2b:b3:2a:65:49:b6:3f:05:a1: 0f:30:55:40:58:cf:e2:3e:97:f0:fa:49:4e:bc:41: 11:75:8c:dd:ba:32:11:10:ad:f4:b2:06:92:e1:63: b6:c8:4a:f4:9f:f9:35:3d:41:f6:92:6f:7f:25:a2: 9f:c2:0c:3e:07:e0:d8:84:69:c7:16:67:34:62:1e: 34:80:fc:62:50:fc:5b:d6:2e:d8:58:64:38:83:04: 9c:8d:7b:e5:d6:c8:45:64:87:82:af:50:1a:59:74: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:0B:5A:C5:B9:BD:24:60:C1:D5:BF:30:1B:59:1A:12:BD:90:39 X509v3 Authority Key Identifier: keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:7a:92:11:4b:08:3d:ae:49:bf:84:e7:82:5c:bb:d7:f1:c9: 8f:bb:6b:05:a7:9b:c8:eb:3a:49:37:c5:16:2d:2f:52:e8:6f: 90:23:a8:4a:dc:82:e5:1e:28:e7:8a:0c:53:52:f9:a1:ca:4a: 0a:2c:fd:89:fe:29:9c:f5:eb:44:a0:74:91:9f:da:d6:38:fe: 3f:f6:18:33:07:25:d6:75:99:24:6b:46:2c:d1:2a:44:10:c2: 03:06:40:07:b5:c1:f6:77:d3:2c:93:84:20:87:e8:29:f1:7d: c4:c8:ab:7f:ae:a5:a0:f9:d3:d3:02:c4:73:0b:24:76:cd:f8: c3:da:77:2f:27:54:d7:7e:56:1b:c7:0f:d4:98:d3:b0:61:cf: b0:9d:e7:ed:e2:c1:8d:5d:00:17:e1:5f:11:a8:cb:70:3e:88: e9:f1:51:a2:ca:38:d1:22:88:53:14:53:d3:2e:9a:86:63:f8: 50:0c:c8:e7:fc:ff:1e:48:0b:78:fc:c9:40:80:8d:aa:13:25: fe:59:2a:b7:e6:a7:b8:05:96:e4:fb:b7:78:6c:a6:67:3e:4d: c3:2c:b2:a4:02:f0:e7:37:19:df:e3:ce:01:1e:b5:1b:40:dd: 5f:d3:f3:3f:b4:75:34:c4:b1:bd:6b:dc:09:96:88:72:e3:a1: b1:da:3c:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG MjZGNjUyNTAeFw0yNTA4MjMwNzUyMDJaFw0yNTA4MzAwNzUyMDFaMBgxFjAUBgNV BAMTDTY4YTk3MzIyLTQwZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXq9YCVZ95Ci4bSvbypjtPflncyhfuSO23EvKLCuP8SWAJGRmB2Tv8lPnsBXxq 4eJEFgECBU/plmxB9lr56RbvtZECM/8toG0hs5LJ+i3mmpRdFEooZliPDc07IPXr 8RxM096fsS3nkvfQ/FAm6jMc66S7zgQvTTS/cVuzwIsxEMRBnCDFfLBHxNgzx1dY A+dm0m+t+OlZo3hL8CuzKmVJtj8FoQ8wVUBYz+I+l/D6SU68QRF1jN26MhEQrfSy BpLhY7bISvSf+TU9QfaSb38lop/CDD4H4NiEaccWZzRiHjSA/GJQ/FvWLthYZDiD BJyNe+XWyEVkh4KvUBpZdNV7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIZsLWsW5 vSRgwdW/MBtZGhK9kDkwHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACR6khFLCD2uSb+E54Jcu9fxyY+7awWnm8jrOkk3xRYtL1Lob5AjqErc guUeKOeKDFNS+aHKSgos/Yn+KZz160SgdJGf2tY4/j/2GDMHJdZ1mSRrRizRKkQQ wgMGQAe1wfZ30yyThCCH6CnxfcTIq3+upaD509MCxHMLJHbN+MPady8nVNd+VhvH D9SY07Bhz7Cd5+3iwY1dABfhXxGoy3A+iOnxUaLKONEiiFMUU9MumoZj+FAMyOf8 /x5IC3j8yUCAjaoTJf5ZKrfmp7gFluT7t3hspmc+TcMssqQC8Oc3Gd/jzgEetRtA 3V/T8z+0dTTEsb1r3AmWiHLjobHaPIo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:11 2025 by rpki-client