$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: up7+Rt7o/YPJD6K8KaWWPzqRgbXYkwecNRmwDgA5ct8= Subject key identifier: 7E:FE:A9:F7:F7:76:85:35:A6:D1:5D:DF:A2:6E:FF:0D:55:2F:CD:DD Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 0143 Signing time: Sun 07 Sep 2025 04:49:28 +0000 Manifest this update: Sun 07 Sep 2025 04:49:27 +0000 Manifest next update: Sun 14 Sep 2025 04:49:27 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: xtH8eoLUca4TJWHPGqBi8glmWH1m4/VeL/PyYaqH/dU=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: g8Elzlw4tRoXrBliL3a4u/fyR/SHOUoxq/RpKAIAzgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Sep 7 04:49:27 2025 GMT Not After : Sep 14 04:49:27 2025 GMT Subject: CN=68bd0ed7-023e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:4d:c1:f8:bf:3f:ee:eb:2d:88:99:1d:ac: d6:8d:d9:dc:0e:4e:72:b9:c5:39:0a:ce:cb:86:af: 2a:88:87:14:ec:79:0f:7d:c8:b3:2d:b6:f9:06:6e: 60:76:1b:4e:e0:b4:e2:0f:ef:4c:2c:ad:6f:1b:f7: 2e:8a:a8:5c:04:0f:ce:9f:d0:9f:2f:c7:6a:b2:89: f2:69:38:ea:6f:8e:f7:08:25:a6:ed:60:2f:59:62: 3d:87:f6:52:67:bc:01:b6:cb:c6:4f:04:db:01:3a: aa:53:87:76:54:3e:bc:d4:d3:fb:51:71:21:9d:fd: 0c:80:70:a4:3a:62:25:7b:13:c8:32:de:d1:79:e6: f3:8f:f7:a9:d7:d8:46:73:67:53:78:57:ba:d7:7f: e8:77:b7:12:57:8b:eb:46:21:c3:42:35:7e:78:0c: 27:5c:60:6e:b4:eb:20:64:c7:14:01:ad:04:e7:d3: e8:05:33:a0:d0:77:a5:16:cc:db:f8:76:e5:18:3a: 1d:62:fa:cc:28:08:e1:fc:94:0e:ef:c8:9d:53:82: a2:5f:ae:a3:f2:24:32:02:5a:20:d7:ec:c1:7e:72: 3f:28:99:ef:14:7e:b7:a1:2f:f7:93:33:40:87:60: 41:0a:5e:54:53:8e:cc:62:99:2b:2c:37:28:6b:b1: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FE:A9:F7:F7:76:85:35:A6:D1:5D:DF:A2:6E:FF:0D:55:2F:CD:DD X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:06:7a:55:5b:ce:bf:fe:1c:21:a7:76:7a:ac:2f:b9:d3: 60:84:c9:21:62:26:46:36:0e:5b:98:96:9a:72:3b:a3:9b:40: ec:e1:c0:bb:03:e2:a5:92:3b:4c:94:7a:73:83:32:df:31:92: f1:2c:85:15:20:c7:0d:d1:97:c6:74:33:d4:ea:87:85:5c:9b: 84:49:00:1d:d8:0d:29:b5:2d:21:3a:47:cc:d2:64:82:88:1e: 22:58:6d:be:94:a0:90:ae:33:6f:91:04:04:04:99:3a:df:cb: 39:51:d4:26:fb:8f:6d:c4:62:ab:2b:84:8b:b4:ff:b6:2f:2b: cc:47:37:85:aa:fb:cc:28:5d:1d:6f:b3:27:c5:da:b4:d1:00: c6:81:4e:36:a8:f3:2d:cc:c4:53:6c:52:3a:d1:5f:04:5f:80: d5:d5:80:8a:95:2e:27:af:e3:b7:bf:99:ed:dd:76:96:36:6a: f7:37:66:83:64:f8:1f:23:7a:52:c1:28:94:e1:6a:51:03:5f: 88:b8:b1:db:3f:67:5d:92:f7:c2:59:c9:0a:c9:7d:e2:94:b6: f2:67:70:29:51:d4:4d:c2:b4:9d:b8:d7:8f:fe:1d:00:90:05: 79:e8:4d:4c:cb:2a:35:e5:2a:45:3d:7e:50:4b:b3:8c:b3:20: 30:1d:33:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjUwOTA3MDQ0OTI3WhcNMjUwOTE0MDQ0OTI3WjAYMRYwFAYD VQQDEw02OGJkMGVkNy0wMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20ZNwfi/P+7rLYiZHazWjdncDk5yucU5Cs7Lhq8qiIcU7HkPfcizLbb5Bm5g dhtO4LTiD+9MLK1vG/cuiqhcBA/On9CfL8dqsonyaTjqb473CCWm7WAvWWI9h/ZS Z7wBtsvGTwTbATqqU4d2VD681NP7UXEhnf0MgHCkOmIlexPIMt7Reebzj/ep19hG c2dTeFe613/od7cSV4vrRiHDQjV+eAwnXGButOsgZMcUAa0E59PoBTOg0HelFszb +HblGDodYvrMKAjh/JQO78idU4KiX66j8iQyAlog1+zBfnI/KJnvFH63oS/3kzNA h2BBCl5UU47MYpkrLDcoa7EdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7+qff3 doU1ptFd36Ju/w1VL83dMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIvAZ6VVvOv/4cIad2eqwvudNghMkhYiZGNg5bmJaacjujm0Ds4cC7 A+KlkjtMlHpzgzLfMZLxLIUVIMcN0ZfGdDPU6oeFXJuESQAd2A0ptS0hOkfM0mSC iB4iWG2+lKCQrjNvkQQEBJk638s5UdQm+49txGKrK4SLtP+2LyvMRzeFqvvMKF0d b7Mnxdq00QDGgU42qPMtzMRTbFI60V8EX4DV1YCKlS4nr+O3v5nt3XaWNmr3N2aD ZPgfI3pSwSiU4WpRA1+IuLHbP2ddkvfCWckKyX3ilLbyZ3ApUdRNwrSduNeP/h0A kAV56E1Myyo15SpFPX5QS7OMsyAwHTM5 -----END CERTIFICATE-----Generated at Tue Sep 9 05:27:08 2025 by rpki-client