$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: lVNRM95iHMku2txlPVwWG30lQOZPygoqnLAep0LaC94= Subject key identifier: CC:70:36:66:CB:8B:69:41:B8:1D:58:B1:85:0D:DA:77:FF:2E:55:1C Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 259A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 258A Signing time: Sun 24 Aug 2025 15:42:18 +0000 Manifest this update: Sun 24 Aug 2025 15:42:17 +0000 Manifest next update: Sun 31 Aug 2025 15:42:17 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: nD7uJl9SFXcVXyXruppWDxS3LuUXaVP+F8dFRo++T7k=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9626 (0x259a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Aug 24 15:42:17 2025 GMT Not After : Aug 31 15:42:17 2025 GMT Subject: CN=68ab32d9-59e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b5:49:d1:f4:b1:d6:52:78:6a:a5:cb:c4:4b: e8:e2:a0:9d:fe:2d:e5:8e:69:bd:77:e5:f9:1e:2c: 0e:f8:e2:ac:bd:64:bc:51:44:18:64:22:02:ae:1a: 43:d2:a3:c4:db:64:ef:54:98:bc:f6:e4:56:81:51: 80:70:ee:f4:b7:7c:c9:37:9e:e7:c5:29:10:97:a3: c3:a7:97:8e:51:cb:76:4b:8e:11:78:42:0f:70:fb: c6:52:8e:08:4b:1f:ae:b9:bb:e0:56:4a:cb:e6:a8: fe:06:86:ed:a1:85:5b:4a:ee:24:ac:b9:1e:0e:af: 0f:df:d4:5e:5f:aa:b6:ae:98:9c:f3:cd:35:eb:45: c8:f6:4a:3b:50:ec:8c:ef:18:ee:6d:6b:60:27:19: f7:a0:4d:1b:e4:e4:1e:6b:ae:76:74:b6:8c:1a:f6: c7:9a:61:de:8b:ca:3e:05:50:ea:5e:8a:ba:17:c1: 7e:45:18:db:d0:8b:23:ca:4c:80:cf:68:dd:7f:65: 63:ef:14:66:55:02:f4:05:50:23:42:b7:ac:a3:a5: 32:b6:0c:15:fa:fc:cf:f5:00:f9:4c:95:1a:f8:e5: f9:cd:75:2c:02:d8:46:77:cd:36:fb:77:59:85:9a: ce:bb:b4:16:0c:00:b8:97:6f:19:30:04:5d:db:b5: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:70:36:66:CB:8B:69:41:B8:1D:58:B1:85:0D:DA:77:FF:2E:55:1C X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a4:b3:fc:1b:5f:0e:70:4a:59:52:f9:35:5e:52:f0:ca:49: 7c:7b:b7:63:bd:40:e1:00:d1:48:f8:06:16:b7:a4:84:51:77: 69:19:5d:7d:c3:ce:aa:37:19:a1:79:b4:7c:02:49:16:d7:e5: 1f:98:32:88:f8:66:69:ba:eb:5b:b2:99:91:5f:27:c1:0a:9d: a2:02:37:a9:64:78:88:f4:ad:cf:27:89:1c:be:02:77:2d:8e: df:95:a7:fb:25:84:3b:96:cc:12:66:34:3c:06:a5:96:e6:7c: 29:35:26:57:b9:c4:37:0e:f1:fc:75:7b:cf:ca:3f:54:73:df: 12:4f:5a:46:24:67:6f:2d:0c:9f:2f:5b:ff:12:d1:ec:b3:f9: f5:1c:72:8b:40:f8:b0:44:ca:e1:5a:aa:04:20:4f:a7:25:a7: ee:f3:03:86:11:66:e7:9e:3b:ac:91:26:b0:28:13:9f:a0:4d: a8:ee:4f:95:2a:7d:4c:d0:7d:68:4a:a9:e6:85:f7:7c:99:ee: 66:24:43:eb:5a:3d:1f:49:35:47:1f:02:60:40:12:10:7f:dd: 02:11:61:fa:02:09:26:3b:3d:ba:44:37:d9:50:29:eb:c6:b1: 50:cb:2f:7f:49:a0:ec:07:68:fd:f6:cc:39:60:74:d7:a6:b0: 9a:d2:a9:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUwODI0MTU0MjE3WhcNMjUwODMxMTU0MjE3WjAYMRYwFAYD VQQDEw02OGFiMzJkOS01OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LVJ0fSx1lJ4aqXLxEvo4qCd/i3ljmm9d+X5HiwO+OKsvWS8UUQYZCICrhpD 0qPE22TvVJi89uRWgVGAcO70t3zJN57nxSkQl6PDp5eOUct2S44ReEIPcPvGUo4I Sx+uubvgVkrL5qj+BobtoYVbSu4krLkeDq8P39ReX6q2rpic880160XI9ko7UOyM 7xjubWtgJxn3oE0b5OQea652dLaMGvbHmmHei8o+BVDqXoq6F8F+RRjb0IsjykyA z2jdf2Vj7xRmVQL0BVAjQreso6UytgwV+vzP9QD5TJUa+OX5zXUsAthGd802+3dZ hZrOu7QWDAC4l28ZMARd27X4+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxwNmbL i2lBuB1YsYUN2nf/LlUcMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFpLP8G18OcEpZUvk1XlLwykl8e7djvUDhANFI+AYWt6SEUXdpGV19 w86qNxmhebR8AkkW1+UfmDKI+GZpuutbspmRXyfBCp2iAjepZHiI9K3PJ4kcvgJ3 LY7flaf7JYQ7lswSZjQ8BqWW5nwpNSZXucQ3DvH8dXvPyj9Uc98ST1pGJGdvLQyf L1v/EtHss/n1HHKLQPiwRMrhWqoEIE+nJafu8wOGEWbnnjuskSawKBOfoE2o7k+V Kn1M0H1oSqnmhfd8me5mJEPrWj0fSTVHHwJgQBIQf90CEWH6AgkmOz26RDfZUCnr xrFQyy9/SaDsB2j99sw5YHTXprCa0qlT -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:11 2025 by rpki-client