$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: wSruoZjpC1iSKd8UsH0QPFFWjpSOu5AioHKiGWBVsIs= Subject key identifier: 14:04:7D:BA:5A:21:E5:C5:6C:22:E0:30:9C:36:BA:CE:3E:12:81:1E Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09BE Signing time: Fri 22 Aug 2025 20:07:32 +0000 Manifest this update: Fri 22 Aug 2025 20:07:32 +0000 Manifest next update: Fri 29 Aug 2025 20:07:32 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: Awqssk/wLUQsf9duUiXrQurIK4X2LFj98VU2i5o2B9g=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Aug 22 20:07:32 2025 GMT Not After : Aug 29 20:07:32 2025 GMT Subject: CN=68a8ce04-b4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:cb:2f:90:02:6f:59:11:78:f8:ac:1b:fc: 53:6f:55:71:e9:8b:cb:5b:36:fe:0b:8a:37:9a:97: dd:f0:3f:28:92:01:d5:64:cf:a1:56:25:03:73:de: 07:be:3a:a9:f1:b3:94:0b:cb:ad:d8:8e:fa:5d:5d: 3d:84:42:0f:a6:7b:25:43:8d:4e:00:d0:76:b6:f0: 10:0a:40:ff:2a:62:e0:3e:53:0a:71:7a:9c:78:20: 96:d0:22:1b:eb:c8:a7:83:38:34:17:af:11:67:66: 89:17:a6:9d:a0:ad:9b:ae:ec:3c:07:3e:96:e5:58: f1:b1:89:4c:56:60:07:a6:34:86:0a:06:4c:11:4f: ec:db:87:77:98:c7:84:1a:e1:87:75:35:55:4c:e9: b1:a0:70:bf:71:dc:a8:3d:77:e7:0a:bd:ee:c9:57: 73:d6:40:07:d6:60:d0:73:bd:7b:c3:1e:11:02:d7: 09:1c:24:68:e0:1e:24:69:68:1a:15:e9:85:72:c6: 98:a0:49:8c:9a:87:e8:a1:ee:a3:31:51:a3:22:db: 3b:44:d7:b4:74:70:c4:8a:55:8b:56:b7:3f:03:3e: d9:87:f6:f9:0c:e4:5b:70:e3:0d:b5:3d:32:c2:90: 5d:15:01:e5:4e:2b:da:84:ce:eb:c7:83:b8:fd:87: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:04:7D:BA:5A:21:E5:C5:6C:22:E0:30:9C:36:BA:CE:3E:12:81:1E X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b5:97:2d:7e:6e:06:bb:54:09:b2:d5:33:ef:20:2c:f8:74: bd:3b:3b:20:fc:9f:15:8a:38:a4:5f:3f:64:ef:69:00:39:7f: 5f:38:e2:42:f5:d5:ee:6d:a8:90:f4:6e:30:e4:b8:f1:d2:93: 3c:e9:29:37:c2:26:e0:e2:3b:cc:56:1a:33:83:9f:de:25:36: 2b:ce:15:a6:83:ac:5f:14:36:65:dd:4e:7b:d9:7d:18:62:df: 1c:7f:10:b2:21:f5:67:74:ac:68:f4:c2:2a:ca:48:6a:36:7f: d9:f1:51:ba:28:89:f4:4a:67:c3:c9:9f:16:9e:15:57:f5:d1: 7b:ae:8c:76:48:8c:79:93:cc:d6:e5:fa:54:0f:ed:f7:fb:7e: 47:23:f8:bf:c1:96:04:39:3c:4d:0e:71:26:c3:85:7f:2b:54: c0:ad:53:a9:7f:da:69:0f:b2:42:19:55:29:c7:90:c6:61:7e: 04:be:6f:87:44:90:12:a8:79:74:29:a1:b7:81:fc:c3:15:a1: f2:97:26:4a:a0:7a:2a:25:b3:24:3b:0e:48:f4:f0:b2:c1:1f: d6:08:22:82:75:a6:f8:8c:6a:bc:78:91:ab:cb:e5:be:94:b6: 66:21:84:db:68:bc:92:d1:3e:60:d8:ec:f4:b4:5a:6d:81:78: 9b:63:cb:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUwODIyMjAwNzMyWhcNMjUwODI5MjAwNzMyWjAYMRYwFAYD VQQDEw02OGE4Y2UwNC1iNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOLLL5ACb1kRePisG/xTb1Vx6YvLWzb+C4o3mpfd8D8okgHVZM+hViUDc94H vjqp8bOUC8ut2I76XV09hEIPpnslQ41OANB2tvAQCkD/KmLgPlMKcXqceCCW0CIb 68ingzg0F68RZ2aJF6adoK2bruw8Bz6W5VjxsYlMVmAHpjSGCgZMEU/s24d3mMeE GuGHdTVVTOmxoHC/cdyoPXfnCr3uyVdz1kAH1mDQc717wx4RAtcJHCRo4B4kaWga FemFcsaYoEmMmofooe6jMVGjIts7RNe0dHDEilWLVrc/Az7Zh/b5DORbcOMNtT0y wpBdFQHlTivahM7rx4O4/Yc8uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQEfbpa IeXFbCLgMJw2us4+EoEeMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYtZctfm4Gu1QJstUz7yAs+HS9Ozsg/J8VijikXz9k72kAOX9fOOJC 9dXubaiQ9G4w5Ljx0pM86Sk3wibg4jvMVhozg5/eJTYrzhWmg6xfFDZl3U572X0Y Yt8cfxCyIfVndKxo9MIqykhqNn/Z8VG6KIn0SmfDyZ8WnhVX9dF7rox2SIx5k8zW 5fpUD+33+35HI/i/wZYEOTxNDnEmw4V/K1TArVOpf9ppD7JCGVUpx5DGYX4Evm+H RJASqHl0KaG3gfzDFaHylyZKoHoqJbMkOw5I9PCywR/WCCKCdab4jGq8eJGry+W+ lLZmIYTbaLyS0T5g2Oz0tFptgXibY8uT -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:26 2025 by rpki-client