$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: obg5C7J+jhg+7b8xO0iWl/+FTdtyUzufn6jH9nqBF6o= Subject key identifier: 2E:2D:AB:BB:AD:A3:BE:2A:2D:39:64:8C:BE:31:A4:63:DC:14:C3:AB Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09B1 Signing time: Mon 28 Jul 2025 20:24:45 +0000 Manifest this update: Mon 28 Jul 2025 20:24:44 +0000 Manifest next update: Mon 04 Aug 2025 20:24:44 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: dN28r0AztuZb1aHNTY9VKcaOmNV9VTSntxlx+jLE8hc=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 20:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Jul 28 20:24:44 2025 GMT Not After : Aug 4 20:24:44 2025 GMT Subject: CN=6887dc8d-8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:74:c1:ac:e3:2d:96:3b:6e:54:26:10:c9: ef:8a:42:20:f1:8c:a4:85:30:7b:af:44:a4:81:ab: d2:db:19:5c:c1:91:d5:05:95:5e:7c:a9:83:e7:fe: 76:e2:3a:19:94:da:d4:0b:29:3a:a5:1e:3b:a9:05: b9:5b:38:02:57:4b:41:2f:63:51:7e:25:64:82:7b: 04:a6:a6:df:7c:48:2d:b3:0b:5a:33:91:77:6b:ff: 31:05:8b:03:a6:54:96:7e:da:ff:e1:f7:04:b5:52: d0:f5:d2:f1:78:81:92:06:2b:03:df:23:9e:78:00: cb:27:07:e7:f6:f3:72:d3:19:02:26:98:55:b5:58: 96:ba:16:ed:35:ab:65:15:c9:4e:1f:67:07:4b:88: 02:96:43:df:86:a3:a5:af:02:6d:8d:38:39:c1:91: 3e:98:91:fe:cc:7b:f4:c0:fe:18:54:c7:f0:9f:9b: 4d:6f:e2:64:78:00:ce:fb:30:bc:fd:24:d2:e7:83: 27:30:b9:98:1e:25:2e:c2:7e:0d:b0:78:6b:e2:5b: 86:56:30:e9:79:36:79:d5:5a:44:41:d6:19:05:e3: 66:26:4c:15:19:0f:42:6f:b7:52:a5:46:d9:b0:71: 78:21:1e:f5:7f:28:d8:45:4a:a7:cb:21:a4:ee:6e: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2D:AB:BB:AD:A3:BE:2A:2D:39:64:8C:BE:31:A4:63:DC:14:C3:AB X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:93:9b:79:01:7e:84:ba:e8:64:83:e3:4a:d8:a7:55:ab:51: c2:6d:a4:4d:02:2c:e9:d6:a5:36:36:62:00:4f:d3:21:3e:88: d4:f7:f2:ce:1c:98:15:8d:3d:ce:51:11:f3:f1:9c:68:a4:9a: 3e:39:8f:a0:f7:3d:d0:22:07:7a:d2:fb:a9:c0:3b:07:53:4f: 1e:d2:cf:f4:87:7f:27:25:76:b5:fc:06:ef:cf:c3:e2:3f:19: 5f:73:c7:74:79:e4:82:40:d0:70:c6:4f:14:18:fb:e7:34:99: 95:94:84:c5:13:85:4b:35:8a:0c:fc:39:41:06:79:72:dc:fa: e9:7d:33:50:63:2e:64:33:af:6f:d4:07:ee:69:81:82:95:d3: 24:a4:86:de:07:35:2d:85:46:a3:72:85:bf:36:a1:90:f7:8d: 9d:d3:e2:d0:c2:38:df:37:e1:c8:20:79:00:27:15:f9:2d:b5: c5:05:d0:41:21:46:74:68:58:f9:e8:3b:f5:22:9f:6e:ad:0f: df:b4:c1:32:a7:12:c2:4c:cc:50:c8:a5:99:90:0a:72:0f:6d: 80:f4:3b:00:1e:a5:97:37:6e:d2:96:5f:d8:69:0f:e4:7d:c3: 17:f5:96:80:86:27:00:00:a5:24:02:51:9a:3b:0d:a6:0c:a9: ea:35:6b:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUwNzI4MjAyNDQ0WhcNMjUwODA0MjAyNDQ0WjAYMRYwFAYD VQQDEw02ODg3ZGM4ZC04YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuch0wazjLZY7blQmEMnvikIg8YykhTB7r0SkgavS2xlcwZHVBZVefKmD5/52 4joZlNrUCyk6pR47qQW5WzgCV0tBL2NRfiVkgnsEpqbffEgtswtaM5F3a/8xBYsD plSWftr/4fcEtVLQ9dLxeIGSBisD3yOeeADLJwfn9vNy0xkCJphVtViWuhbtNatl FclOH2cHS4gClkPfhqOlrwJtjTg5wZE+mJH+zHv0wP4YVMfwn5tNb+JkeADO+zC8 /STS54MnMLmYHiUuwn4NsHhr4luGVjDpeTZ51VpEQdYZBeNmJkwVGQ9Cb7dSpUbZ sHF4IR71fyjYRUqnyyGk7m6v1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4tq7ut o74qLTlkjL4xpGPcFMOrMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlk5t5AX6Euuhkg+NK2KdVq1HCbaRNAizp1qU2NmIAT9MhPojU9/LO HJgVjT3OURHz8ZxopJo+OY+g9z3QIgd60vupwDsHU08e0s/0h38nJXa1/Abvz8Pi Pxlfc8d0eeSCQNBwxk8UGPvnNJmVlITFE4VLNYoM/DlBBnly3PrpfTNQYy5kM69v 1AfuaYGCldMkpIbeBzUthUajcoW/NqGQ942d0+LQwjjfN+HIIHkAJxX5LbXFBdBB IUZ0aFj56Dv1Ip9urQ/ftMEypxLCTMxQyKWZkApyD22A9DsAHqWXN27Sll/YaQ/k fcMX9ZaAhicAAKUkAlGaOw2mDKnqNWsH -----END CERTIFICATE-----Generated at Wed Jul 30 08:01:59 2025 by rpki-client