$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: L2e3hjcS2Lve1Ss9mEcelFPsYeMIvHuFiGIvX2+aDrg= Subject key identifier: 68:41:69:D1:D0:EC:02:8B:06:EF:6D:AB:3B:1D:20:82:00:D0:89:03 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:55:27 +0000 Manifest this update: Sat 23 Aug 2025 07:55:27 +0000 Manifest next update: Sat 30 Aug 2025 07:55:27 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: k01Gr7b87FZ0U7r2Jo3zIS3af2ON4tQ9ysll/Zbq5Ww=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Aug 23 07:55:27 2025 GMT Not After : Aug 30 07:55:27 2025 GMT Subject: CN=68a973ef-e195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:a2:66:1e:5d:3c:7a:76:88:0e:c8:ab:55: 4f:cf:ec:cd:fd:bc:60:23:db:2a:34:ad:6e:d0:1f: 88:44:d1:05:58:7f:e4:f6:b8:77:48:cb:ad:66:b9: c0:eb:a2:64:7d:48:38:e5:f8:19:25:18:97:d9:61: 58:54:77:f2:2a:9b:f8:fa:e0:48:5f:a0:9e:9a:4b: 9e:87:7b:4a:4a:66:6e:f2:34:30:78:84:31:2c:fc: a9:77:49:a2:00:fe:57:bc:0b:3e:ed:9c:77:26:63: 20:08:c3:63:a8:0d:46:94:5e:5a:6b:bd:b0:c9:ef: 99:f6:b5:4f:64:6c:ce:ef:6f:87:45:b8:ef:55:1a: 5c:8a:24:74:d8:b1:28:3d:31:b7:69:e1:58:68:a7: 1e:9a:9a:ad:d8:7f:a1:45:a0:2e:6a:07:49:fd:2a: 1a:38:f5:67:fe:21:01:47:60:89:a5:42:12:87:b9: 84:6b:dc:01:01:b5:8d:02:84:76:10:ad:44:90:aa: c7:47:a7:79:e0:c1:53:3c:59:8c:73:4d:e9:78:ec: 36:15:dc:d7:2a:d3:a1:8b:9a:ed:fe:15:3b:da:0c: a9:df:33:e9:08:15:b2:cb:80:85:3a:c1:57:8d:8a: 24:9e:bf:15:55:db:d1:52:01:84:e2:ae:e6:85:59: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:41:69:D1:D0:EC:02:8B:06:EF:6D:AB:3B:1D:20:82:00:D0:89:03 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7d:cf:cf:9c:8e:0b:61:81:61:1c:e0:80:f6:34:b0:2b:27: 30:fa:dd:db:c1:fd:b6:38:e6:8f:67:0d:30:82:79:a2:e0:75: af:8e:54:9f:71:15:02:a4:2b:14:41:77:e3:e7:77:a4:e6:c8: 65:1c:1a:b6:58:73:60:8a:10:28:36:0b:87:dd:a6:87:f4:70: bb:dc:e2:ca:1a:a5:62:7c:ae:a9:67:6d:da:c3:f0:62:ed:19: 60:fa:4c:a6:1d:27:10:ee:e5:80:9b:a2:04:94:cf:9b:4b:2e: 83:92:fa:31:77:d2:97:93:68:93:aa:56:08:f4:17:78:cc:c7: 2e:d2:cc:71:61:f4:fb:a3:b5:06:ae:59:54:27:2d:06:da:dc: b2:18:ab:59:14:04:10:97:bb:d3:95:cd:98:1b:7e:60:45:6a: 10:f7:c8:b2:31:4e:38:27:16:d6:59:ac:4d:1e:bb:68:b9:60: a6:ca:f0:95:78:e2:05:c3:3c:37:e8:4f:4d:b7:65:db:b1:92: 97:e7:68:9e:7e:c0:6e:63:3a:f7:32:c1:44:d7:c4:92:a3:dd: b2:e4:d0:15:26:82:a1:e8:34:7c:83:1b:f6:fe:46:10:69:6d: 30:3c:ef:9c:f7:ea:c6:5a:35:c7:f4:f9:ce:8b:c7:4f:47:b6: 12:d8:ee:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTA4MjMwNzU1MjdaFw0yNTA4MzAwNzU1MjdaMBgxFjAUBgNV BAMTDTY4YTk3M2VmLWUxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsUqJmHl08enaIDsirVU/P7M39vGAj2yo0rW7QH4hE0QVYf+T2uHdIy61mucDr omR9SDjl+BklGJfZYVhUd/Iqm/j64EhfoJ6aS56He0pKZm7yNDB4hDEs/Kl3SaIA /le8Cz7tnHcmYyAIw2OoDUaUXlprvbDJ75n2tU9kbM7vb4dFuO9VGlyKJHTYsSg9 Mbdp4Vhopx6amq3Yf6FFoC5qB0n9Kho49Wf+IQFHYImlQhKHuYRr3AEBtY0ChHYQ rUSQqsdHp3ngwVM8WYxzTel47DYV3Ncq06GLmu3+FTvaDKnfM+kIFbLLgIU6wVeN iiSevxVV29FSAYTiruaFWTTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaEFp0dDs AosG722rOx0gggDQiQMwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJ9z8+cjgthgWEc4ID2NLArJzD63dvB/bY45o9nDTCCeaLgda+OVJ9x FQKkKxRBd+Pnd6TmyGUcGrZYc2CKECg2C4fdpof0cLvc4soapWJ8rqlnbdrD8GLt GWD6TKYdJxDu5YCbogSUz5tLLoOS+jF30peTaJOqVgj0F3jMxy7SzHFh9PujtQau WVQnLQba3LIYq1kUBBCXu9OVzZgbfmBFahD3yLIxTjgnFtZZrE0eu2i5YKbK8JV4 4gXDPDfoT023ZduxkpfnaJ5+wG5jOvcywUTXxJKj3bLk0BUmgqHoNHyDG/b+RhBp bTA875z36sZaNcf0+c6Lx09HthLY7u4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:41 2025 by rpki-client