$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: HwNmk7Ogek07L4vStBF8FnmONgTv5REXO9b3z1J/sZk= Subject key identifier: 08:46:78:4F:B5:58:C6:97:46:E6:12:D1:E9:D2:62:49:4C:62:44:7C Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:43:41 +0000 Manifest this update: Sat 23 Aug 2025 05:43:41 +0000 Manifest next update: Sat 30 Aug 2025 05:43:41 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: ++oHfuRxaIX+1lYRwe4Gjh3wdscTGyt9Bp7qd099RUk=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Aug 23 05:43:41 2025 GMT Not After : Aug 30 05:43:41 2025 GMT Subject: CN=68a9550d-7891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:c4:0c:e8:ed:f6:ae:6c:7d:78:25:04:ce: a5:f0:f8:75:4a:ca:16:6b:e4:50:aa:6d:c7:3c:e9: 6b:f3:a9:15:e9:3a:cf:0a:c9:f4:65:e7:6b:f3:20: af:5b:4f:d8:c6:f7:17:32:27:a4:35:ff:f0:c7:79: 47:4a:5f:51:80:50:fb:29:91:14:be:78:6a:b0:6a: 5c:b4:33:22:6b:44:57:cd:26:31:41:32:3e:e4:ab: 3a:59:0d:fd:1f:a4:32:e9:34:58:32:18:e0:1d:61: 4a:b2:9b:49:a3:8c:58:0d:96:d6:80:5a:41:ea:fb: a3:e6:67:a2:53:88:f8:4b:6a:29:18:c5:a9:ef:b6: 88:3a:d1:3e:89:99:a3:32:70:3d:cb:61:7d:b1:b4: 75:73:d8:67:a1:5b:f2:3f:de:e4:52:7b:a2:6a:05: e4:17:e0:3a:90:2c:47:5d:40:69:86:12:87:6a:76: cb:c1:5a:54:f3:74:9c:f9:e5:73:b0:f6:a2:f1:eb: cf:46:c4:a3:05:6c:78:26:01:7a:61:35:30:76:5d: 83:ac:98:f8:3e:cc:c4:bb:6f:b2:e3:c9:30:65:8c: 73:d3:f1:6c:de:ce:f8:18:12:44:2e:6b:33:47:42: 30:76:b8:0c:28:3b:75:0f:25:cc:42:8a:3e:62:2e: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:46:78:4F:B5:58:C6:97:46:E6:12:D1:E9:D2:62:49:4C:62:44:7C X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1b:98:ca:f5:16:68:9b:3c:f3:b5:c0:32:d9:5d:d2:23:cf: 92:3f:6e:30:9d:95:32:35:67:e7:c9:56:cc:fd:e8:a5:42:e1: 60:12:5a:f0:8b:e1:17:c9:e6:bc:c5:b3:7b:4e:82:1d:b3:1f: c1:af:35:84:81:a7:1f:e1:1a:02:c1:85:33:a4:c9:2c:38:72: ed:22:2a:d1:7a:69:5d:80:f7:c7:fe:72:3c:d8:2b:2f:35:d2: ae:ae:80:54:69:7f:ea:32:59:33:ea:bd:16:85:a9:05:4c:d2: a2:f5:36:bb:ec:f5:e5:c7:ae:1d:16:aa:34:84:36:f1:d6:d3: cd:4b:40:d5:6e:f2:f5:36:50:d5:ef:95:ff:6c:de:44:be:cc: ce:e4:3c:d7:04:d2:39:30:41:43:a8:c0:34:da:58:27:6d:89: 22:12:9b:92:2c:2a:11:ce:04:3d:08:ec:a6:ea:03:2b:01:17: 17:b7:30:97:35:fa:bb:84:09:00:cd:36:d8:21:9b:9f:41:ef: 4c:de:3f:02:cc:da:56:0d:95:15:f2:03:63:80:9f:07:07:11: 5b:46:cc:a3:5d:ea:b5:51:ee:c4:e4:bc:1c:6e:21:3d:4f:3e: 03:2c:da:b3:2a:02:29:a6:f7:74:7f:d5:ca:f3:2e:47:7f:1e: 91:01:64:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwODIzMDU0MzQxWhcNMjUwODMwMDU0MzQxWjAYMRYwFAYD VQQDEw02OGE5NTUwZC03ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xDEDOjt9q5sfXglBM6l8Ph1SsoWa+RQqm3HPOlr86kV6TrPCsn0Zedr8yCv W0/YxvcXMiekNf/wx3lHSl9RgFD7KZEUvnhqsGpctDMia0RXzSYxQTI+5Ks6WQ39 H6Qy6TRYMhjgHWFKsptJo4xYDZbWgFpB6vuj5meiU4j4S2opGMWp77aIOtE+iZmj MnA9y2F9sbR1c9hnoVvyP97kUnuiagXkF+A6kCxHXUBphhKHanbLwVpU83Sc+eVz sPai8evPRsSjBWx4JgF6YTUwdl2DrJj4PszEu2+y48kwZYxz0/Fs3s74GBJELmsz R0IwdrgMKDt1DyXMQoo+Yi5cawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhGeE+1 WMaXRuYS0enSYklMYkR8MB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbG5jK9RZomzzztcAy2V3SI8+SP24wnZUyNWfnyVbM/eilQuFgElrw i+EXyea8xbN7ToIdsx/BrzWEgacf4RoCwYUzpMksOHLtIirRemldgPfH/nI82Csv NdKuroBUaX/qMlkz6r0WhakFTNKi9Ta77PXlx64dFqo0hDbx1tPNS0DVbvL1NlDV 75X/bN5EvszO5DzXBNI5MEFDqMA02lgnbYkiEpuSLCoRzgQ9COym6gMrARcXtzCX Nfq7hAkAzTbYIZufQe9M3j8CzNpWDZUV8gNjgJ8HBxFbRsyjXeq1Ue7E5LwcbiE9 Tz4DLNqzKgIppvd0f9XK8y5Hfx6RAWSh -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:22 2025 by rpki-client