$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: 7bIe1RLoSRJbfpgTKMa70xBT//4iT0LYt9HtoWpADQE= Subject key identifier: 39:AC:F2:FF:53:8C:1B:B1:C1:02:38:9D:F9:48:6B:31:D5:3A:3D:80 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09A3 Signing time: Mon 30 Jun 2025 20:11:28 +0000 Manifest this update: Mon 30 Jun 2025 20:11:28 +0000 Manifest next update: Mon 07 Jul 2025 20:11:28 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: QxOqQ1cCL/7T8Q53VjDXUAUaQnJI9EGFpEZGL78tj2I=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Jun 30 20:11:28 2025 GMT Not After : Jul 7 20:11:28 2025 GMT Subject: CN=6862ef70-6b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:07:16:86:a4:a8:ea:6a:de:d5:56:bf:6f:5a: 80:d1:39:f3:4c:da:97:e6:3b:01:a0:8d:60:a4:c8: 4e:d5:87:47:3e:66:eb:a7:17:54:b8:52:da:5b:3c: bf:df:43:82:a8:29:66:b6:4b:ee:de:9c:af:e8:2a: 98:53:a7:ca:ba:98:b4:5f:5b:65:c4:6e:f3:d4:81: 52:06:23:e8:52:79:aa:e5:d1:d9:b5:3b:1e:f3:e9: 92:b8:32:81:c9:d1:17:86:a6:d8:7c:49:1c:0e:9b: 77:08:d9:52:b7:ba:b5:07:86:24:8b:a1:05:bf:03: d3:c2:3e:5c:79:bf:33:b7:2a:e0:9f:47:b4:aa:f1: d2:63:23:5d:f7:e5:7b:c5:71:da:2c:f2:1f:40:91: 36:17:1a:e3:7e:39:58:a7:c1:65:57:05:6a:fa:85: 9b:93:00:a2:41:ea:eb:23:62:51:0f:04:97:18:c9: 66:3b:94:5b:8c:b3:d5:cb:08:96:5d:c9:57:5d:ef: 44:da:f1:81:f2:10:58:e9:ef:8c:22:32:b9:c0:0e: 64:d5:e4:10:fb:f3:28:59:5a:70:61:54:9e:03:75: 14:a8:6b:c3:bc:64:63:a7:e3:04:3f:97:9f:b6:da: ac:84:78:17:31:a6:49:5f:bc:d1:dc:be:c0:69:e3: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:F2:FF:53:8C:1B:B1:C1:02:38:9D:F9:48:6B:31:D5:3A:3D:80 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:7b:ec:3e:71:a4:13:d9:9c:b3:79:fc:1a:21:31:66:41:5b: 72:26:cf:29:93:75:c9:7f:62:34:ca:b8:f9:d9:99:97:1e:fb: 94:e5:42:32:e5:b0:b7:87:7d:c4:f8:48:7d:fe:70:80:2e:c6: 11:25:a6:39:17:79:e6:c4:7a:c4:57:50:78:7f:7a:ca:67:f3: e7:4e:88:97:75:7d:90:02:8c:a0:75:9d:ec:52:75:ec:f1:5b: 5e:28:b2:fd:c2:0b:27:25:8c:80:46:69:33:ab:0e:56:29:bb: 9b:7e:73:e3:66:c5:1f:5e:90:30:2f:4f:57:94:9c:32:74:47: 7d:71:03:ac:57:fb:3c:2a:46:07:01:20:08:bb:4c:d5:76:34: 63:38:a3:fc:56:78:05:b7:db:fc:6a:d4:f8:70:d0:57:d3:3e: 9a:be:9d:09:a6:ec:78:0a:41:a6:9d:86:fb:e4:f3:45:7c:0a: c9:e2:e5:c5:56:26:e9:20:54:db:9b:96:5b:e0:70:1e:6a:8b: 95:40:0d:4a:19:2c:6d:f6:c6:35:8f:f6:c0:1b:19:ce:7b:f8: c9:e3:95:ce:81:bc:a2:4c:89:3e:9d:a2:e3:71:bb:45:bf:88: 1e:0c:7a:15:23:bb:49:eb:dc:c0:ba:42:a3:3d:1d:c5:04:ad: 12:ea:d9:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUwNjMwMjAxMTI4WhcNMjUwNzA3MjAxMTI4WjAYMRYwFAYD VQQDEw02ODYyZWY3MC02YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wcWhqSo6mre1Va/b1qA0TnzTNqX5jsBoI1gpMhO1YdHPmbrpxdUuFLaWzy/ 30OCqClmtkvu3pyv6CqYU6fKupi0X1tlxG7z1IFSBiPoUnmq5dHZtTse8+mSuDKB ydEXhqbYfEkcDpt3CNlSt7q1B4Yki6EFvwPTwj5ceb8ztyrgn0e0qvHSYyNd9+V7 xXHaLPIfQJE2FxrjfjlYp8FlVwVq+oWbkwCiQerrI2JRDwSXGMlmO5RbjLPVywiW XclXXe9E2vGB8hBY6e+MIjK5wA5k1eQQ+/MoWVpwYVSeA3UUqGvDvGRjp+MEP5ef ttqshHgXMaZJX7zR3L7AaePLkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDms8v9T jBuxwQI4nflIazHVOj2AMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCke+w+caQT2ZyzefwaITFmQVtyJs8pk3XJf2I0yrj52ZmXHvuU5UIy 5bC3h33E+Eh9/nCALsYRJaY5F3nmxHrEV1B4f3rKZ/PnToiXdX2QAoygdZ3sUnXs 8VteKLL9wgsnJYyARmkzqw5WKbubfnPjZsUfXpAwL09XlJwydEd9cQOsV/s8KkYH ASAIu0zVdjRjOKP8VngFt9v8atT4cNBX0z6avp0Jpux4CkGmnYb75PNFfArJ4uXF VibpIFTbm5Zb4HAeaouVQA1KGSxt9sY1j/bAGxnOe/jJ45XOgbyiTIk+naLjcbtF v4geDHoVI7tJ69zAukKjPR3FBK0S6tnS -----END CERTIFICATE-----Generated at Tue Jul 1 16:02:00 2025 by rpki-client