$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: OUaTMd8ZiQqBRgbRmjrWFHGcUKcG88Z7W+sSo6CNhp4= Subject key identifier: 68:D8:40:41:2A:AF:2F:5E:06:F2:8A:7D:E2:90:45:B6:0C:DC:77:F7 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09DB Signing time: Sat 18 Oct 2025 20:57:09 +0000 Manifest this update: Sat 18 Oct 2025 20:57:09 +0000 Manifest next update: Sat 25 Oct 2025 20:57:09 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: nt3l7gu9dRj55ztNrN1+qKsEDo/9E4CsHY8e4uV8ldA=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Oct 18 20:57:09 2025 GMT Not After : Oct 25 20:57:09 2025 GMT Subject: CN=68f3ff25-5252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:63:fd:df:a3:68:d9:43:bd:e3:7e:77:a0: 28:ff:24:10:69:00:9e:19:1a:dc:bb:ba:e9:85:c7: d5:98:6f:39:6c:1b:5e:15:1f:46:be:11:35:70:9a: 50:e7:d1:bd:12:b2:81:f1:42:f1:ba:8c:b5:fe:da: eb:74:35:ba:1c:22:fa:50:d8:52:32:8e:9a:71:ee: ee:87:c0:4b:19:a8:fb:26:e2:05:05:84:08:40:32: 47:fc:da:cb:24:6a:8e:d5:35:15:39:44:fa:5f:b2: 11:ab:ca:ed:3a:dc:bf:b3:4c:24:76:2d:8c:65:86: c1:83:55:eb:b5:62:09:2d:f8:62:4a:24:81:43:11: 14:ce:43:7f:5e:f8:16:b3:e4:56:77:a4:5c:72:2b: a1:55:3d:f2:75:5f:11:d5:34:40:df:eb:de:52:76: b1:90:21:7f:55:58:66:14:11:3e:9d:d0:f2:22:68: a8:23:54:28:3a:4d:aa:12:3f:b8:87:b7:cd:f3:51: e6:21:de:cc:b5:ae:07:9d:19:91:ae:64:aa:7f:13: e2:67:bc:99:cf:a1:a8:66:b1:10:21:e8:4b:45:46: f8:60:48:2d:42:91:f5:4c:61:70:13:3f:5a:8f:39: 84:af:9e:95:65:40:31:a0:c3:67:5c:69:e8:96:90: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:40:41:2A:AF:2F:5E:06:F2:8A:7D:E2:90:45:B6:0C:DC:77:F7 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7c:3a:36:0d:8d:08:cb:ea:f5:eb:54:1c:77:33:38:f3:50: a1:1e:d6:bf:c1:2a:0a:83:41:93:5d:d3:2d:e3:52:dc:2c:cb: f0:d4:fe:a3:17:0b:fe:88:ff:3e:ee:8e:a7:56:df:bd:0a:4a: ab:52:9e:03:97:fa:76:e6:5d:be:28:b0:f1:81:c6:bb:01:53: 15:23:09:e1:e9:c4:d0:88:ae:82:30:6b:b0:40:a6:c2:93:85: 5d:e8:3d:f4:30:4b:d3:79:cf:be:61:f5:2e:c4:9e:14:6e:ad: e6:4d:44:e4:17:7b:1e:2b:4c:a6:cc:87:08:87:f6:3b:fc:7f: 2e:ae:9f:43:2f:d5:56:44:10:87:76:db:8b:9f:38:73:74:56: 5d:73:0e:d8:5a:6a:ea:8f:69:38:c1:63:dc:09:b2:0a:a2:59: bc:ec:53:2d:5e:35:26:34:11:b0:7c:f7:4a:a4:9a:c8:99:4a: b2:f0:95:36:77:a3:f7:2b:54:53:45:29:07:28:08:1b:ad:e8: e6:d4:b1:d5:68:9d:b9:cb:a3:5a:ff:83:8a:ad:2c:dc:97:cd: ba:c4:49:eb:d8:95:09:9e:fc:a0:97:e0:78:dd:32:20:9a:9d: aa:f0:17:bd:0b:af:d2:6d:13:46:cb:3e:4f:aa:59:06:f9:57: 7b:a9:53:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUxMDE4MjA1NzA5WhcNMjUxMDI1MjA1NzA5WjAYMRYwFAYD VQQDEw02OGYzZmYyNS01MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6Rj/d+jaNlDveN+d6Ao/yQQaQCeGRrcu7rphcfVmG85bBteFR9GvhE1cJpQ 59G9ErKB8ULxuoy1/trrdDW6HCL6UNhSMo6ace7uh8BLGaj7JuIFBYQIQDJH/NrL JGqO1TUVOUT6X7IRq8rtOty/s0wkdi2MZYbBg1XrtWIJLfhiSiSBQxEUzkN/XvgW s+RWd6RcciuhVT3ydV8R1TRA3+veUnaxkCF/VVhmFBE+ndDyImioI1QoOk2qEj+4 h7fN81HmId7Mta4HnRmRrmSqfxPiZ7yZz6GoZrEQIehLRUb4YEgtQpH1TGFwEz9a jzmEr56VZUAxoMNnXGnolpCyjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjYQEEq ry9eBvKKfeKQRbYM3Hf3MB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzfDo2DY0Iy+r161QcdzM481ChHta/wSoKg0GTXdMt41LcLMvw1P6j Fwv+iP8+7o6nVt+9CkqrUp4Dl/p25l2+KLDxgca7AVMVIwnh6cTQiK6CMGuwQKbC k4Vd6D30MEvTec++YfUuxJ4Ubq3mTUTkF3seK0ymzIcIh/Y7/H8urp9DL9VWRBCH dtuLnzhzdFZdcw7YWmrqj2k4wWPcCbIKolm87FMtXjUmNBGwfPdKpJrImUqy8JU2 d6P3K1RTRSkHKAgbrejm1LHVaJ25y6Na/4OKrSzcl826xEnr2JUJnvygl+B43TIg mp2q8Be9C6/SbRNGyz5PqlkG+Vd7qVPe -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:13 2025 by rpki-client