$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: UTPDki0PTb2Jm/eX5Zm1tqMZRkUQk0CP16CAqCbhLgA= Subject key identifier: 59:BE:F0:52:F0:6A:C6:F5:91:F8:0E:7E:1E:83:06:27:F5:0D:51:67 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 099C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 0996 Signing time: Wed 04 Jun 2025 19:59:58 +0000 Manifest this update: Wed 04 Jun 2025 19:59:57 +0000 Manifest next update: Wed 11 Jun 2025 19:59:57 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: bBYrgCucE73Q9UXB5YrgUTvY8x5rtjoHacqp+rzyc0g=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2460 (0x99c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Jun 4 19:59:57 2025 GMT Not After : Jun 11 19:59:57 2025 GMT Subject: CN=6840a5be-681d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:7c:bd:fe:94:93:f6:4c:16:f9:c7:01:b5:37: 01:d5:7a:6b:b0:1a:40:05:bc:7e:8e:84:02:a4:00: e7:d1:64:c4:cd:bb:e3:61:e3:92:3b:ee:1a:cf:c2: 98:3c:6f:a3:16:26:05:b6:c2:c4:5f:dc:a4:53:50: 7e:18:6c:b5:28:6a:41:48:47:af:77:75:12:6b:d3: 27:80:eb:75:37:e7:bb:48:16:f3:04:bc:e8:36:51: 9d:0e:d5:bb:9c:02:6c:d4:36:1d:ee:6f:75:54:00: 40:20:e0:66:59:4c:36:00:18:46:54:91:1a:a1:57: a7:46:4d:53:73:99:0d:36:ab:23:7c:00:15:5c:44: ad:69:44:26:1c:d2:93:32:2c:0e:1e:bf:ba:4a:67: 8e:b6:69:04:7a:1a:46:11:b2:94:93:7e:d9:09:b2: 58:84:52:45:be:a9:da:05:32:70:e2:54:38:bd:98: 27:c3:ab:20:2f:4e:44:a1:af:b4:56:1b:5d:ae:d4: 0d:14:44:c1:ef:ef:99:68:e8:ab:c0:b7:c6:b3:9c: b2:93:fd:b3:ff:41:31:20:50:62:1f:df:25:76:e7: 8b:9c:eb:b8:83:dc:b1:ba:d0:de:4e:58:42:7c:07: 07:9c:d0:39:94:13:67:f8:1d:b7:6d:d6:7b:09:2e: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:F0:52:F0:6A:C6:F5:91:F8:0E:7E:1E:83:06:27:F5:0D:51:67 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:77:51:6d:dd:8a:01:33:9d:33:6e:c6:12:4d:2c:0e:31:f4: 5f:af:39:bc:9e:b7:94:67:f3:e7:c8:91:98:e3:6f:c0:81:45: a7:52:10:83:41:d9:aa:1c:a7:da:82:3b:0f:4f:9d:bf:b1:0b: 46:2b:d1:45:f1:d5:c7:32:f5:7d:00:f9:7d:9a:b4:64:90:e9: 62:32:40:bf:c3:f4:7f:fd:a5:30:81:8d:a9:8d:77:6e:8b:1f: 74:60:f5:94:c8:44:a4:91:5a:c2:8b:64:bb:60:df:e4:1d:1f: 8e:7a:bb:af:9b:c3:cc:b9:fc:b5:d4:ce:70:63:f3:03:96:6a: b7:31:6e:24:a0:3d:26:01:ff:f0:dd:2b:18:4b:7d:de:46:3c: 15:b1:8d:d8:e9:70:f2:31:23:77:ac:77:6a:b8:e3:5c:12:7d: 85:0b:5b:23:e6:ab:e8:4c:3c:8d:58:fe:a3:9c:c0:f2:0e:c8: 52:f9:61:47:04:bb:1a:57:2a:81:4f:7a:ea:a8:56:b4:d7:3e: 90:e3:7c:ed:88:0d:79:a4:19:f2:27:f2:73:05:15:ab:d2:c4: 1d:34:0b:33:6d:0b:dc:5d:75:49:84:d2:6e:df:78:4d:ae:f5: 63:69:55:5a:7f:cd:34:f2:87:dc:6d:70:e7:6b:99:5a:5b:ac: 4b:c7:b0:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUwNjA0MTk1OTU3WhcNMjUwNjExMTk1OTU3WjAYMRYwFAYD VQQDEw02ODQwYTViZS02ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Xy9/pST9kwW+ccBtTcB1XprsBpABbx+joQCpADn0WTEzbvjYeOSO+4az8KY PG+jFiYFtsLEX9ykU1B+GGy1KGpBSEevd3USa9MngOt1N+e7SBbzBLzoNlGdDtW7 nAJs1DYd7m91VABAIOBmWUw2ABhGVJEaoVenRk1Tc5kNNqsjfAAVXEStaUQmHNKT MiwOHr+6SmeOtmkEehpGEbKUk37ZCbJYhFJFvqnaBTJw4lQ4vZgnw6sgL05Eoa+0 VhtdrtQNFETB7++ZaOirwLfGs5yyk/2z/0ExIFBiH98ldueLnOu4g9yxutDeTlhC fAcHnNA5lBNn+B23bdZ7CS77vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm+8FLw asb1kfgOfh6DBif1DVFnMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjd1Ft3YoBM50zbsYSTSwOMfRfrzm8nreUZ/PnyJGY42/AgUWnUhCD QdmqHKfagjsPT52/sQtGK9FF8dXHMvV9APl9mrRkkOliMkC/w/R//aUwgY2pjXdu ix90YPWUyESkkVrCi2S7YN/kHR+Oeruvm8PMufy11M5wY/MDlmq3MW4koD0mAf/w 3SsYS33eRjwVsY3Y6XDyMSN3rHdquONcEn2FC1sj5qvoTDyNWP6jnMDyDshS+WFH BLsaVyqBT3rqqFa01z6Q43ztiA15pBnyJ/JzBRWr0sQdNAszbQvcXXVJhNJu33hN rvVjaVVaf8008ofcbXDna5laW6xLx7AK -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:57 2025 by rpki-client