$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: +op2LwYKT0Ay/Cqqe9/LDkenBUTjv6Z38Uw+z9SemDs= Subject key identifier: D1:09:C0:0F:14:A9:EF:AC:4E:EE:53:DF:46:7F:2A:45:CD:D7:A7:28 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 92 Signing time: Wed 09 Apr 2025 05:15:13 +0000 Manifest this update: Wed 09 Apr 2025 05:15:12 +0000 Manifest next update: Wed 16 Apr 2025 05:15:12 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: dJPgc5oHtLSFYLLinOPb7fYpaMcmsX2rw4cv/RKO5nM=) 2: ACCFC92C38E111EF99DA0575C4F9AE02.roa (hash: WzrI+LT1o8icpXLN53gt7R+lLc++MvJ4Kq6tWgFCwq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40 Validity Not Before: Apr 9 05:15:12 2025 GMT Not After : Apr 16 05:15:12 2025 GMT Subject: CN=67f60260-93bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:41:85:ea:e2:72:0c:db:10:a7:2a:82:cd: b4:07:8a:54:c2:50:60:cc:a3:34:dc:09:ba:4a:22: 48:ed:12:d3:f8:88:82:6d:70:77:16:a8:ac:38:85: d9:4f:41:69:a0:fb:50:9a:dd:22:4d:4a:4e:16:e7: 1a:27:8f:f2:7c:45:60:85:79:c2:be:13:39:8c:e1: f2:1d:98:87:3b:95:c6:6c:59:5e:44:58:a4:4d:29: f6:74:31:82:6a:86:0a:b7:cf:5e:a0:81:40:c2:9b: f2:c0:7f:40:1b:49:81:2f:76:43:7d:d0:af:8b:58: 7e:00:dd:2a:34:27:d6:16:9c:2b:2e:d9:bc:38:ab: ce:cf:8e:56:17:db:79:62:c0:77:e6:18:b8:42:96: 70:20:ae:1d:68:a9:56:42:d8:78:d1:29:6b:3a:d9: c8:9f:48:9c:c8:0a:f6:ba:0a:fd:da:97:bc:8c:8d: 4a:2c:d9:d4:34:79:fa:4d:f6:89:3b:72:c1:02:9c: e8:9e:4b:e0:d1:74:b5:27:d6:4a:dc:99:ba:80:e1: 33:1b:e2:a6:6d:86:9b:84:68:64:4b:6d:66:13:dc: 70:f4:59:ba:0e:d1:30:ef:fe:54:86:ec:5e:03:b7: 2f:3d:e8:44:1f:6f:ae:ee:48:95:04:04:f4:41:f5: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:C0:0F:14:A9:EF:AC:4E:EE:53:DF:46:7F:2A:45:CD:D7:A7:28 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9d:0a:52:82:e7:7d:29:e0:4d:3d:d3:44:24:8d:bd:d5:8e: 74:b1:c1:41:48:94:40:a1:3a:36:8b:23:fe:9e:78:84:73:aa: 60:bd:cc:d8:99:9c:b3:b0:f4:70:bf:84:ec:be:4e:45:fa:85: 4d:ed:8b:7d:ce:d1:e8:6f:ca:33:6e:f5:c3:c0:d2:27:2e:27: a5:d1:46:dd:f6:ed:90:82:14:98:63:48:4a:88:b4:1f:16:3b: 0f:33:0d:63:a3:3e:72:bb:45:22:3e:9d:f1:f9:41:09:72:13: e5:57:18:7c:08:79:44:78:8b:a6:1e:1c:b3:8d:37:bb:7c:b6: d2:24:6a:5d:e3:18:8f:1f:ab:ae:8f:34:51:99:be:6d:36:2d: 36:23:91:a9:4d:dc:3b:9b:e7:11:33:10:35:ad:7b:b5:ea:e7: 07:60:0f:a3:82:30:3b:70:a2:b9:a8:d0:84:2c:2a:da:50:1b: 4d:57:cc:37:70:ab:61:62:e8:9c:ad:3c:03:7e:2a:ee:f6:c8: ae:32:de:56:b1:54:a0:2c:16:48:a0:22:68:c5:15:8b:83:24: 2d:fc:3d:d3:d6:ae:cb:9f:49:72:b0:fa:59:ef:7f:80:68:6b: 5e:8b:e0:7e:9b:9a:18:83:cb:9a:5a:3b:16:d0:3d:a7:6b:29: 8d:18:d6:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwNDA5MDUxNTEyWhcNMjUwNDE2MDUxNTEyWjAYMRYwFAYD VQQDEw02N2Y2MDI2MC05M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAps9BhericgzbEKcqgs20B4pUwlBgzKM03Am6SiJI7RLT+IiCbXB3FqisOIXZ T0FpoPtQmt0iTUpOFucaJ4/yfEVghXnCvhM5jOHyHZiHO5XGbFleRFikTSn2dDGC aoYKt89eoIFAwpvywH9AG0mBL3ZDfdCvi1h+AN0qNCfWFpwrLtm8OKvOz45WF9t5 YsB35hi4QpZwIK4daKlWQth40SlrOtnIn0icyAr2ugr92pe8jI1KLNnUNHn6TfaJ O3LBApzonkvg0XS1J9ZK3Jm6gOEzG+KmbYabhGhkS21mE9xw9Fm6DtEw7/5Uhuxe A7cvPehEH2+u7kiVBAT0QfW7jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEJwA8U qe+sTu5T30Z/KkXN16coMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsnQpSgud9KeBNPdNEJI291Y50scFBSJRAoTo2iyP+nniEc6pgvczY mZyzsPRwv4Tsvk5F+oVN7Yt9ztHob8ozbvXDwNInLiel0Ubd9u2QghSYY0hKiLQf FjsPMw1joz5yu0UiPp3x+UEJchPlVxh8CHlEeIumHhyzjTe7fLbSJGpd4xiPH6uu jzRRmb5tNi02I5GpTdw7m+cRMxA1rXu16ucHYA+jgjA7cKK5qNCELCraUBtNV8w3 cKthYuicrTwDfiru9siuMt5WsVSgLBZIoCJoxRWLgyQt/D3T1q7Ln0lysPpZ73+A aGtei+B+m5oYg8uaWjsW0D2naymNGNaZ -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:35 2025 by rpki-client