$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: 9etkoE006CGTzc23q+CY7u0BU1BdnqPUqzVen08ehLI= Subject key identifier: 69:12:FD:BB:55:BE:39:9E:BA:28:88:01:73:9D:74:6F:60:D8:9D:F1 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 2D Signing time: Tue 19 Aug 2025 08:12:54 +0000 Manifest this update: Tue 19 Aug 2025 08:12:53 +0000 Manifest next update: Tue 26 Aug 2025 08:12:53 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: SI2elSmsdDHNo3P7MBkG7w+p1T7fIpReOtn+oNVHji8=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Aug 19 08:12:53 2025 GMT Not After : Aug 26 08:12:53 2025 GMT Subject: CN=68a43206-5e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:f8:08:56:5f:b1:3f:be:0b:a8:10:9a:39: 72:60:15:e5:53:52:18:c3:b4:60:67:dc:50:0c:a5: ef:02:1e:dd:f0:6c:a4:bf:96:0d:96:b9:71:2e:95: 28:e4:bd:17:b0:81:c3:e6:9d:de:55:12:9e:26:25: 0f:ca:b7:e7:71:d5:55:13:ae:cb:d8:ad:14:7f:0f: 38:bb:1c:e8:d1:f3:27:1e:d1:fe:66:ab:a4:d7:7c: 8b:cc:9b:2f:af:7b:f1:10:9b:8b:14:16:13:de:e3: e1:0c:58:28:06:88:89:3d:29:a0:fa:16:b3:29:c4: 39:48:62:ab:c5:b8:b9:75:b5:ab:b4:63:02:aa:b5: f2:3c:d8:9d:11:c6:7a:78:81:9c:ac:2b:7f:2f:36: ef:ef:cd:e4:67:fa:6a:54:55:7f:de:c4:e0:2d:55: 2b:d2:a1:0f:e3:ce:cc:27:b0:52:f9:b0:2c:cd:5c: 6a:70:f1:1a:42:0a:43:6e:2f:68:b8:29:93:3a:fb: f1:bf:81:02:29:9f:a0:08:57:de:17:35:1c:f2:73: bc:71:16:0a:43:e4:e5:ee:17:1d:d8:66:98:51:c3: ce:c5:d4:6b:ba:72:b2:72:d6:67:85:a2:e9:28:3c: 04:e3:85:b2:fd:51:63:47:b2:0f:a2:29:b7:7c:3a: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:12:FD:BB:55:BE:39:9E:BA:28:88:01:73:9D:74:6F:60:D8:9D:F1 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:71:5c:52:03:20:a5:f5:15:34:6c:84:b4:71:36:bb:d6: 4e:ef:e6:8f:7d:18:ca:2d:58:e5:e9:0e:45:d6:d4:e0:b5:0f: a0:f0:77:e8:29:d1:76:31:37:cb:21:41:14:2e:4b:1d:d8:0e: fe:eb:f3:3f:99:c0:c0:bb:ab:22:63:03:95:bf:d0:1d:ac:a6: 0e:20:87:d8:d1:6f:9c:a9:cf:49:c8:d9:d7:ea:bb:df:21:63: a5:b8:cc:2e:9d:d8:55:2c:21:f3:80:ae:d0:60:12:a8:a7:df: ab:b7:a9:4c:92:bc:c8:06:58:4d:ef:94:12:91:a7:46:67:77: de:a5:c9:c2:a5:8c:09:99:c9:61:79:fa:37:d2:78:c0:a2:48: f8:66:bb:57:86:bb:0c:90:d5:bc:44:ac:eb:b5:a4:d6:b7:42: a5:9c:09:2d:a1:96:c2:ca:28:bb:c1:c4:e2:71:42:87:5c:02: 4a:a5:bb:4f:f2:dd:a5:4b:05:12:4a:71:b0:61:d7:85:12:a9: c0:a6:0d:b8:f5:ad:4a:3b:b2:cd:da:fc:ed:61:33:5c:0a:c2: 82:63:63:ed:76:30:7c:d0:e6:8b:6d:23:df:b6:37:cc:99:19: 9f:61:f9:cd:46:41:b4:5d:97:b5:dc:d6:0b:83:3c:54:23:ef: 55:49:49:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTA4MTkwODEyNTNaFw0yNTA4MjYwODEyNTNaMBgxFjAUBgNV BAMTDTY4YTQzMjA2LTVlNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpk/gIVl+xP74LqBCaOXJgFeVTUhjDtGBn3FAMpe8CHt3wbKS/lg2WuXEulSjk vRewgcPmnd5VEp4mJQ/Kt+dx1VUTrsvYrRR/Dzi7HOjR8yce0f5mq6TXfIvMmy+v e/EQm4sUFhPe4+EMWCgGiIk9KaD6FrMpxDlIYqvFuLl1tau0YwKqtfI82J0Rxnp4 gZysK38vNu/vzeRn+mpUVX/exOAtVSvSoQ/jzswnsFL5sCzNXGpw8RpCCkNuL2i4 KZM6+/G/gQIpn6AIV94XNRzyc7xxFgpD5OXuFx3YZphRw87F1Gu6crJy1meFouko PATjhbL9UWNHsg+iKbd8OjtXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaRL9u1W+ OZ66KIgBc510b2DYnfEwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKkQcVxSAyCl9RU0bIS0cTa71k7v5o99GMotWOXpDkXW1OC1D6Dwd+gp 0XYxN8shQRQuSx3YDv7r8z+ZwMC7qyJjA5W/0B2spg4gh9jRb5ypz0nI2dfqu98h Y6W4zC6d2FUsIfOArtBgEqin36u3qUySvMgGWE3vlBKRp0Znd96lycKljAmZyWF5 +jfSeMCiSPhmu1eGuwyQ1bxErOu1pNa3QqWcCS2hlsLKKLvBxOJxQodcAkqlu0/y 3aVLBRJKcbBh14USqcCmDbj1rUo7ss3a/O1hM1wKwoJjY+12MHzQ5ottI9+2N8yZ GZ9h+c1GQbRdl7Xc1guDPFQj71VJSfU= -----END CERTIFICATE-----Generated at Thu Aug 21 07:24:07 2025 by rpki-client