$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: unx2Wl/5GQl7tzXsu2JZoXnSXsZiLpK2cnpRZRxs9Zc= Subject key identifier: C7:76:8D:DE:C1:96:5A:E4:5C:B9:07:6F:8A:A8:2B:CD:06:FF:9F:6A Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 2599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 2589 Signing time: Fri 22 Aug 2025 15:47:08 +0000 Manifest this update: Fri 22 Aug 2025 15:47:07 +0000 Manifest next update: Fri 29 Aug 2025 15:47:07 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: 393UvLbppUPq1BHfDQ9JVKm0dHA7QkdUkYPzVmgPajI=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9625 (0x2599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Aug 22 15:47:07 2025 GMT Not After : Aug 29 15:47:07 2025 GMT Subject: CN=68a890fc-df2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9f:17:70:dd:af:71:2f:79:90:a1:71:07:34: ac:61:9b:63:09:b6:eb:b1:95:2e:44:57:fa:3a:6e: e4:22:37:0b:28:2d:d5:2f:d9:70:0c:25:15:ac:53: ac:e5:6b:84:90:e3:eb:83:47:8c:b5:60:25:eb:e1: 54:6a:cb:f9:a0:db:47:98:09:39:fb:ef:a5:17:8d: 79:70:25:fd:8c:aa:3c:ea:05:a8:df:e2:30:92:ed: 1e:00:3b:4c:25:9d:42:c1:7f:c0:99:df:e9:ce:a4: 5f:d9:5d:b5:1d:17:0d:83:e5:bb:93:82:17:e6:b1: 85:90:19:a5:3c:a8:df:2b:39:17:29:15:34:9d:d9: 56:ae:90:0a:81:fd:e4:cf:52:f8:98:5c:15:56:74: 2c:b3:8e:a3:b3:66:a0:ed:35:84:de:f2:44:02:71: 35:66:22:2a:88:6f:1f:22:61:67:c1:a1:82:67:fe: 3c:f5:be:b8:ca:78:b4:e0:4c:fb:18:b2:02:72:20: bf:26:9b:99:f9:50:b1:ba:67:9c:2c:20:07:7e:f5: 60:d6:db:09:42:5f:c8:3d:19:85:0b:09:cb:09:9f: 9a:aa:e0:24:46:34:4b:3e:45:02:21:e9:45:70:2c: 4e:05:35:a8:58:0e:a2:9e:22:7b:51:7d:61:db:8c: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:8D:DE:C1:96:5A:E4:5C:B9:07:6F:8A:A8:2B:CD:06:FF:9F:6A X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c2:da:3b:f5:83:80:61:82:a3:d9:7e:43:df:58:44:ac:7d: 60:21:5d:d8:af:be:b8:2f:1f:4d:46:2d:ea:f5:59:13:4f:59: 7d:d2:06:ce:10:88:7c:ac:94:d5:78:c0:de:95:c0:15:ce:c1: ae:ef:b7:44:4f:89:05:58:94:4d:0a:f9:87:60:34:41:58:76: a0:92:af:2c:0c:cc:f2:16:89:7d:3e:2c:8f:f0:c7:2b:10:9f: 14:e2:af:c7:a3:7f:3e:be:c2:b7:ff:b2:b1:a5:40:a0:4d:53: f1:d9:74:6e:22:b4:08:e4:0f:12:71:9e:e3:c3:48:28:8f:6a: b4:7c:ab:0e:f1:2e:9b:a3:18:ff:ac:36:3e:e8:c7:90:5e:ce: de:3c:56:00:12:fd:9b:d8:cb:85:72:e8:40:93:45:92:61:71: b3:13:91:1b:cf:f4:f2:6b:6c:9f:6e:71:e8:1b:34:cf:2f:84: c2:b2:84:01:5f:05:cb:7c:54:d5:59:7c:74:9c:20:bc:49:c4: a4:38:76:9b:81:3b:2a:18:a4:88:59:25:00:24:3e:f7:f8:02: f5:0e:5d:14:0c:34:d3:ed:73:55:77:e7:64:28:96:9d:57:f6: 9f:81:cf:b1:da:86:57:85:b1:3c:c7:ac:0d:65:40:d7:f4:79: 58:ac:7d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUwODIyMTU0NzA3WhcNMjUwODI5MTU0NzA3WjAYMRYwFAYD VQQDEw02OGE4OTBmYy1kZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA558XcN2vcS95kKFxBzSsYZtjCbbrsZUuRFf6Om7kIjcLKC3VL9lwDCUVrFOs 5WuEkOPrg0eMtWAl6+FUasv5oNtHmAk5+++lF415cCX9jKo86gWo3+Iwku0eADtM JZ1CwX/Amd/pzqRf2V21HRcNg+W7k4IX5rGFkBmlPKjfKzkXKRU0ndlWrpAKgf3k z1L4mFwVVnQss46js2ag7TWE3vJEAnE1ZiIqiG8fImFnwaGCZ/489b64yni04Ez7 GLICciC/JpuZ+VCxumecLCAHfvVg1tsJQl/IPRmFCwnLCZ+aquAkRjRLPkUCIelF cCxOBTWoWA6iniJ7UX1h24wn4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd2jd7B llrkXLkHb4qoK80G/59qMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRwto79YOAYYKj2X5D31hErH1gIV3Yr764Lx9NRi3q9VkTT1l90gbO EIh8rJTVeMDelcAVzsGu77dET4kFWJRNCvmHYDRBWHagkq8sDMzyFol9PiyP8Mcr EJ8U4q/Ho38+vsK3/7KxpUCgTVPx2XRuIrQI5A8ScZ7jw0goj2q0fKsO8S6boxj/ rDY+6MeQXs7ePFYAEv2b2MuFcuhAk0WSYXGzE5Ebz/Tya2yfbnHoGzTPL4TCsoQB XwXLfFTVWXx0nCC8ScSkOHabgTsqGKSIWSUAJD73+AL1Dl0UDDTT7XNVd+dkKJad V/afgc+x2oZXhbE8x6wNZUDX9HlYrH23 -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:48 2025 by rpki-client