$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json) Hash identifier: PHCSBOp+rsVjiLQUVdW/Mc8FBlDe/oMuCf7WSQn7mxg= Subject key identifier: 44:E2:B5:BC:66:22:5B:AA:B3:4D:73:D2:49:9E:14:C8:B9:19:AE:D7 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft Manifest number: 02AB Signing time: Thu 03 Jul 2025 02:57:50 +0000 Manifest this update: Thu 03 Jul 2025 02:57:49 +0000 Manifest next update: Thu 10 Jul 2025 02:57:49 +0000 Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: HP5XpJJEFdi+Lg4o+f2Baur9APlpwTPjpSfa3sKR1Zg=) 2: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: 8ElsEHtT0SW1j1aAkI7fCGcQz8Vw9D+aynR3ExaKcpk=) 3: E9472C0C144111EFB247B936C4F9AE02.roa (hash: ElxXAlN/54pNU54qDSf2Glfd6e1auSlAYgMAsI+jjIo=) 4: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: bL7WlFADw3cMus0TM2SD+wI5B/pCkUnpQijrEhDa4U0=) 5: E9258B3C037211EE9E15EE32C4F9AE02.roa (hash: KWqY8FSRWxgMExPo7oJjW6FyKZgvDdNOUOLjG23lp4c=) 6: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: ptIGt2wYMEPKhzv8i8tfWNEfDe4elqSnf1QbHzmubdk=) 7: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: qIG1nrRqmqeXhlJ4QfxZpQrhglB0XBpLi9GUgb6DFzg=) 8: E879EE7C144111EFB247B936C4F9AE02.roa (hash: qwsK6I5KvMQVVTxqatHLY4Gc06wI8z6a8GKH4pqG5s4=) 9: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: IjfhL1iMdoF6vbj8qmgjKEyAn1TdguzASGP9+nLwaQc=) 10: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: zMUCXonIy5tOWaMiCq30fCZFtIY4G0iHQ+o2rUhkbic=) 11: E22CE7EE2F9511EF8B14626CC4F9AE02.roa (hash: IZWdty8UW5xSEAar+QuBFmv4J1Y/hYIXpLhgyiEViIk=) 12: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: Q+LuT/2pIJ9IStVr144XnzBFQZyXtxyXwoGNHoKHCCk=) 13: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: sAfUcNCOt118LSTGd2ByOqCl6kCgTi6ZVqAMUJEtk3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Jul 3 02:57:49 2025 GMT Not After : Jul 10 02:57:49 2025 GMT Subject: CN=6865f1ad-b8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:57:be:58:29:ec:d7:59:0e:fb:0f:cd:4c: ca:60:34:a5:17:99:94:c6:2e:df:a8:14:a3:fc:c4: d1:54:64:df:9f:44:f6:28:05:65:36:12:f8:84:29: 35:13:e6:15:dc:ce:9a:08:16:13:ed:f8:61:80:08: ee:3d:66:05:ec:9d:27:20:85:f8:1e:c6:cd:95:c1: 8b:2d:81:ce:14:a3:a6:77:19:d4:8a:b9:5d:24:97: db:00:b5:52:65:1c:e4:2a:d5:99:b3:96:f6:4a:08: 67:09:6b:1a:4f:8e:a5:f3:06:c1:f4:c0:cb:fb:ee: e4:5d:85:05:0b:08:bf:b3:68:38:b5:5c:c2:c6:22: 73:7d:6f:24:61:20:52:35:d0:77:ce:15:62:8b:30: 4c:12:8b:37:11:c6:83:db:a8:b8:49:cd:fd:4c:3e: 62:c5:56:0a:11:52:58:1d:72:84:49:2f:a1:cb:eb: 17:04:b8:db:cf:1a:f1:71:0a:82:d8:62:33:56:b2: 40:09:b1:bf:9c:b8:9b:f9:88:69:97:38:25:f3:81: c3:30:a8:62:1e:69:ee:5a:ef:0a:fd:dc:73:d3:f1: 0c:07:c0:17:f5:a5:1a:c3:a3:a5:d7:0b:87:88:ab: a9:d5:e4:bf:50:6f:ba:8e:2f:80:42:51:ad:52:21: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:B5:BC:66:22:5B:AA:B3:4D:73:D2:49:9E:14:C8:B9:19:AE:D7 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:b8:a0:ce:2d:a5:c1:84:18:98:3d:0e:b8:30:5b:25:84: 46:ee:4f:9d:30:b8:29:aa:bd:43:76:05:20:03:d3:f8:91:65: 2f:3c:5d:84:f3:aa:1e:89:12:f6:6f:37:f4:90:20:ec:6d:92: 15:41:bc:4f:2c:4f:05:5e:c1:bc:91:a4:38:47:21:43:47:23: a3:64:6e:10:94:93:df:72:af:8a:b4:0d:de:91:fb:61:ae:5c: 87:d6:4f:bc:23:67:c3:23:53:81:3e:39:a6:eb:4d:84:55:dc: f2:7e:26:3f:8b:7f:cc:66:9a:5f:f1:62:0d:59:67:79:ae:e3: 37:ae:4a:a4:08:42:d3:45:64:88:5c:ef:52:68:f0:75:82:ec: 71:c0:84:04:ee:12:47:08:89:43:58:fc:99:bf:53:08:91:02: d0:d2:9c:fa:22:22:c7:4c:25:7f:34:76:af:56:72:73:68:fa: 0a:4d:15:bc:95:ef:af:a2:e1:b9:09:99:fa:b8:be:12:80:c4: ea:93:5c:88:9b:f6:e9:70:b1:03:b3:ef:1c:9a:57:3a:27:03: af:b0:4a:aa:ea:18:43:c4:1d:70:f3:9f:ae:9f:af:ce:22:45: 9f:87:2f:a9:3d:87:06:76:8b:eb:6a:cd:a9:13:08:cf:49:c6: 13:b4:64:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwNzAzMDI1NzQ5WhcNMjUwNzEwMDI1NzQ5WjAYMRYwFAYD VQQDEw02ODY1ZjFhZC1iOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVNXvlgp7NdZDvsPzUzKYDSlF5mUxi7fqBSj/MTRVGTfn0T2KAVlNhL4hCk1 E+YV3M6aCBYT7fhhgAjuPWYF7J0nIIX4HsbNlcGLLYHOFKOmdxnUirldJJfbALVS ZRzkKtWZs5b2SghnCWsaT46l8wbB9MDL++7kXYUFCwi/s2g4tVzCxiJzfW8kYSBS NdB3zhViizBMEos3EcaD26i4Sc39TD5ixVYKEVJYHXKESS+hy+sXBLjbzxrxcQqC 2GIzVrJACbG/nLib+Yhplzgl84HDMKhiHmnuWu8K/dxz0/EMB8AX9aUaw6Ol1wuH iKup1eS/UG+6ji+AQlGtUiER/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETitbxm Iluqs01z0kmeFMi5Ga7XMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx blVCSTFENEVzekNXbVA1amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw17igzi2lwYQYmD0OuDBbJYRG7k+dMLgpqr1DdgUgA9P4kWUvPF2E 86oeiRL2bzf0kCDsbZIVQbxPLE8FXsG8kaQ4RyFDRyOjZG4QlJPfcq+KtA3ekfth rlyH1k+8I2fDI1OBPjmm602EVdzyfiY/i3/MZppf8WINWWd5ruM3rkqkCELTRWSI XO9SaPB1guxxwIQE7hJHCIlDWPyZv1MIkQLQ0pz6IiLHTCV/NHavVnJzaPoKTRW8 le+vouG5CZn6uL4SgMTqk1yIm/bpcLEDs+8cmlc6JwOvsEqq6hhDxB1w85+un6/O IkWfhy+pPYcGdovras2pEwjPScYTtGRG -----END CERTIFICATE-----Generated at Thu Jul 3 05:55:28 2025 by rpki-client