$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: 3Fug8r5JpvlH7pmpFQnyRknartlMmUWiJS1FJwL8Y2Y= Subject key identifier: B4:54:19:32:0C:F1:7B:81:9E:1A:B2:8D:C5:3A:E9:4E:93:CA:02:71 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: FE Signing time: Wed 17 Sep 2025 05:46:08 +0000 Manifest this update: Wed 17 Sep 2025 05:46:08 +0000 Manifest next update: Wed 24 Sep 2025 05:46:08 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: TIRcxq9Vb++yOyoZR//8EaBw9qftxDL6TVfSWW3Oze4=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: eq/kGWgomEiw4pMKrPya4BqnBXJsYemvIJbRjqP6JSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Sep 17 05:46:08 2025 GMT Not After : Sep 24 05:46:08 2025 GMT Subject: CN=68ca4b20-987e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:78:65:38:1e:21:b0:96:49:f5:d7:b4:18: 9a:1b:6d:8f:aa:2c:cd:de:52:df:d8:f8:4c:1e:a4: 00:37:32:11:7e:01:f1:2e:7b:27:10:c8:89:04:7e: 17:4a:d1:34:5a:e5:3b:69:74:7f:6e:28:1a:3a:b4: 4f:87:f7:77:44:60:0e:4b:6c:b8:fe:d5:99:f4:0b: b3:09:53:c8:35:75:23:df:6e:4d:d7:58:f4:cb:9d: 81:f2:6f:10:90:b9:f0:b7:cc:5b:a1:11:8e:61:e5: 77:a2:af:7c:14:bd:4d:1d:b2:98:aa:ce:6d:97:81: 5d:3c:77:1b:7b:83:12:e1:97:01:0e:44:b9:57:22: 46:c3:63:47:21:f4:c5:15:b6:37:91:95:69:70:68: d3:63:5a:ab:bd:55:5d:c8:bd:97:c0:9c:36:08:bf: 1f:f4:05:27:b5:a4:3b:00:be:c7:06:8d:28:76:26: f4:35:96:e9:43:1d:e0:6d:be:27:b6:c7:09:d7:0c: 50:bc:84:63:82:a3:fc:f4:cf:58:a3:49:7d:2d:23: b5:32:e1:e2:d0:be:ae:29:35:6f:4b:37:6d:06:00: 38:96:4a:08:58:8f:4f:0e:e9:80:08:6e:cb:5c:5c: bc:c6:10:bb:2e:87:d3:62:4e:59:bb:dc:9c:8f:77: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:19:32:0C:F1:7B:81:9E:1A:B2:8D:C5:3A:E9:4E:93:CA:02:71 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:88:6b:ca:2c:6f:7f:98:04:9e:76:73:63:35:9c:27:06: ea:20:22:ea:d2:51:5c:0d:65:f6:c9:2f:cb:e6:f5:c6:bf:d6: 32:9d:e2:a3:1b:55:84:06:78:d0:27:b2:66:c9:e9:b8:ff:90: 8c:94:cf:78:dd:a2:25:d3:16:45:26:0d:c6:aa:27:f7:ef:59: 57:11:c3:d1:2f:82:91:fc:22:6c:f1:57:2e:0e:b1:f6:0d:94: 83:ff:16:bf:0e:de:8f:0c:7e:85:95:6c:65:c4:69:8a:64:30: 0a:eb:9c:b9:b6:51:29:47:e2:c1:bd:df:3c:b9:b1:4c:d9:d2: 97:da:fa:29:c4:8a:78:b1:78:a7:cc:75:3b:cb:04:34:80:b2: d5:b3:2b:a5:ca:b0:21:9e:7b:4a:26:18:87:b9:a9:33:3b:57: 21:a3:db:02:26:0a:78:0d:ed:fd:31:e4:7e:ac:69:30:cc:86: f6:d7:f8:38:30:62:60:c9:3c:c8:ea:f5:e3:93:de:7f:9e:55: e1:72:ce:ca:5b:d6:a4:4e:fc:3d:85:c5:17:3e:1a:8a:c9:fe: 4a:49:6a:9e:42:d3:9e:4a:52:b3:c0:34:5c:82:3d:62:bc:1c: 4c:00:fa:6a:a4:46:eb:e6:7f:e9:11:02:15:77:d5:ba:27:a9: c7:88:34:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwOTE3MDU0NjA4WhcNMjUwOTI0MDU0NjA4WjAYMRYwFAYD VQQDEw02OGNhNGIyMC05ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wB4ZTgeIbCWSfXXtBiaG22PqizN3lLf2PhMHqQANzIRfgHxLnsnEMiJBH4X StE0WuU7aXR/bigaOrRPh/d3RGAOS2y4/tWZ9AuzCVPINXUj325N11j0y52B8m8Q kLnwt8xboRGOYeV3oq98FL1NHbKYqs5tl4FdPHcbe4MS4ZcBDkS5VyJGw2NHIfTF FbY3kZVpcGjTY1qrvVVdyL2XwJw2CL8f9AUntaQ7AL7HBo0odib0NZbpQx3gbb4n tscJ1wxQvIRjgqP89M9Yo0l9LSO1MuHi0L6uKTVvSzdtBgA4lkoIWI9PDumACG7L XFy8xhC7LofTYk5Zu9ycj3cICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRUGTIM 8XuBnhqyjcU66U6TygJxMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI7ohryixvf5gEnnZzYzWcJwbqICLq0lFcDWX2yS/L5vXGv9YyneKj G1WEBnjQJ7Jmyem4/5CMlM943aIl0xZFJg3Gqif371lXEcPRL4KR/CJs8VcuDrH2 DZSD/xa/Dt6PDH6FlWxlxGmKZDAK65y5tlEpR+LBvd88ubFM2dKX2vopxIp4sXin zHU7ywQ0gLLVsyulyrAhnntKJhiHuakzO1cho9sCJgp4De39MeR+rGkwzIb21/g4 MGJgyTzI6vXjk95/nlXhcs7KW9akTvw9hcUXPhqKyf5KSWqeQtOeSlKzwDRcgj1i vBxMAPpqpEbr5n/pEQIVd9W6J6nHiDTA -----END CERTIFICATE-----Generated at Thu Sep 18 21:37:37 2025 by rpki-client