$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json) Hash identifier: PjqxkhmERaMJL/JmyZzMGS3798oEF7uWYam4GRM8IZw= Subject key identifier: D5:C3:D4:E1:F7:56:8C:85:B7:9C:AA:96:05:23:56:82:CA:C3:45:1C Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft Manifest number: 02B8 Signing time: Fri 25 Jul 2025 02:55:54 +0000 Manifest this update: Fri 25 Jul 2025 02:55:53 +0000 Manifest next update: Fri 01 Aug 2025 02:55:53 +0000 Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: YlLBhD/KzzLf9IgyrkRBx224J3n2zl0hiyCgOzAEW9g=) 2: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: 8ElsEHtT0SW1j1aAkI7fCGcQz8Vw9D+aynR3ExaKcpk=) 3: E9472C0C144111EFB247B936C4F9AE02.roa (hash: ElxXAlN/54pNU54qDSf2Glfd6e1auSlAYgMAsI+jjIo=) 4: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: bL7WlFADw3cMus0TM2SD+wI5B/pCkUnpQijrEhDa4U0=) 5: E9258B3C037211EE9E15EE32C4F9AE02.roa (hash: KWqY8FSRWxgMExPo7oJjW6FyKZgvDdNOUOLjG23lp4c=) 6: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: ptIGt2wYMEPKhzv8i8tfWNEfDe4elqSnf1QbHzmubdk=) 7: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: qIG1nrRqmqeXhlJ4QfxZpQrhglB0XBpLi9GUgb6DFzg=) 8: E879EE7C144111EFB247B936C4F9AE02.roa (hash: qwsK6I5KvMQVVTxqatHLY4Gc06wI8z6a8GKH4pqG5s4=) 9: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: IjfhL1iMdoF6vbj8qmgjKEyAn1TdguzASGP9+nLwaQc=) 10: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: zMUCXonIy5tOWaMiCq30fCZFtIY4G0iHQ+o2rUhkbic=) 11: E22CE7EE2F9511EF8B14626CC4F9AE02.roa (hash: IZWdty8UW5xSEAar+QuBFmv4J1Y/hYIXpLhgyiEViIk=) 12: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: Q+LuT/2pIJ9IStVr144XnzBFQZyXtxyXwoGNHoKHCCk=) 13: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: sAfUcNCOt118LSTGd2ByOqCl6kCgTi6ZVqAMUJEtk3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 02:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Jul 25 02:55:53 2025 GMT Not After : Aug 1 02:55:53 2025 GMT Subject: CN=6882f23a-998b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:21:52:40:ee:34:86:c2:8b:83:3b:be:43: d7:6f:00:ef:70:d7:14:32:bb:81:86:73:15:47:e4: b5:e4:e3:e6:e4:f9:e4:79:bc:cb:72:38:5a:bf:53: a5:bb:e4:fa:c5:90:cc:74:62:a5:42:b5:2b:10:c0: 1e:7e:9e:d7:b6:c4:74:41:85:73:49:4f:91:87:b9: 9b:e9:1b:cb:b8:f9:a1:59:89:2f:57:b8:1f:21:93: 67:79:de:f3:d0:99:ab:30:55:69:43:9b:83:97:f9: a5:74:4f:b0:cf:4f:e7:cb:2a:9e:c9:18:24:1a:db: 84:45:0f:5f:59:43:71:c5:db:69:2b:fd:6a:98:e5: 01:7d:eb:fe:21:50:63:19:92:85:c5:ab:de:6b:8b: b3:82:53:9a:fa:bf:13:90:23:7f:88:d0:99:f7:34: ea:96:f2:cb:fe:a5:bf:1e:34:a7:4b:a5:cd:3f:6d: 01:b5:cc:d3:82:c8:1f:21:c5:1a:51:34:16:12:fb: dd:ae:1e:7c:f3:e4:51:48:8a:24:7c:ff:6e:db:c8: e0:4b:15:e0:9c:fe:c4:1b:e8:79:f3:b1:85:45:99: 8c:ed:df:4a:dc:cc:15:0b:af:99:49:a6:e5:8d:04: 14:9a:04:b9:be:23:5c:39:b5:1b:b3:34:a3:5a:a0: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C3:D4:E1:F7:56:8C:85:B7:9C:AA:96:05:23:56:82:CA:C3:45:1C X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f6:01:7a:52:b5:9c:74:c1:2a:39:0d:48:8c:6d:15:83:e1: bb:9b:9e:d8:ea:81:24:de:64:25:82:85:34:dd:bf:53:ce:c6: fe:a3:ec:37:c3:2b:65:33:48:d7:a3:bc:96:27:6f:b4:f5:6e: 18:9c:89:13:f1:e5:2c:8d:b0:49:ff:b7:2c:1f:5f:74:bd:16: 48:b1:dd:42:ea:6a:1a:9b:7b:2b:02:65:1c:06:19:04:5a:86: 6f:74:4b:d3:0d:0b:87:de:79:79:8a:ca:01:ab:c8:e8:f2:da: f3:88:52:7f:c3:b1:cb:3f:92:03:9a:5f:2e:8f:d4:be:ef:57: 61:44:b7:3f:b8:d3:94:66:5b:16:63:db:81:7a:5a:cc:9a:ff: 70:7c:fa:7d:89:fe:19:f6:f6:3a:53:3f:ea:64:66:ca:5d:80: 1b:7f:d4:a5:61:24:89:d4:3a:dd:19:7d:66:8d:ab:37:00:27: 38:24:e1:ff:fb:33:48:16:0b:ce:15:bc:08:c0:a8:f5:50:01: b2:ee:9b:3d:86:96:d1:e6:9d:a0:00:59:01:5f:8c:34:53:e4: 93:81:98:4b:4d:5a:ff:4b:99:2b:a0:b7:3c:da:63:e1:db:c7: 07:86:35:b4:23:91:39:8a:c0:b0:e6:25:33:a0:a8:76:22:a1: b0:a7:3a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwNzI1MDI1NTUzWhcNMjUwODAxMDI1NTUzWjAYMRYwFAYD VQQDEw02ODgyZjIzYS05OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfwhUkDuNIbCi4M7vkPXbwDvcNcUMruBhnMVR+S15OPm5PnkebzLcjhav1Ol u+T6xZDMdGKlQrUrEMAefp7XtsR0QYVzSU+Rh7mb6RvLuPmhWYkvV7gfIZNned7z 0JmrMFVpQ5uDl/mldE+wz0/nyyqeyRgkGtuERQ9fWUNxxdtpK/1qmOUBfev+IVBj GZKFxavea4uzglOa+r8TkCN/iNCZ9zTqlvLL/qW/HjSnS6XNP20BtczTgsgfIcUa UTQWEvvdrh588+RRSIokfP9u28jgSxXgnP7EG+h587GFRZmM7d9K3MwVC6+ZSabl jQQUmgS5viNcObUbszSjWqAJEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXD1OH3 VoyFt5yqlgUjVoLKw0UcMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx blVCSTFENEVzekNXbVA1amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK9gF6UrWcdMEqOQ1IjG0Vg+G7m57Y6oEk3mQlgoU03b9Tzsb+o+w3 wytlM0jXo7yWJ2+09W4YnIkT8eUsjbBJ/7csH190vRZIsd1C6moam3srAmUcBhkE WoZvdEvTDQuH3nl5isoBq8jo8trziFJ/w7HLP5IDml8uj9S+71dhRLc/uNOUZlsW Y9uBelrMmv9wfPp9if4Z9vY6Uz/qZGbKXYAbf9SlYSSJ1DrdGX1mjas3ACc4JOH/ +zNIFgvOFbwIwKj1UAGy7ps9hpbR5p2gAFkBX4w0U+STgZhLTVr/S5kroLc82mPh 28cHhjW0I5E5isCw5iUzoKh2IqGwpzpt -----END CERTIFICATE-----Generated at Sat Jul 26 13:25:58 2025 by rpki-client