$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: fHFeSK7UkqYGZIV7bzgVeK4Y2r+jyUbB7wJJOE7+PjI= Subject key identifier: 4C:2D:D4:AC:93:2B:2C:E5:5F:CD:D7:78:1B:A2:03:A8:00:A1:7F:71 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 15 Signing time: Thu 03 Jul 2025 08:16:41 +0000 Manifest this update: Thu 03 Jul 2025 08:16:41 +0000 Manifest next update: Thu 10 Jul 2025 08:16:41 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: uxAUubuRg/8JZtdCPC67QAg/IJe6DVxJoxa/4ZyQ+BE=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Jul 3 08:16:41 2025 GMT Not After : Jul 10 08:16:41 2025 GMT Subject: CN=68663c69-1c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:c4:9b:8a:95:9b:fc:fc:ea:0e:d1:c3:8d: 3a:8c:c2:06:be:cd:8a:77:fd:cd:49:6d:87:53:c8: a8:a1:02:a0:54:97:bc:ba:7b:53:50:50:32:55:e0: 34:88:64:ab:e8:b6:f4:78:99:f6:9b:35:19:6a:22: bd:55:7a:dd:84:7a:52:37:bc:ff:50:24:2a:c7:24: cb:27:91:76:58:cb:23:90:9d:67:df:b9:5b:43:b9: c6:74:35:43:f8:c9:fe:be:12:44:41:bd:80:8f:54: 6d:b4:e5:c0:2e:b7:75:46:77:51:5a:18:e9:e3:77: 95:22:b4:ce:6c:28:28:ff:bd:cf:84:ad:40:8c:53: c6:14:4c:b7:2f:e6:ff:d0:55:5b:1a:94:df:66:e5: 30:d6:c2:39:ac:08:8b:7a:4d:72:eb:0e:57:bf:5e: 3e:bc:8a:8e:60:58:22:bc:f0:00:d5:8b:11:a0:67: 57:13:ef:59:9e:5f:42:fe:02:c8:d5:2d:1c:94:e8: 34:be:a6:22:dd:10:b6:b3:d8:95:18:72:70:59:91: 63:3e:76:0b:6b:f1:69:e2:3e:f8:4e:dd:38:9c:79: db:1d:d3:1f:94:eb:94:8a:05:5a:2e:ac:cb:28:b9: d8:e0:be:5e:47:af:88:05:67:ab:ed:cc:47:b8:56: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:D4:AC:93:2B:2C:E5:5F:CD:D7:78:1B:A2:03:A8:00:A1:7F:71 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6f:a6:b6:83:d5:18:61:53:32:68:db:0a:cc:2e:d9:c1:5c: 24:06:6f:c1:a8:39:cc:c2:3d:f1:23:8f:73:64:c9:cc:86:31: 49:78:b5:6f:ef:ef:52:1a:69:56:64:e7:7c:0d:8e:d0:76:49: f5:97:f5:ed:0a:df:e9:78:ab:21:fe:5f:82:24:c8:b1:a2:ee: a7:10:31:5f:43:94:74:62:17:de:89:9f:09:34:48:5e:d7:41: 11:eb:b2:1b:ac:66:2c:76:36:72:3e:f5:12:84:11:f8:4a:05: 11:f9:dd:b2:ac:dd:66:2a:e4:b6:85:22:4c:3f:46:3f:b6:ea: 0b:22:b0:cf:63:4d:44:1c:de:24:19:fa:f2:2c:ee:96:ae:bf: 63:00:f3:87:97:c6:a5:6b:34:8d:cd:b8:6c:d8:22:bd:87:dd: 52:24:18:92:17:a8:18:a2:b9:59:e6:45:1a:82:b4:ba:dd:8c: d1:0d:17:d7:1d:19:21:d5:fb:10:15:79:1e:6c:24:9d:ee:d0: 50:1f:77:51:24:e8:4e:c3:21:00:50:ed:05:78:eb:d3:7d:f9: 29:15:20:3a:85:cd:d7:bb:39:c1:c1:af:9c:be:ad:8d:81:9c: 31:ca:be:60:05:77:ea:98:c7:f9:c7:91:f9:c3:e7:e2:74:fc: 60:e5:b3:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTA3MDMwODE2NDFaFw0yNTA3MTAwODE2NDFaMBgxFjAUBgNV BAMTDTY4NjYzYzY5LTFjNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCri8SbipWb/PzqDtHDjTqMwga+zYp3/c1JbYdTyKihAqBUl7y6e1NQUDJV4DSI ZKvotvR4mfabNRlqIr1Vet2EelI3vP9QJCrHJMsnkXZYyyOQnWffuVtDucZ0NUP4 yf6+EkRBvYCPVG205cAut3VGd1FaGOnjd5UitM5sKCj/vc+ErUCMU8YUTLcv5v/Q VVsalN9m5TDWwjmsCIt6TXLrDle/Xj68io5gWCK88ADVixGgZ1cT71meX0L+AsjV LRyU6DS+piLdELaz2JUYcnBZkWM+dgtr8WniPvhO3Ticedsd0x+U65SKBVourMso udjgvl5Hr4gFZ6vtzEe4Vph1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTC3UrJMr LOVfzdd4G6IDqAChf3EwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJvpraD1RhhUzJo2wrMLtnBXCQGb8GoOczCPfEjj3NkycyGMUl4tW/v 71IaaVZk53wNjtB2SfWX9e0K3+l4qyH+X4IkyLGi7qcQMV9DlHRiF96Jnwk0SF7X QRHrshusZix2NnI+9RKEEfhKBRH53bKs3WYq5LaFIkw/Rj+26gsisM9jTUQc3iQZ +vIs7pauv2MA84eXxqVrNI3NuGzYIr2H3VIkGJIXqBiiuVnmRRqCtLrdjNENF9cd GSHV+xAVeR5sJJ3u0FAfd1Ek6E7DIQBQ7QV469N9+SkVIDqFzde7OcHBr5y+rY2B nDHKvmAFd+qYx/nHkfnD5+J0/GDls9k= -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:15 2025 by rpki-client