$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: Lt86rHuJg1kDegT+LTlbI3+oQ8No+ERStbvEclOL7Ks= Subject key identifier: A6:C4:F7:F3:1C:95:E0:7A:F7:78:16:E8:89:E0:55:65:3F:00:AE:89 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: D6 Signing time: Sat 05 Jul 2025 05:52:29 +0000 Manifest this update: Sat 05 Jul 2025 05:52:29 +0000 Manifest next update: Sat 12 Jul 2025 05:52:29 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: mzpDPmzI0TLyY0ZuiV7FMx98kVDOJaQZBGsplJ3X88s=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Jul 5 05:52:29 2025 GMT Not After : Jul 12 05:52:29 2025 GMT Subject: CN=6868bd9d-f96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:fd:20:34:85:4b:c3:f8:9a:8b:68:d4:39: 00:a3:70:d0:04:d4:e6:7d:8f:15:f7:4a:56:6d:44: 03:da:f1:4c:26:30:c3:be:e9:89:71:87:a8:7f:95: d6:57:1b:c7:02:e7:01:16:51:61:b1:ea:2c:60:43: bb:4b:16:54:12:f2:c6:81:5b:86:bd:b8:8f:44:50: 2a:29:a8:89:4e:07:35:ee:6f:97:2d:bd:9e:31:37: 08:bd:70:09:36:30:69:af:13:89:1d:1a:35:1e:50: 7c:8c:18:93:22:39:d5:c7:5a:ac:3d:e0:80:85:c7: 39:08:2d:9a:fe:92:91:c3:ab:f6:72:8d:dd:a6:d0: a4:d6:df:fe:4c:53:47:f5:4b:c6:e0:26:44:be:42: 8f:9c:67:42:8a:91:b4:3c:04:22:2c:40:6f:25:88: 3b:7f:0e:52:ff:95:34:2a:9e:8c:c9:69:36:fc:1e: ca:b2:59:e8:91:df:e6:ae:da:d8:37:a3:be:1a:7e: 0c:a0:89:35:57:4f:fc:2c:a8:de:7e:7a:d2:4d:4c: 0d:20:91:e6:d4:79:43:31:b6:91:6d:46:34:92:dc: 34:5a:65:71:6b:9a:ba:f3:84:48:ae:27:a4:12:df: b2:33:54:9f:4d:39:d7:9f:12:08:fb:b5:de:ef:88: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:F7:F3:1C:95:E0:7A:F7:78:16:E8:89:E0:55:65:3F:00:AE:89 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:80:5c:10:5d:f8:25:38:1b:c9:bf:dc:71:27:37:ca:1c:05: d7:2e:08:eb:33:08:4e:67:09:d0:b9:70:73:ea:36:b8:f2:78: af:b2:2a:c4:86:d4:e1:43:96:ec:ca:f5:8a:8c:c9:d7:82:16: c6:31:69:73:3e:84:00:c7:8a:ea:6b:e7:b1:4f:17:95:47:41: 8c:c7:33:b6:89:12:55:11:7f:f7:ce:f5:d7:08:fa:5f:cd:4d: 25:fa:5c:0b:d3:83:fc:ca:68:92:c2:f9:16:68:cf:43:61:03: e0:5d:61:76:a4:98:21:31:a6:4e:02:17:ac:42:91:ac:2d:f8: b4:eb:42:63:34:54:d8:e3:cb:9a:c5:7a:44:32:d2:e2:6a:53: a1:f2:b8:2c:cc:27:e8:8b:18:f1:2b:25:93:41:43:18:0f:c7: c2:20:59:50:ef:63:ff:6c:fa:72:01:f1:a9:97:85:65:2a:b5: b6:a8:c8:cb:07:fc:34:c9:78:c4:67:79:f1:db:27:c0:40:88: d4:82:e4:e2:65:f5:e6:ef:03:2d:66:aa:39:de:72:cc:95:3d: 23:8a:76:c8:8c:46:e1:20:c4:9c:4e:ec:2c:3b:9c:27:21:db: 36:12:7f:4e:27:08:a0:c9:22:83:e0:c2:ae:d4:83:bd:d4:c8: ae:7c:63:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwNzA1MDU1MjI5WhcNMjUwNzEyMDU1MjI5WjAYMRYwFAYD VQQDEw02ODY4YmQ5ZC1mOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGr9IDSFS8P4moto1DkAo3DQBNTmfY8V90pWbUQD2vFMJjDDvumJcYeof5XW VxvHAucBFlFhseosYEO7SxZUEvLGgVuGvbiPRFAqKaiJTgc17m+XLb2eMTcIvXAJ NjBprxOJHRo1HlB8jBiTIjnVx1qsPeCAhcc5CC2a/pKRw6v2co3dptCk1t/+TFNH 9UvG4CZEvkKPnGdCipG0PAQiLEBvJYg7fw5S/5U0Kp6MyWk2/B7Kslnokd/mrtrY N6O+Gn4MoIk1V0/8LKjefnrSTUwNIJHm1HlDMbaRbUY0ktw0WmVxa5q684RIriek Et+yM1SfTTnXnxII+7Xe74ih9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbE9/Mc leB693gW6IngVWU/AK6JMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6gFwQXfglOBvJv9xxJzfKHAXXLgjrMwhOZwnQuXBz6ja48nivsirE htThQ5bsyvWKjMnXghbGMWlzPoQAx4rqa+exTxeVR0GMxzO2iRJVEX/3zvXXCPpf zU0l+lwL04P8ymiSwvkWaM9DYQPgXWF2pJghMaZOAhesQpGsLfi060JjNFTY48ua xXpEMtLialOh8rgszCfoixjxKyWTQUMYD8fCIFlQ72P/bPpyAfGpl4VlKrW2qMjL B/w0yXjEZ3nx2yfAQIjUguTiZfXm7wMtZqo53nLMlT0jinbIjEbhIMScTuwsO5wn Ids2En9OJwigySKD4MKu1IO91MiufGOe -----END CERTIFICATE-----Generated at Sat Jul 5 07:53:26 2025 by rpki-client