$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: GC7au8+hHYlJwR9mClMS2DpQbNbqGkhX/IUCcGMB2O0= Subject key identifier: C6:F9:B7:F7:C6:D0:ED:16:8A:84:FA:A8:29:9F:98:32:9E:E4:72:2F Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0438 Signing time: Sat 19 Jul 2025 00:43:15 +0000 Manifest this update: Sat 19 Jul 2025 00:43:15 +0000 Manifest next update: Sat 26 Jul 2025 00:43:15 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: /E6YJ9E2wdznzp0M1qjSDf7S4bG8owMoK6VsrYB5VnI=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Jul 19 00:43:15 2025 GMT Not After : Jul 26 00:43:15 2025 GMT Subject: CN=687aea23-5649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:f4:28:68:32:82:ec:84:52:08:69:e9:c6: 48:e8:31:dc:6a:71:62:e3:50:0b:a3:39:3c:af:38: dc:13:6c:41:3e:95:8e:5d:79:a0:c3:0d:60:2f:56: cb:c5:ec:4f:34:92:91:1a:78:0b:92:6f:8a:d5:ac: d7:90:cd:df:36:65:42:41:ee:36:c5:68:41:2f:02: 71:ca:69:c1:08:8c:75:97:28:a2:59:6f:b8:a9:e9: eb:9b:db:cf:7d:34:af:9f:76:3b:27:9d:88:25:89: d2:a5:4e:9e:a5:f3:38:f3:65:0c:1e:26:6e:c0:99: ac:12:fd:a6:5a:c4:b7:0d:87:61:6d:c2:de:76:14: 63:ca:ad:3c:35:f3:ad:c6:86:21:80:9a:df:57:19: 0a:6f:20:d0:36:c7:c3:32:b8:91:c8:43:04:0b:84: c4:40:92:7c:1c:1f:4f:78:c4:e6:9d:47:5d:f5:97: 0c:61:f6:4f:c4:9a:75:a6:a3:6a:68:05:a2:4d:fc: 0f:47:74:f9:8a:0e:e9:e5:43:b0:91:79:2a:9f:2c: b7:d9:71:0b:aa:93:99:b4:b9:0b:85:25:43:7f:8c: cc:27:66:ff:f3:3f:00:00:ce:56:1f:b1:9c:c0:3c: 90:26:ab:f2:88:4c:93:b8:3d:61:1c:32:72:01:02: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F9:B7:F7:C6:D0:ED:16:8A:84:FA:A8:29:9F:98:32:9E:E4:72:2F X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:98:10:ef:73:5d:ab:06:6a:c1:30:e8:33:43:b0:f6:a5:d4: b9:6b:a1:9e:b4:46:34:bc:04:c9:9f:c4:76:fb:c9:d6:8c:52: ca:c3:e5:4d:99:c6:cf:e6:49:40:0a:0b:2c:bc:fa:3b:cb:e2: 46:39:b3:aa:13:0e:da:a3:87:04:42:6d:5e:11:e0:6d:0f:c2: ef:f0:20:19:31:27:6b:4e:d2:c3:80:90:08:aa:b2:4b:eb:59: 17:36:b8:39:28:f5:75:59:3e:51:1d:26:22:1e:2b:8f:02:a2: aa:50:4c:f4:28:4c:94:3c:ee:d2:b5:09:33:2b:9a:7f:b2:4d: 0e:5d:4d:6e:76:25:92:da:5c:71:9a:71:42:ac:9f:86:0b:ab: 9f:87:4e:92:ba:c1:cf:8d:95:3b:d0:26:2d:55:ee:4d:55:fa: 50:de:ba:49:78:8a:ca:22:76:4f:c7:b3:11:86:26:02:b5:ed: 6f:ba:aa:56:f8:2d:52:c5:3a:c1:1f:61:fb:a6:b7:a1:6f:de: 89:5c:e3:a1:9e:49:5a:54:7c:09:f6:e5:fe:03:41:c1:82:13: c7:ab:3b:5d:2b:01:b3:47:20:a3:f0:3f:f6:04:2a:07:22:c0: 67:dd:cc:bd:41:b8:b6:25:03:70:0a:29:de:16:cf:b9:e6:1d: 80:93:41:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwNzE5MDA0MzE1WhcNMjUwNzI2MDA0MzE1WjAYMRYwFAYD VQQDEw02ODdhZWEyMy01NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbz0KGgyguyEUghp6cZI6DHcanFi41ALozk8rzjcE2xBPpWOXXmgww1gL1bL xexPNJKRGngLkm+K1azXkM3fNmVCQe42xWhBLwJxymnBCIx1lyiiWW+4qenrm9vP fTSvn3Y7J52IJYnSpU6epfM482UMHiZuwJmsEv2mWsS3DYdhbcLedhRjyq08NfOt xoYhgJrfVxkKbyDQNsfDMriRyEMEC4TEQJJ8HB9PeMTmnUdd9ZcMYfZPxJp1pqNq aAWiTfwPR3T5ig7p5UOwkXkqnyy32XELqpOZtLkLhSVDf4zMJ2b/8z8AAM5WH7Gc wDyQJqvyiEyTuD1hHDJyAQJBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMb5t/fG 0O0WioT6qCmfmDKe5HIvMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAomBDvc12rBmrBMOgzQ7D2pdS5a6GetEY0vATJn8R2+8nWjFLKw+VN mcbP5klACgssvPo7y+JGObOqEw7ao4cEQm1eEeBtD8Lv8CAZMSdrTtLDgJAIqrJL 61kXNrg5KPV1WT5RHSYiHiuPAqKqUEz0KEyUPO7StQkzK5p/sk0OXU1udiWS2lxx mnFCrJ+GC6ufh06SusHPjZU70CYtVe5NVfpQ3rpJeIrKInZPx7MRhiYCte1vuqpW +C1SxTrBH2H7prehb96JXOOhnklaVHwJ9uX+A0HBghPHqztdKwGzRyCj8D/2BCoH IsBn3cy9Qbi2JQNwCineFs+55h2Ak0Fv -----END CERTIFICATE-----Generated at Sun Jul 20 16:49:38 2025 by rpki-client