$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: nwv5lYpa+VOUxtniEWtE8vbF5AEeWdn5pkWC7W7+kZ4= Subject key identifier: 18:D5:62:6F:C1:11:B2:5E:B8:18:0C:C7:0A:EA:6B:79:A3:3D:1A:A8 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09CB Signing time: Tue 16 Sep 2025 20:10:01 +0000 Manifest this update: Tue 16 Sep 2025 20:10:00 +0000 Manifest next update: Tue 23 Sep 2025 20:10:00 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: wYSBXTn2dURgGLrWrKUTj2hKSVY3uW66hWFe+kcWbQE=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Sep 16 20:10:00 2025 GMT Not After : Sep 23 20:10:00 2025 GMT Subject: CN=68c9c419-5fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:46:83:34:6f:c0:93:68:6d:94:ab:02:eb: c7:ac:7f:b1:01:cd:fc:c2:22:a5:35:39:cb:eb:79: 89:d9:d5:84:ee:fa:2b:84:07:82:31:82:fd:e5:f9: 08:72:67:bc:7d:ec:72:7a:fd:95:9b:06:68:1a:11: 37:ff:da:0d:1a:c8:32:09:b3:51:5f:a2:98:b4:0c: b8:c9:08:62:3d:92:c9:86:cf:b6:79:df:48:d4:f1: a1:cc:59:05:a8:4c:31:b5:85:5d:1e:f4:05:09:53: f3:20:80:c7:58:d7:97:46:af:03:3f:10:be:db:b9: 2b:a2:94:b4:3e:0a:5d:5e:b4:0c:a1:1a:d1:e1:60: 7d:de:16:44:a8:c3:fd:26:7f:1b:c6:d4:69:3b:10: ae:f4:7b:7d:e7:69:db:f2:df:08:e8:3e:47:c8:d4: a9:52:b5:73:67:71:84:f8:d1:5d:ae:d2:ef:d7:b9: 7c:f4:37:30:50:9d:b2:ff:7b:98:dd:44:29:33:f0: 30:09:54:7a:3c:d9:87:c0:24:90:98:39:c4:4b:d5: 2a:53:02:8d:72:c2:17:06:e0:c4:05:1a:89:86:47: ee:38:29:e9:1d:90:5e:87:3c:90:20:98:c5:ee:72: 81:fa:39:67:00:d9:69:dc:b0:76:e8:da:53:2d:1a: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D5:62:6F:C1:11:B2:5E:B8:18:0C:C7:0A:EA:6B:79:A3:3D:1A:A8 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b2:2d:e6:be:27:ad:e4:f4:3c:e6:05:58:0d:c6:78:4f:94: 86:bb:a7:4a:8b:d8:9b:05:e4:dd:17:cc:80:f2:f8:43:64:41: c3:4e:cf:0a:c7:71:09:8a:b3:96:c9:3d:8d:63:e4:8e:54:ff: 79:38:cb:3e:ed:d8:a5:5a:2b:07:af:27:d2:ff:6f:3d:5a:ee: 1c:2c:9b:40:6b:56:53:92:56:44:b4:4a:24:ec:6d:d9:c5:6a: 04:ea:0f:0a:30:44:41:cc:5a:1a:cd:b4:db:13:5b:58:f1:ae: 1c:b7:db:b5:fa:f6:05:0f:f1:b9:f4:72:33:1f:e8:b4:8e:4e: bc:47:10:37:21:13:99:ff:e2:ba:dc:5b:7e:df:bc:44:46:01: 61:cd:74:bb:82:e5:2f:52:ea:43:ce:c3:a8:c3:bf:fd:0d:18: b8:ef:10:2b:d0:0d:d4:ef:7e:8d:8f:95:30:95:2f:67:cb:5d: 99:f8:f2:2e:29:d4:3c:60:96:67:fe:c5:ae:9c:5d:70:18:05: 81:30:bd:c9:92:93:bc:c4:4b:41:93:91:48:77:ea:8c:70:87: 86:af:86:1c:af:dd:03:83:c9:9f:6f:b7:91:a9:05:f1:74:f3: 37:5b:3b:92:10:01:6c:ca:8a:f3:e8:da:27:4a:2e:eb:89:3c: e9:da:5d:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUwOTE2MjAxMDAwWhcNMjUwOTIzMjAxMDAwWjAYMRYwFAYD VQQDEw02OGM5YzQxOS01ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPZGgzRvwJNobZSrAuvHrH+xAc38wiKlNTnL63mJ2dWE7vorhAeCMYL95fkI cme8fexyev2VmwZoGhE3/9oNGsgyCbNRX6KYtAy4yQhiPZLJhs+2ed9I1PGhzFkF qEwxtYVdHvQFCVPzIIDHWNeXRq8DPxC+27kropS0PgpdXrQMoRrR4WB93hZEqMP9 Jn8bxtRpOxCu9Ht952nb8t8I6D5HyNSpUrVzZ3GE+NFdrtLv17l89DcwUJ2y/3uY 3UQpM/AwCVR6PNmHwCSQmDnES9UqUwKNcsIXBuDEBRqJhkfuOCnpHZBehzyQIJjF 7nKB+jlnANlp3LB26NpTLRonOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjVYm/B EbJeuBgMxwrqa3mjPRqoMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/si3mviet5PQ85gVYDcZ4T5SGu6dKi9ibBeTdF8yA8vhDZEHDTs8K x3EJirOWyT2NY+SOVP95OMs+7dilWisHryfS/289Wu4cLJtAa1ZTklZEtEok7G3Z xWoE6g8KMERBzFoazbTbE1tY8a4ct9u1+vYFD/G59HIzH+i0jk68RxA3IROZ/+K6 3Ft+37xERgFhzXS7guUvUupDzsOow7/9DRi47xAr0A3U736Nj5UwlS9ny12Z+PIu KdQ8YJZn/sWunF1wGAWBML3JkpO8xEtBk5FId+qMcIeGr4Ycr90Dg8mfb7eRqQXx dPM3WzuSEAFsyorz6NonSi7riTzp2l3P -----END CERTIFICATE-----Generated at Wed Sep 17 08:18:27 2025 by rpki-client