$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: TWmSG1jvNjxgubHHHmtus5to7UEyBPPn4VR8EOxbwrs= Subject key identifier: 5B:F9:13:82:37:2D:B1:66:14:BD:67:1A:B0:88:C1:97:14:AD:E8:A5 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: DD Signing time: Sat 19 Jul 2025 05:43:21 +0000 Manifest this update: Sat 19 Jul 2025 05:43:21 +0000 Manifest next update: Sat 26 Jul 2025 05:43:21 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: o69tfnei7LplrLc7HiTL5NzpmRACRht6jeP1s7FNa6c=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Jul 19 05:43:21 2025 GMT Not After : Jul 26 05:43:21 2025 GMT Subject: CN=687b3079-b61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:a8:07:b8:22:94:7d:b6:72:de:1e:9f:30: 47:a8:c9:de:16:1f:46:9b:02:30:df:55:f9:f5:10: 5c:88:cb:81:d1:38:0c:b0:60:07:58:ca:32:03:78: 0e:d1:2c:22:00:6e:09:7c:cc:4d:de:1c:a6:4f:5b: 3d:1a:55:72:39:a1:09:0d:db:ce:1a:db:aa:e1:cf: a0:0e:a1:42:a3:e4:2e:6c:1a:24:e6:1a:4a:cc:78: 3a:4a:8b:b5:97:64:3a:4f:56:d2:7b:b6:6c:a8:d3: bb:1e:ca:d4:12:31:47:d3:44:bc:63:ca:ad:4f:c7: 26:f2:a7:02:e3:c0:5f:c8:b6:13:39:9c:76:a6:9f: 19:4d:23:34:ed:7d:21:ed:f1:bb:b5:be:31:8f:a7: 15:e4:ac:8c:eb:c8:5f:f0:aa:c3:66:ec:72:1d:79: 6d:6b:ec:82:6d:a0:3f:b8:4c:3d:5b:74:4e:9d:8b: 28:35:18:77:a4:2d:fc:a2:e8:6f:f6:02:a5:ed:b0: a8:4e:c0:85:45:8a:84:5c:d8:72:51:8b:24:09:66: 59:56:7b:45:ca:f9:a5:55:a2:8f:ea:23:58:8e:6e: ab:54:04:fc:04:96:56:d3:8d:35:8a:ab:3e:4d:84: 90:2b:88:75:34:b9:e6:ff:a8:f6:c8:80:62:d3:f4: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:13:82:37:2D:B1:66:14:BD:67:1A:B0:88:C1:97:14:AD:E8:A5 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:e1:f1:7f:6e:0a:92:b4:ba:09:bc:fe:90:fe:ae:ea:07: ad:5c:89:7a:38:16:32:80:76:33:22:ac:3f:e5:2c:0e:43:80: ee:fe:04:95:82:b4:a2:c3:3a:04:16:bf:10:cf:ea:0e:c5:28: 15:d2:75:bc:0f:5d:a5:dd:03:b3:9c:39:3e:ec:f4:9e:6a:52: cd:77:e5:f6:d3:90:38:df:8b:54:c8:af:cd:01:bc:a4:90:12: d6:a9:50:5b:de:4f:ec:87:68:5b:51:0b:c7:08:df:dc:c5:67: b9:ab:0f:9f:2a:0c:67:23:30:23:e4:5c:8e:75:0c:ad:40:d4: 13:da:9d:5c:03:85:4d:eb:df:f2:20:ed:c6:13:61:05:7c:91: 54:23:0a:56:3e:3d:18:33:1a:a0:72:fe:08:5e:2a:64:17:6f: 69:ce:98:7e:13:f7:6d:4d:5d:d0:79:bd:4e:0f:69:14:23:64: 48:e5:0d:ae:c2:cd:76:2f:95:3d:6c:ec:64:0d:b2:bb:8c:4c: 2b:eb:09:bf:79:32:e5:3a:21:12:54:a4:01:84:ec:5e:c1:b9: 1f:cc:77:c2:3b:42:1b:d6:01:32:6a:8a:5a:9c:ca:03:ce:8c: 5f:00:1f:81:cc:3b:15:b2:6b:ea:b6:0e:34:4b:63:40:c6:75: 82:1c:d6:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwNzE5MDU0MzIxWhcNMjUwNzI2MDU0MzIxWjAYMRYwFAYD VQQDEw02ODdiMzA3OS1iNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSWoB7gilH22ct4enzBHqMneFh9GmwIw31X59RBciMuB0TgMsGAHWMoyA3gO 0SwiAG4JfMxN3hymT1s9GlVyOaEJDdvOGtuq4c+gDqFCo+QubBok5hpKzHg6Sou1 l2Q6T1bSe7ZsqNO7HsrUEjFH00S8Y8qtT8cm8qcC48BfyLYTOZx2pp8ZTSM07X0h 7fG7tb4xj6cV5KyM68hf8KrDZuxyHXlta+yCbaA/uEw9W3ROnYsoNRh3pC38ouhv 9gKl7bCoTsCFRYqEXNhyUYskCWZZVntFyvmlVaKP6iNYjm6rVAT8BJZW0401iqs+ TYSQK4h1NLnm/6j2yIBi0/T82wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv5E4I3 LbFmFL1nGrCIwZcUreilMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB01OHxf24KkrS6Cbz+kP6u6getXIl6OBYygHYzIqw/5SwOQ4Du/gSV grSiwzoEFr8Qz+oOxSgV0nW8D12l3QOznDk+7PSealLNd+X205A434tUyK/NAbyk kBLWqVBb3k/sh2hbUQvHCN/cxWe5qw+fKgxnIzAj5FyOdQytQNQT2p1cA4VN69/y IO3GE2EFfJFUIwpWPj0YMxqgcv4IXipkF29pzph+E/dtTV3Qeb1OD2kUI2RI5Q2u ws12L5U9bOxkDbK7jEwr6wm/eTLlOiESVKQBhOxewbkfzHfCO0Ib1gEyaopanMoD zoxfAB+BzDsVsmvqtg40S2NAxnWCHNaP -----END CERTIFICATE-----Generated at Sun Jul 20 06:14:54 2025 by rpki-client