$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: 06h/ruOczPpcrB/uAG9DDTrPTuPwWYF9Rt5vK6RJUP0= Subject key identifier: 53:A6:FB:D1:9A:7F:ED:99:85:E4:6D:A8:8B:85:8D:51:5B:10:FF:40 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: DE Signing time: Fri 05 Sep 2025 05:53:41 +0000 Manifest this update: Fri 05 Sep 2025 05:53:41 +0000 Manifest next update: Fri 12 Sep 2025 05:53:41 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: Rvy2NkW+Rq3mVCR4Dz0/3WGRbR3GwCWYSv54PO9/BXg=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Sep 5 05:53:41 2025 GMT Not After : Sep 12 05:53:41 2025 GMT Subject: CN=68ba7ae5-1882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:c0:a9:89:da:9a:d9:aa:a3:32:9d:4e:83: f1:ca:fa:f1:92:ec:ce:60:85:ab:a2:f2:f4:5c:6e: 3a:66:29:2a:88:a9:96:8d:f8:e2:38:d8:be:cf:73: 94:70:07:b1:ae:ef:f0:1d:c0:20:68:e3:1e:9e:f4: 09:ce:03:18:28:4f:bd:fd:4d:d3:07:be:0a:37:fb: 6f:a3:23:14:dc:4c:88:53:a7:79:5f:af:0c:e0:04: 40:0a:e1:05:ac:92:aa:c6:d9:42:cb:d6:32:c5:15: 9b:c8:2f:a7:2d:82:01:25:e0:20:bd:38:eb:fb:7a: 53:82:ce:a0:cd:0b:96:65:72:6b:5d:2c:ef:c0:a8: f5:c4:b1:a1:50:ec:02:bb:7e:f5:17:72:2e:78:a0: e7:bf:d2:da:b4:b7:e8:19:b1:dd:72:e6:21:1c:ce: 13:29:8f:1d:81:6b:57:e3:43:1c:77:fd:76:a1:c5: 30:35:76:3f:a5:c1:5f:4e:34:1c:2f:df:42:be:d2: 08:50:dc:9d:ab:6e:40:73:0a:be:87:4e:c7:da:9f: 9a:67:48:22:9b:d7:8e:ff:a1:6e:f0:62:da:ee:bf: 88:ba:a2:08:1c:9c:39:d9:24:a2:a3:a4:3d:57:24: 42:f1:79:e5:f8:15:b9:e1:2e:9b:82:08:7d:95:b1: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A6:FB:D1:9A:7F:ED:99:85:E4:6D:A8:8B:85:8D:51:5B:10:FF:40 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:58:2d:e4:e8:ee:91:6e:c1:3b:5b:ad:b6:f3:d2:37:32:cc: 3b:20:4a:65:e7:4e:60:61:85:15:8a:51:ad:0d:7a:22:58:0d: 30:f1:da:53:64:20:82:e1:5c:f6:4e:01:c1:03:80:ab:16:fe: d0:80:72:6f:d7:b0:b3:17:8c:91:f6:76:08:34:9a:3c:aa:5f: dd:75:e5:f7:24:0f:0a:27:e6:24:d0:96:09:79:a8:76:0f:e0: 85:99:e5:6e:04:a9:fd:32:ae:0f:60:7f:0e:6f:f2:e0:2c:16: 71:81:ad:fa:f2:f0:c7:7e:16:69:17:0b:b3:95:2f:62:33:66: 64:bf:20:cd:f7:df:31:82:0f:55:2f:1e:47:57:7e:a9:42:a8: 9c:09:93:6e:bf:41:68:28:06:0d:99:f2:f2:a6:ab:13:81:95: d8:75:3b:30:11:aa:61:bf:5a:81:37:0b:ed:fc:dc:c5:fa:82: 31:5c:80:f2:40:6a:26:60:6b:58:49:5c:a1:63:37:1d:8c:f8: 32:f9:43:a9:79:66:87:6d:53:cf:ed:e6:c0:6b:0b:db:a5:57: dc:12:4c:26:84:c6:4d:c6:7a:2f:3c:08:21:e1:37:d2:83:c4: ed:7e:38:c7:1e:e6:6a:6e:a1:fa:f6:9d:7b:33:d7:75:08:b4: 8c:0c:46:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwOTA1MDU1MzQxWhcNMjUwOTEyMDU1MzQxWjAYMRYwFAYD VQQDEw02OGJhN2FlNS0xODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDPAqYnamtmqozKdToPxyvrxkuzOYIWrovL0XG46ZikqiKmWjfjiONi+z3OU cAexru/wHcAgaOMenvQJzgMYKE+9/U3TB74KN/tvoyMU3EyIU6d5X68M4ARACuEF rJKqxtlCy9YyxRWbyC+nLYIBJeAgvTjr+3pTgs6gzQuWZXJrXSzvwKj1xLGhUOwC u371F3IueKDnv9LatLfoGbHdcuYhHM4TKY8dgWtX40Mcd/12ocUwNXY/pcFfTjQc L99CvtIIUNydq25Acwq+h07H2p+aZ0gim9eO/6Fu8GLa7r+IuqIIHJw52SSio6Q9 VyRC8Xnl+BW54S6bggh9lbGgqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOm+9Ga f+2ZheRtqIuFjVFbEP9AMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOWC3k6O6RbsE7W62289I3Msw7IEpl505gYYUVilGtDXoiWA0w8dpT ZCCC4Vz2TgHBA4CrFv7QgHJv17CzF4yR9nYINJo8ql/ddeX3JA8KJ+Yk0JYJeah2 D+CFmeVuBKn9Mq4PYH8Ob/LgLBZxga368vDHfhZpFwuzlS9iM2ZkvyDN998xgg9V Lx5HV36pQqicCZNuv0FoKAYNmfLypqsTgZXYdTswEaphv1qBNwvt/NzF+oIxXIDy QGomYGtYSVyhYzcdjPgy+UOpeWaHbVPP7ebAawvbpVfcEkwmhMZNxnovPAgh4TfS g8TtfjjHHuZqbqH69p17M9d1CLSMDEb8 -----END CERTIFICATE-----Generated at Sat Sep 6 21:35:56 2025 by rpki-client