$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: M94R6z9uKv9In8QR77/bCP942PHnJhE4o5k3LEWZ7Wk= Subject key identifier: 72:62:D4:28:81:B5:16:00:09:AE:90:FB:AA:04:E2:E8:FC:43:B7:80 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0452 Signing time: Sun 07 Sep 2025 00:37:34 +0000 Manifest this update: Sun 07 Sep 2025 00:37:34 +0000 Manifest next update: Sun 14 Sep 2025 00:37:34 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: W957nvdcaVWwtSPvld0wozGiDEAyvMXs1g+u+aZ4/9A=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Sep 7 00:37:34 2025 GMT Not After : Sep 14 00:37:34 2025 GMT Subject: CN=68bcd3ce-d22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:70:ba:cc:da:d0:ac:37:e0:82:2f:f3:39: b0:eb:29:3d:b3:30:6b:27:83:ff:ca:5c:f4:10:58: a3:9d:6f:79:02:57:b0:7a:a3:56:63:01:64:d3:1c: 28:e1:9a:67:41:1e:34:a3:9e:07:97:a1:eb:37:4f: f3:71:21:f5:38:aa:fd:98:f5:1f:ec:02:55:1e:40: d8:f0:34:f1:b9:df:21:8c:80:57:be:47:28:27:83: 8a:c7:62:d9:00:e0:36:0d:da:ed:e6:a7:c8:aa:fe: 2e:16:1d:75:d5:02:82:4a:bc:eb:d1:32:5a:f5:02: a4:b6:43:6e:8a:73:f9:31:16:b9:bf:1e:a6:b0:66: 22:40:15:51:d9:4b:34:20:25:7e:8a:8a:71:17:d6: 20:88:8a:2d:e7:ca:b6:7e:db:59:67:7a:7a:38:b7: 33:4c:8b:5f:75:b6:22:a2:47:cd:9f:85:c1:ca:0e: 64:5e:00:41:c8:f3:ce:34:53:1d:1b:66:1b:15:9c: 4c:d2:c9:f4:55:eb:09:53:c8:39:40:5d:85:96:99: 7c:21:80:b9:81:d2:7b:28:43:56:07:ae:e3:7c:bd: ae:7d:ce:3a:f9:42:a7:02:67:82:31:92:73:d2:69: 70:d2:47:db:e4:a5:5a:39:a3:3e:cf:a7:a7:ae:a4: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:D4:28:81:B5:16:00:09:AE:90:FB:AA:04:E2:E8:FC:43:B7:80 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:01:95:b4:6d:59:68:39:3c:8f:fe:ad:ec:77:94:38:1e:48: 4b:bc:89:3b:8c:61:ce:3c:61:61:86:d5:09:ae:81:66:69:ad: 4a:1a:d2:75:c8:8b:bd:02:03:61:d4:0c:29:4a:6f:02:1b:81: 80:9c:ff:52:e2:6b:21:a6:9c:73:31:2c:52:3d:ab:88:38:93: f5:72:a6:48:2f:82:4e:95:42:bd:35:79:2b:10:11:f5:73:fe: 7c:80:cb:7b:51:0e:5f:99:90:ca:41:9b:91:d6:53:68:28:79: 08:74:11:ad:6a:e9:75:d0:5a:a3:ed:57:eb:27:eb:a9:6a:f8: d6:a3:60:bb:ca:d6:da:e3:c0:92:41:b8:64:af:5c:4a:f7:2f: cd:44:05:22:cd:b3:af:f1:2a:d9:fd:60:7b:f4:37:a0:6b:48: 57:25:0e:96:b0:4a:c1:4c:24:35:5e:16:84:56:d8:b0:6d:1d: 7b:34:75:a2:e3:72:e8:92:18:71:d7:a7:50:c2:5b:01:e2:6c: 63:0e:ce:c3:47:ed:b5:31:11:8f:b4:52:5b:39:55:f3:e1:a2: 36:e6:f6:85:03:39:16:62:a1:03:b1:8d:6c:57:e1:cb:3b:d7: ff:90:9c:9d:f9:90:a9:ad:30:d0:c4:54:33:10:96:fd:8d:ac: b7:c9:17:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwOTA3MDAzNzM0WhcNMjUwOTE0MDAzNzM0WjAYMRYwFAYD VQQDEw02OGJjZDNjZS1kMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19dwusza0Kw34IIv8zmw6yk9szBrJ4P/ylz0EFijnW95AleweqNWYwFk0xwo 4ZpnQR40o54Hl6HrN0/zcSH1OKr9mPUf7AJVHkDY8DTxud8hjIBXvkcoJ4OKx2LZ AOA2Ddrt5qfIqv4uFh111QKCSrzr0TJa9QKktkNuinP5MRa5vx6msGYiQBVR2Us0 ICV+iopxF9YgiIot58q2fttZZ3p6OLczTItfdbYiokfNn4XByg5kXgBByPPONFMd G2YbFZxM0sn0VesJU8g5QF2Flpl8IYC5gdJ7KENWB67jfL2ufc46+UKnAmeCMZJz 0mlw0kfb5KVaOaM+z6enrqQjLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJi1CiB tRYACa6Q+6oE4uj8Q7eAMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANAZW0bVloOTyP/q3sd5Q4HkhLvIk7jGHOPGFhhtUJroFmaa1KGtJ1 yIu9AgNh1AwpSm8CG4GAnP9S4mshppxzMSxSPauIOJP1cqZIL4JOlUK9NXkrEBH1 c/58gMt7UQ5fmZDKQZuR1lNoKHkIdBGtaul10Fqj7VfrJ+upavjWo2C7ytba48CS Qbhkr1xK9y/NRAUizbOv8SrZ/WB79Dega0hXJQ6WsErBTCQ1XhaEVtiwbR17NHWi 43Lokhhx16dQwlsB4mxjDs7DR+21MRGPtFJbOVXz4aI25vaFAzkWYqEDsY1sV+HL O9f/kJyd+ZCprTDQxFQzEJb9jay3yRcC -----END CERTIFICATE-----Generated at Mon Sep 8 10:05:29 2025 by rpki-client