$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: GGWlt6l36iNPN+jdaI6kPI7cv5duNA5Q6GxZb+rx/2c= Subject key identifier: 7F:42:F0:B7:88:3C:3A:BF:67:16:2A:8A:6C:3C:B8:C5:A0:36:29:5A Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0430 Signing time: Thu 03 Jul 2025 00:41:08 +0000 Manifest this update: Thu 03 Jul 2025 00:41:08 +0000 Manifest next update: Thu 10 Jul 2025 00:41:08 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: MpvdLOipiU6PDL6CSsstvQwqXDSK7BGT9xskdK/UrfA=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Jul 3 00:41:08 2025 GMT Not After : Jul 10 00:41:08 2025 GMT Subject: CN=6865d1a4-932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:ba:19:3b:90:93:a8:75:8b:9b:46:c7:f4: 7b:e9:6a:32:ff:5a:de:09:91:6f:83:4d:55:93:64: 41:66:33:ba:9b:68:fa:fb:88:a9:ee:6a:02:ce:97: f2:52:f9:8c:88:b2:59:05:6a:66:97:a7:9c:86:03: 92:76:99:df:37:10:e6:39:23:5f:9b:a5:c0:1f:dc: df:eb:54:c5:dc:71:8d:46:e6:46:db:ba:ef:76:7a: d0:3f:31:2d:4c:f2:54:84:7e:cf:b6:a4:c0:ce:ad: bf:62:08:31:2a:a3:78:42:e3:32:0a:5a:42:8a:b4: 22:32:3a:b1:10:d2:35:2f:42:f3:a6:7f:21:44:10: 8f:b2:bb:4b:7c:45:94:4a:5e:7e:40:d4:c9:44:c2: 87:ba:b6:a0:82:46:45:5e:d7:53:ee:5b:6a:94:03: 46:2c:c8:29:c7:a7:9a:b5:ad:94:2d:7d:cb:92:ce: 61:2d:13:79:f8:a4:24:42:e1:5a:b8:da:cf:ef:cb: 15:47:63:15:67:54:33:29:fd:7e:06:62:36:ec:d5: 2d:a5:66:d8:ab:25:67:ca:1b:6b:05:50:0d:99:2d: 12:65:ff:54:e6:38:1c:69:64:ff:ba:14:2f:8d:8e: 73:08:f6:2c:39:54:40:63:ed:e4:d9:b1:a0:55:0f: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:F0:B7:88:3C:3A:BF:67:16:2A:8A:6C:3C:B8:C5:A0:36:29:5A X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fb:81:d2:d3:22:7d:74:47:1a:c6:81:30:3c:1b:7a:0b:74: 21:d3:dd:31:db:f7:f8:1e:7c:3e:ea:c2:ed:54:55:02:33:0f: a5:12:d5:d8:b1:a0:3b:56:72:ee:e7:8c:d5:8e:a4:e8:a2:91: c8:2a:d2:20:57:c1:67:cc:3e:30:f8:22:7d:bc:33:22:55:68: 55:2d:ed:c7:e1:3a:88:52:9a:dd:22:e3:44:3d:4d:72:11:33: 5e:2e:85:6e:89:1d:9f:bd:2e:02:66:b6:ef:02:51:d3:4f:09: 05:c7:91:e4:04:ce:a1:93:03:79:75:dd:59:fa:48:65:55:3f: 69:ad:9f:1f:56:bb:85:dc:1d:1a:ac:d2:36:1e:1d:da:cd:20: b9:b9:04:5c:80:98:db:41:02:28:8f:cf:e2:58:03:b7:87:4e: 71:40:29:23:0e:e9:6d:94:b0:09:8c:d6:9d:97:ed:ef:af:05: 08:5a:87:4b:10:2b:28:f2:14:b2:5c:86:ac:b4:29:b4:eb:0a: c9:ec:02:32:26:dc:15:36:2d:34:14:54:30:b2:e0:5d:c3:5f: 86:8c:c3:6b:ae:8c:29:88:a2:75:48:af:4e:50:35:c8:dd:e5: c2:d5:c6:bc:1e:f6:c7:ff:4b:54:8f:fd:de:2a:02:d5:c5:56: 66:26:c7:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwNzAzMDA0MTA4WhcNMjUwNzEwMDA0MTA4WjAYMRYwFAYD VQQDEw02ODY1ZDFhNC05MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnm6GTuQk6h1i5tGx/R76Woy/1reCZFvg01Vk2RBZjO6m2j6+4ip7moCzpfy UvmMiLJZBWpml6echgOSdpnfNxDmOSNfm6XAH9zf61TF3HGNRuZG27rvdnrQPzEt TPJUhH7PtqTAzq2/YggxKqN4QuMyClpCirQiMjqxENI1L0Lzpn8hRBCPsrtLfEWU Sl5+QNTJRMKHuraggkZFXtdT7ltqlANGLMgpx6eata2ULX3Lks5hLRN5+KQkQuFa uNrP78sVR2MVZ1QzKf1+BmI27NUtpWbYqyVnyhtrBVANmS0SZf9U5jgcaWT/uhQv jY5zCPYsOVRAY+3k2bGgVQ/KYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9C8LeI PDq/ZxYqimw8uMWgNilaMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX+4HS0yJ9dEcaxoEwPBt6C3Qh090x2/f4Hnw+6sLtVFUCMw+lEtXY saA7VnLu54zVjqToopHIKtIgV8FnzD4w+CJ9vDMiVWhVLe3H4TqIUprdIuNEPU1y ETNeLoVuiR2fvS4CZrbvAlHTTwkFx5HkBM6hkwN5dd1Z+khlVT9prZ8fVruF3B0a rNI2Hh3azSC5uQRcgJjbQQIoj8/iWAO3h05xQCkjDultlLAJjNadl+3vrwUIWodL ECso8hSyXIastCm06wrJ7AIyJtwVNi00FFQwsuBdw1+GjMNrrowpiKJ1SK9OUDXI 3eXC1ca8HvbH/0tUj/3eKgLVxVZmJscJ -----END CERTIFICATE-----Generated at Fri Jul 4 08:05:24 2025 by rpki-client