$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: /yMQhhfA5Ux/ciDl0NK4FsNmzvsOpsQI4FEdWvoU4Qc= Subject key identifier: E0:C6:B9:BD:40:53:F4:73:83:D0:51:0E:0D:74:19:2C:F6:2E:CF:AB Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01A2 Signing time: Sat 31 May 2025 03:00:20 +0000 Manifest this update: Sat 31 May 2025 03:00:19 +0000 Manifest next update: Sat 07 Jun 2025 03:00:19 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: aS5V/tz+Neez46z8kBuRSEKC9AhkGr23LZe+sn8hr/Y=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: May 31 03:00:19 2025 GMT Not After : Jun 7 03:00:19 2025 GMT Subject: CN=683a70c4-97c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:91:d0:7d:db:52:5f:ad:68:1f:58:fe:a8: 96:b5:2e:97:88:01:dd:d6:60:62:74:3e:b7:22:04: 11:5b:8c:aa:2e:93:cf:48:31:c0:7b:7d:72:83:da: ca:40:1e:23:9f:67:55:14:0b:02:cf:a3:61:a5:e3: 13:07:0b:ee:a9:4e:70:82:c9:07:7a:95:c1:26:1e: e9:2b:9a:c4:73:78:05:8b:41:cd:df:79:7a:17:cc: e8:47:a7:67:cd:c1:67:f0:28:7d:0f:07:6b:51:82: 63:72:5d:65:dd:28:2e:84:34:f3:16:1f:ea:7b:ec: 68:a3:41:5a:95:ef:f2:04:95:54:99:b0:b9:e8:82: 62:ec:e4:85:3e:67:33:38:f0:bb:d5:3b:80:1f:53: b1:63:ce:e5:3c:82:d3:c7:61:53:85:49:fa:d4:fd: 04:22:27:59:7f:cc:85:9f:01:68:b2:99:13:6e:e5: d6:5f:f4:0e:48:9d:b8:2a:08:f4:96:0d:c5:ab:b1: fb:e8:7e:35:e1:cd:f4:10:0b:01:5d:69:fa:5f:a1: c0:1d:7f:30:9b:30:ec:b1:45:41:5e:81:10:00:22: 4c:bd:ab:8f:ce:53:28:3b:51:64:9a:1c:6a:67:ec: fc:86:98:6c:69:da:a7:d6:ad:28:11:bb:94:71:3a: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:B9:BD:40:53:F4:73:83:D0:51:0E:0D:74:19:2C:F6:2E:CF:AB X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d0:26:3b:db:4f:ec:c4:94:07:9c:ab:c1:b2:e2:a5:19:ff: b1:6b:19:1d:95:e3:5a:fb:46:46:a4:04:d5:d8:94:47:17:0f: 76:ad:e8:b1:76:01:05:33:c9:6b:8f:8f:5c:46:5f:92:38:82: b9:ea:b3:6f:5f:0e:1e:b8:1b:ee:9a:54:b4:b3:49:d9:45:22: ae:c5:79:60:3d:e7:2e:5e:04:df:b8:09:d9:36:26:2a:2b:c8: f0:bb:35:38:d6:11:90:60:b1:db:e3:88:8c:a0:bd:bf:07:58: 0c:c8:59:fb:2a:66:63:22:16:16:25:51:39:eb:7e:ac:c4:20: 7e:34:cf:df:28:fe:61:79:0a:61:cc:99:30:b4:cd:77:d1:64: b0:80:8d:7c:9c:4a:3d:e4:6d:19:a0:74:e5:e4:90:91:91:77: 33:cb:1a:95:47:95:cf:df:99:cc:38:c4:58:99:ea:5e:45:fc: 92:b3:e5:70:38:51:ab:ec:d2:74:81:63:cd:0a:7c:f5:3d:b0: 9d:15:5a:45:43:a4:ca:ae:63:86:75:cc:c7:f4:cc:24:81:bf: 96:71:dc:11:df:20:32:1c:87:9f:41:2c:25:ec:04:bf:58:e0: f2:b6:dd:d0:f3:14:ac:18:dc:a2:cb:dc:ab:3f:8c:47:7c:af: 9c:e2:1b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwNTMxMDMwMDE5WhcNMjUwNjA3MDMwMDE5WjAYMRYwFAYD VQQDEw02ODNhNzBjNC05N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpWR0H3bUl+taB9Y/qiWtS6XiAHd1mBidD63IgQRW4yqLpPPSDHAe31yg9rK QB4jn2dVFAsCz6NhpeMTBwvuqU5wgskHepXBJh7pK5rEc3gFi0HN33l6F8zoR6dn zcFn8Ch9DwdrUYJjcl1l3SguhDTzFh/qe+xoo0Fale/yBJVUmbC56IJi7OSFPmcz OPC71TuAH1OxY87lPILTx2FThUn61P0EIidZf8yFnwFospkTbuXWX/QOSJ24Kgj0 lg3Fq7H76H414c30EAsBXWn6X6HAHX8wmzDssUVBXoEQACJMvauPzlMoO1Fkmhxq Z+z8hphsadqn1q0oEbuUcTrQEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODGub1A U/Rzg9BRDg10GSz2Ls+rMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl0CY720/sxJQHnKvBsuKlGf+xaxkdleNa+0ZGpATV2JRHFw92reix dgEFM8lrj49cRl+SOIK56rNvXw4euBvumlS0s0nZRSKuxXlgPecuXgTfuAnZNiYq K8jwuzU41hGQYLHb44iMoL2/B1gMyFn7KmZjIhYWJVE5636sxCB+NM/fKP5heQph zJkwtM130WSwgI18nEo95G0ZoHTl5JCRkXczyxqVR5XP35nMOMRYmepeRfySs+Vw OFGr7NJ0gWPNCnz1PbCdFVpFQ6TKrmOGdczH9Mwkgb+WcdwR3yAyHIefQSwl7AS/ WODytt3Q8xSsGNyiy9yrP4xHfK+c4hul -----END CERTIFICATE-----Generated at Sat May 31 14:51:52 2025 by rpki-client