$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: DCglLp3LfSX/y4tcKLTs/cxDtPdOssZpFtcvnLbLR98= Subject key identifier: 2B:E2:6A:9C:BB:F5:B0:D1:5A:46:79:08:92:A6:2F:14:F8:A6:5F:9B Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 9B Signing time: Sat 23 Aug 2025 06:36:49 +0000 Manifest this update: Sat 23 Aug 2025 06:36:48 +0000 Manifest next update: Sat 30 Aug 2025 06:36:48 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: ZEY/4lk2pCpypmOoYIRA5LdAI79Z+t339TFwEMOl4oQ=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: Aug 23 06:36:48 2025 GMT Not After : Aug 30 06:36:48 2025 GMT Subject: CN=68a96181-0e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:a9:a6:3d:0c:7c:aa:63:fd:3a:4c:b8:e8: 4b:26:e7:04:dd:fe:b8:24:e1:18:99:f2:c1:80:62: b4:ab:08:b8:c6:b2:d0:22:9e:1e:e6:16:14:51:d7: 21:90:35:3e:11:fa:93:33:a5:02:0d:c1:47:b0:c1: 6b:e6:4d:a7:35:44:72:78:c7:46:c2:f2:7d:8b:8d: 99:c7:bd:4b:6e:9e:fb:e6:3d:ae:40:44:d2:ca:b0: c5:42:5a:5f:0a:95:f7:e3:ed:fe:51:86:4e:8e:a9: 26:ed:3b:f8:2d:01:df:1b:0b:37:ea:da:a0:ea:05: 6c:f8:93:4d:e6:e5:68:d8:81:4a:60:7b:17:2f:3b: 58:3b:ae:a5:74:e8:45:e0:bf:5d:46:8c:65:44:ba: 88:29:6d:41:39:d2:46:c9:e9:fa:c2:68:a2:0c:65: 79:7c:c4:58:b2:7e:47:eb:5b:f5:3e:df:78:0a:fa: b7:9c:42:ab:c2:b9:b9:1c:89:75:fc:22:ad:9f:45: 44:05:50:67:03:04:9e:f9:b6:b6:f5:28:39:50:53: b7:fd:3b:f7:ca:49:a5:40:a7:e3:a8:d1:7f:a1:38: 1d:da:32:b1:dd:c9:28:c1:5f:70:0d:78:5f:26:39: dd:5d:91:01:03:5b:c9:65:d7:3f:28:f6:54:c7:55: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:6A:9C:BB:F5:B0:D1:5A:46:79:08:92:A6:2F:14:F8:A6:5F:9B X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c5:c6:61:88:b4:ea:9e:58:57:d4:c5:0b:1a:b3:0a:8a:69: 95:55:7c:e9:58:6c:ce:eb:5d:19:85:c5:3c:4c:46:da:b2:7b: 72:65:a4:28:3b:86:fb:9b:5c:82:7d:8b:cc:94:69:2a:0f:f4: 6f:b4:83:96:b3:8c:ce:fa:39:7f:4b:f1:de:1c:26:2d:8c:a8: 09:50:ff:a3:db:0c:f5:a8:03:d9:53:b1:45:b7:e0:32:de:7d: 15:c6:32:3d:ab:b5:6a:88:84:59:17:fc:43:ea:d9:7d:b9:92: 3b:6c:61:6a:b1:15:dd:d6:dd:70:93:b7:9d:1d:3f:af:ae:41: 5f:07:50:3a:8f:4f:d6:b1:4c:82:5c:f5:ed:b9:11:39:d8:89: 6c:03:4a:9b:f7:9e:72:61:1c:99:65:22:fe:dc:4b:97:b7:5b: 75:4a:02:1a:eb:bf:c8:04:50:09:e4:f3:d1:28:40:48:e7:a6: ee:22:01:44:ff:cd:2c:98:a9:2d:ee:ae:e6:78:d8:d2:eb:70: cf:ca:bb:c9:0a:ae:97:ad:95:08:b2:53:cd:72:8d:69:aa:26: 3f:95:b2:1b:3b:46:11:34:03:20:a9:36:3d:1a:2b:db:b3:bb: aa:07:e1:4d:97:61:3b:fc:58:17:1e:69:b1:e3:8e:11:ef:d1: 96:59:7d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMUIxMTAvBgNVBAUTKDJDRkIwQ0VGNkQxNkQ2Njc2RUVBMjExNjQzRUM4RTg1 QzI1Q0YyRkYwHhcNMjUwODIzMDYzNjQ4WhcNMjUwODMwMDYzNjQ4WjAYMRYwFAYD VQQDEw02OGE5NjE4MS0wZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVCppj0MfKpj/TpMuOhLJucE3f64JOEYmfLBgGK0qwi4xrLQIp4e5hYUUdch kDU+EfqTM6UCDcFHsMFr5k2nNURyeMdGwvJ9i42Zx71Lbp775j2uQETSyrDFQlpf CpX34+3+UYZOjqkm7Tv4LQHfGws36tqg6gVs+JNN5uVo2IFKYHsXLztYO66ldOhF 4L9dRoxlRLqIKW1BOdJGyen6wmiiDGV5fMRYsn5H61v1Pt94Cvq3nEKrwrm5HIl1 /CKtn0VEBVBnAwSe+ba29Sg5UFO3/Tv3ykmlQKfjqNF/oTgd2jKx3ckowV9wDXhf JjndXZEBA1vJZdc/KPZUx1V00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCviapy7 9bDRWkZ5CJKmLxT4pl+bMB8GA1UdIwQYMBaAFCz7DO9tFtZnbuohFkPsjoXCXPL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMxQi9FNTczMDZDQTlB NzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFtZHU2aUVXUS15T2hjSmM4 djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMxQi9FNTczMDZDQTlBNzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFt ZHU2aUVXUS15T2hjSmM4djgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVxcZhiLTqnlhX1MULGrMKimmVVXzpWGzO610ZhcU8TEbasntyZaQo O4b7m1yCfYvMlGkqD/RvtIOWs4zO+jl/S/HeHCYtjKgJUP+j2wz1qAPZU7FFt+Ay 3n0VxjI9q7VqiIRZF/xD6tl9uZI7bGFqsRXd1t1wk7edHT+vrkFfB1A6j0/WsUyC XPXtuRE52IlsA0qb955yYRyZZSL+3EuXt1t1SgIa67/IBFAJ5PPRKEBI56buIgFE /80smKkt7q7meNjS63DPyrvJCq6XrZUIslPNco1pqiY/lbIbO0YRNAMgqTY9Givb s7uqB+FNl2E7/FgXHmmx444R79GWWX3T -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:14 2025 by rpki-client