$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: ktflzGOUDA1nbCj+5RscCAbMgbWdAtEPv/J+gRTeUQk= Subject key identifier: 0C:E3:65:FF:8D:A3:37:79:7A:81:A6:F9:F0:2D:87:94:6E:D0:FB:FE Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: EF Signing time: Sat 23 Aug 2025 05:27:35 +0000 Manifest this update: Sat 23 Aug 2025 05:27:34 +0000 Manifest next update: Sat 30 Aug 2025 05:27:34 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: 8OWS8n/wMF1s/2N+KOddiTPYOFV5VeXw6rJDJ2cmyEM=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Aug 23 05:27:34 2025 GMT Not After : Aug 30 05:27:34 2025 GMT Subject: CN=68a95147-263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:35:3d:b3:8b:28:97:69:d8:0c:cc:d2:8e: 14:2e:75:a7:51:fd:d3:e7:9b:2d:af:e5:45:d6:a7: 5a:3f:da:43:51:d0:9c:a2:51:66:cf:3c:49:c9:00: 4d:67:7c:ea:2e:75:7a:c9:d8:bd:91:e6:31:84:52: 9e:77:4f:d8:01:49:27:52:9c:86:e1:36:e9:81:f1: b0:86:14:03:a8:73:62:a9:e8:e7:6b:70:d1:f4:75: 85:74:8f:8e:1b:70:a8:b2:f0:9b:5f:4c:04:c1:3d: cc:79:d5:5b:f1:6c:d1:52:55:d9:9a:3c:f8:c5:72: 14:2c:18:85:89:77:25:8a:58:a8:f0:77:56:49:01: 09:02:a3:ca:6a:9a:f1:c1:96:f0:9e:74:e2:55:0c: 63:6d:4e:03:5a:ad:f2:e1:4a:cb:9f:39:85:e7:6c: aa:ca:7d:44:17:ad:f3:84:ca:5d:74:da:b1:15:a7: 2d:73:7f:6e:ce:c2:e5:9b:b1:4b:5f:fc:f9:5b:23: 8d:06:66:97:82:68:64:21:d8:b9:da:aa:f3:36:7b: 12:01:d9:fd:f5:04:c9:3b:19:e0:e1:ef:3d:8e:b5: 27:68:5c:6d:29:44:66:66:ab:73:50:27:2a:59:cf: 06:d5:9b:59:3e:8c:01:4a:2b:09:b4:77:41:ed:52: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E3:65:FF:8D:A3:37:79:7A:81:A6:F9:F0:2D:87:94:6E:D0:FB:FE X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:f5:2e:16:b1:af:7a:23:0e:c2:cb:b4:96:45:e4:c4:3e: 04:dc:e7:d6:1a:14:49:20:6f:99:90:2f:da:8d:8f:c7:d4:82: 34:7f:c6:3f:34:20:b7:93:5d:f2:43:13:1d:f0:57:2a:b6:a4: 18:e3:b8:18:2b:ec:1f:8e:ea:a5:99:7b:62:20:3c:92:65:b8: ef:55:f1:40:0a:a4:c2:a0:a7:fd:46:f4:3d:1f:8a:36:60:da: 5a:61:57:a3:5b:41:61:dc:2d:2b:ba:12:ff:c5:9c:b2:51:f5: 33:1e:b6:f3:11:00:58:8b:ba:eb:e5:cc:ce:2c:19:75:e1:4d: b7:82:e5:05:0f:ae:7b:c0:b6:c9:e4:03:80:3e:77:c0:a6:68: 75:e9:41:03:04:b1:cb:73:00:19:da:6d:8e:7a:6e:ba:e2:07: b1:29:20:92:7a:b8:a7:57:23:a0:13:de:73:21:67:60:a6:bc: 0e:0b:6e:cf:d1:70:25:4d:55:6e:72:5f:5a:22:da:78:8a:2c: d8:39:d6:81:d7:fd:81:1f:6d:19:19:bd:b2:28:9c:4f:8c:55: fb:a7:a4:99:10:e7:e8:90:f3:e0:c1:c3:83:84:9c:bf:e2:6d: 57:50:59:e6:21:2f:1c:e9:8a:48:70:1f:9d:31:7b:1d:5d:44: e1:c8:b7:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwODIzMDUyNzM0WhcNMjUwODMwMDUyNzM0WjAYMRYwFAYD VQQDEw02OGE5NTE0Ny0yNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KA1PbOLKJdp2AzM0o4ULnWnUf3T55str+VF1qdaP9pDUdCcolFmzzxJyQBN Z3zqLnV6ydi9keYxhFKed0/YAUknUpyG4TbpgfGwhhQDqHNiqejna3DR9HWFdI+O G3CosvCbX0wEwT3MedVb8WzRUlXZmjz4xXIULBiFiXclilio8HdWSQEJAqPKaprx wZbwnnTiVQxjbU4DWq3y4UrLnzmF52yqyn1EF63zhMpddNqxFactc39uzsLlm7FL X/z5WyONBmaXgmhkIdi52qrzNnsSAdn99QTJOxng4e89jrUnaFxtKURmZqtzUCcq Wc8G1ZtZPowBSisJtHdB7VLfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzjZf+N ozd5eoGm+fAth5Ru0Pv+MB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm+vUuFrGveiMOwsu0lkXkxD4E3OfWGhRJIG+ZkC/ajY/H1II0f8Y/ NCC3k13yQxMd8FcqtqQY47gYK+wfjuqlmXtiIDySZbjvVfFACqTCoKf9RvQ9H4o2 YNpaYVejW0Fh3C0ruhL/xZyyUfUzHrbzEQBYi7rr5czOLBl14U23guUFD657wLbJ 5AOAPnfApmh16UEDBLHLcwAZ2m2Oem664gexKSCSerinVyOgE95zIWdgprwOC27P 0XAlTVVucl9aItp4iizYOdaB1/2BH20ZGb2yKJxPjFX7p6SZEOfokPPgwcODhJy/ 4m1XUFnmIS8c6YpIcB+dMXsdXUThyLeC -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:06 2025 by rpki-client