$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: 5gnwFGjTrNzc9nBxrWxtxs2PHj+j/kxMDsK4einM7DM= Subject key identifier: E9:24:30:10:07:2D:C4:91:31:C8:0E:60:C6:9F:E3:09:29:7E:B7:2E Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01BB Signing time: Sat 19 Jul 2025 03:13:53 +0000 Manifest this update: Sat 19 Jul 2025 03:13:52 +0000 Manifest next update: Sat 26 Jul 2025 03:13:52 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 0zxg+qN/gLadzwiF+L5mDESna56FJ5LEwzNSsCsfZMA=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Jul 19 03:13:52 2025 GMT Not After : Jul 26 03:13:52 2025 GMT Subject: CN=687b0d71-cd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:9e:82:65:4d:a4:5c:eb:b9:5e:13:26:f1: ae:4d:bf:e3:66:35:40:d3:99:e1:7a:8a:5d:2c:2b: 79:6e:c2:6e:33:68:8c:1b:56:da:5c:b0:a9:0d:67: 33:19:9e:a2:a2:41:9b:2e:e5:53:81:30:93:31:1c: f1:ff:eb:f8:d0:23:9f:4e:de:72:f0:3e:36:ff:28: ea:93:4f:a4:2e:36:70:d3:ab:7d:7f:de:a1:df:0e: bc:fe:ac:52:44:36:47:a0:37:7d:d3:c3:b9:0d:b2: 11:ff:f1:6a:f1:8f:f9:83:8c:23:48:5b:15:2e:23: b5:89:44:c0:b4:46:8b:56:b9:bc:ba:81:64:c5:1a: a5:59:ff:95:a7:07:b2:ea:cb:1d:96:33:72:08:4f: d4:a2:38:27:78:e8:33:20:63:90:aa:82:4c:2c:64: e6:89:e9:88:16:b6:1e:25:e0:ab:55:b5:32:8a:c7: 67:8e:28:21:ae:b9:ad:89:aa:6c:ec:4a:20:a7:94: 90:43:8c:6e:98:df:31:4c:0c:99:e8:46:65:d4:fa: 2f:25:c6:f3:24:c8:f3:bd:dd:63:ea:e0:3c:da:d4: 4c:0b:30:e0:5d:a6:1c:e5:ab:5b:c8:29:75:3b:56: 5a:19:2d:d2:f8:ff:01:11:42:32:75:78:02:c9:ac: ff:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:24:30:10:07:2D:C4:91:31:C8:0E:60:C6:9F:E3:09:29:7E:B7:2E X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ff:29:07:93:b3:e1:0b:64:b6:d4:83:ea:e5:75:b4:2c:28: 9d:ee:a6:1e:d9:87:a3:43:45:0f:0e:aa:69:eb:45:34:ae:51: 9c:72:b8:7a:fa:19:08:25:23:65:a7:66:52:0d:4e:2d:69:d7: 03:53:23:5a:50:eb:0a:f3:b1:97:67:16:f8:bc:fb:d5:2a:ad: 5d:86:86:95:68:00:2a:30:bd:75:59:cb:6b:2f:33:17:60:47: 8b:62:1c:60:83:1c:af:01:5d:cf:69:e0:2d:f1:59:67:b5:17: 14:4a:57:2c:ae:b4:81:c5:e9:49:8d:a6:f4:a4:8c:98:a3:57: 8a:62:c5:c0:a3:39:8d:8c:e2:f8:5f:e3:b5:65:63:c1:0c:4d: e6:63:73:20:90:d7:53:02:58:89:8e:1a:86:d2:76:71:6b:75: 97:03:08:57:55:d7:d5:63:63:b3:0b:b0:bb:eb:0e:cb:8a:50: 0d:9b:cf:d7:80:aa:53:1c:f9:c7:e1:68:8a:6d:25:75:56:34: 5a:ce:4d:90:c2:5d:71:05:af:59:0b:bd:9e:bb:1a:cd:bc:ac: 72:cd:45:33:2a:7b:be:3e:78:02:82:99:cb:04:81:56:07:32: 3b:db:f8:07:a6:fc:95:bb:6f:c1:c9:87:67:cd:6a:25:91:f4: 0a:f7:a0:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwNzE5MDMxMzUyWhcNMjUwNzI2MDMxMzUyWjAYMRYwFAYD VQQDEw02ODdiMGQ3MS1jZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqWegmVNpFzruV4TJvGuTb/jZjVA05nheopdLCt5bsJuM2iMG1baXLCpDWcz GZ6iokGbLuVTgTCTMRzx/+v40COfTt5y8D42/yjqk0+kLjZw06t9f96h3w68/qxS RDZHoDd908O5DbIR//Fq8Y/5g4wjSFsVLiO1iUTAtEaLVrm8uoFkxRqlWf+Vpwey 6ssdljNyCE/UojgneOgzIGOQqoJMLGTmiemIFrYeJeCrVbUyisdnjighrrmtiaps 7Eogp5SQQ4xumN8xTAyZ6EZl1PovJcbzJMjzvd1j6uA82tRMCzDgXaYc5atbyCl1 O1ZaGS3S+P8BEUIydXgCyaz/QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkkMBAH LcSRMcgOYMaf4wkpfrcuMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/ykHk7PhC2S21IPq5XW0LCid7qYe2YejQ0UPDqpp60U0rlGccrh6 +hkIJSNlp2ZSDU4tadcDUyNaUOsK87GXZxb4vPvVKq1dhoaVaAAqML11WctrLzMX YEeLYhxggxyvAV3PaeAt8VlntRcUSlcsrrSBxelJjab0pIyYo1eKYsXAozmNjOL4 X+O1ZWPBDE3mY3MgkNdTAliJjhqG0nZxa3WXAwhXVdfVY2OzC7C76w7LilANm8/X gKpTHPnH4WiKbSV1VjRazk2Qwl1xBa9ZC72euxrNvKxyzUUzKnu+PngCgpnLBIFW BzI72/gHpvyVu2/ByYdnzWolkfQK96DN -----END CERTIFICATE-----Generated at Mon Jul 21 02:15:40 2025 by rpki-client