$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: J2Loe+L4oyP8qXe7HiRXfk00IuKuGNOERRroiYpAUsE= Subject key identifier: 82:78:21:8D:EB:E4:BE:DA:B4:D6:CC:39:80:26:77:8B:AA:FE:8F:63 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: C5 Signing time: Sat 19 Jul 2025 05:59:11 +0000 Manifest this update: Sat 19 Jul 2025 05:59:11 +0000 Manifest next update: Sat 26 Jul 2025 05:59:11 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 4mfRu69T8mvq7CrZ6Zv5cCSJZKLCprgVIHH4vc+tU9I=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Jul 19 05:59:11 2025 GMT Not After : Jul 26 05:59:11 2025 GMT Subject: CN=687b342f-bf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b0:59:cd:cb:5b:98:4d:04:0b:e3:60:a3:69: 52:16:9d:12:08:f5:9a:29:c0:51:b6:7d:b9:a8:5d: 4c:42:0b:73:d4:0d:9f:51:10:4d:7d:84:41:a3:83: 5a:24:87:b9:1a:4f:90:38:72:2e:43:6b:c0:20:4a: d3:f9:d1:c8:02:cc:9f:2a:9b:38:fe:5c:74:a2:cd: 77:4a:38:f1:5f:1f:1f:48:69:db:86:b9:89:c6:6a: e9:fa:6d:90:7d:89:91:67:93:89:77:7e:1b:39:72: fc:0f:13:8d:e5:7e:37:8f:b5:6a:7c:cb:dc:f9:95: 92:a6:5f:50:16:72:5b:c6:4f:a1:d3:15:1d:8d:10: b4:1a:69:1d:c5:35:6f:af:97:2e:e6:18:8c:fe:c8: 67:7d:70:ca:1e:c8:2f:df:4e:ef:d3:49:cb:2d:d6: 56:db:f3:b8:89:23:76:ff:87:53:0d:a2:c0:c4:6f: 2b:89:16:d7:f5:7c:a8:43:fc:69:6b:95:d6:5a:8e: b7:d6:68:57:50:c2:b2:42:23:ea:f6:6f:05:62:5c: 09:a5:8d:8d:8d:cd:9f:e7:f7:8f:d7:01:63:62:90: a9:be:20:fe:5b:db:6c:37:70:25:db:1e:b1:8f:fb: 1e:cf:ac:1d:2f:42:db:d0:56:d0:c5:db:37:7f:c5: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:78:21:8D:EB:E4:BE:DA:B4:D6:CC:39:80:26:77:8B:AA:FE:8F:63 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:d4:7a:1f:0f:d8:a7:9e:22:ec:db:25:7a:a2:2e:c0:f3: 98:8e:56:28:a4:3b:6e:ea:58:32:4a:fe:cc:93:8e:56:e7:30: 40:29:d1:68:c9:c8:de:c7:f0:0e:7c:16:1a:3b:e5:b6:7b:40: 86:2e:8d:28:fd:25:2c:02:3d:a6:14:fe:e1:b9:b8:87:5b:d4: 44:95:c7:0b:70:1d:f6:8d:0c:5c:61:82:d8:6b:01:3f:3c:87: b2:34:20:80:ef:7f:b9:25:99:82:4c:2a:af:5a:ab:7c:5c:5e: 79:5f:85:50:14:18:15:e0:1f:91:b6:d6:0a:dc:cd:38:54:3f: da:38:60:63:66:d5:c5:98:e1:53:bc:23:a1:c1:a4:97:5d:f9: 92:79:ad:32:32:81:8c:92:f9:10:a5:cf:ac:26:42:f8:f1:4b: 92:41:a1:90:81:29:e4:03:4d:ff:b8:db:ec:1f:17:c8:81:60: b3:3e:d8:d9:81:d4:d3:0a:41:cf:a3:d7:a0:c4:1b:68:c8:d2: 39:42:d7:d1:cd:16:60:e3:a5:be:8c:21:b0:fd:83:8a:7e:a9: 33:53:96:f2:91:f4:1f:f2:b4:db:ec:54:8a:85:2d:20:e8:a3: 0f:ed:1e:19:f6:3c:30:4f:99:d6:dc:ee:fc:f0:05:78:9e:b7: 2d:4c:6a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwNzE5MDU1OTExWhcNMjUwNzI2MDU1OTExWjAYMRYwFAYD VQQDEw02ODdiMzQyZi1iZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrBZzctbmE0EC+Ngo2lSFp0SCPWaKcBRtn25qF1MQgtz1A2fURBNfYRBo4Na JIe5Gk+QOHIuQ2vAIErT+dHIAsyfKps4/lx0os13SjjxXx8fSGnbhrmJxmrp+m2Q fYmRZ5OJd34bOXL8DxON5X43j7VqfMvc+ZWSpl9QFnJbxk+h0xUdjRC0GmkdxTVv r5cu5hiM/shnfXDKHsgv307v00nLLdZW2/O4iSN2/4dTDaLAxG8riRbX9XyoQ/xp a5XWWo631mhXUMKyQiPq9m8FYlwJpY2Njc2f5/eP1wFjYpCpviD+W9tsN3Al2x6x j/sez6wdL0Lb0FbQxds3f8WmywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ4IY3r 5L7atNbMOYAmd4uq/o9jMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp9dR6Hw/Yp54i7NsleqIuwPOYjlYopDtu6lgySv7Mk45W5zBAKdFo ycjex/AOfBYaO+W2e0CGLo0o/SUsAj2mFP7hubiHW9RElccLcB32jQxcYYLYawE/ PIeyNCCA73+5JZmCTCqvWqt8XF55X4VQFBgV4B+RttYK3M04VD/aOGBjZtXFmOFT vCOhwaSXXfmSea0yMoGMkvkQpc+sJkL48UuSQaGQgSnkA03/uNvsHxfIgWCzPtjZ gdTTCkHPo9egxBtoyNI5QtfRzRZg46W+jCGw/YOKfqkzU5bykfQf8rTb7FSKhS0g 6KMP7R4Z9jwwT5nW3O788AV4nrctTGpx -----END CERTIFICATE-----Generated at Sun Jul 20 22:54:46 2025 by rpki-client