$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: 1s9v0in2dVa1DuokWgxjS10lrQECuylwqQeuLV1f5Hc= Subject key identifier: 71:A1:AF:39:20:AD:0C:67:7A:16:2E:6F:CA:A4:CE:1A:22:DB:22:62 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01AA Signing time: Sun 15 Jun 2025 02:28:27 +0000 Manifest this update: Sun 15 Jun 2025 02:28:27 +0000 Manifest next update: Sun 22 Jun 2025 02:28:27 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 24ZHJhLT0feG8nVvHvxsPttM+lbA5+R1MYJYWgZi8JA=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Jun 15 02:28:27 2025 GMT Not After : Jun 22 02:28:27 2025 GMT Subject: CN=684e2fcb-daa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:2d:49:58:ef:98:71:76:07:54:a1:84:3e: 67:5b:41:38:8d:34:a4:ef:2d:43:a5:73:dc:8b:13: e7:39:13:5e:32:57:86:65:a1:62:d6:45:da:25:82: 5b:dc:67:d8:0a:e9:6d:06:41:96:67:95:88:8f:15: 1e:68:b0:ae:44:73:72:2a:56:9d:3c:65:1f:40:01: 2c:a9:d0:d2:fa:bb:3c:d7:93:1a:54:37:06:d1:b0: 37:a1:01:53:59:12:bf:68:60:4f:75:82:c6:26:a2: eb:32:22:33:f8:72:5d:64:3f:69:c4:6b:e6:d3:95: ab:3e:57:e6:db:b1:67:c7:a8:b1:fe:4d:6f:1e:e8: 47:0c:95:f1:2d:01:47:7c:34:6f:02:4f:32:84:15: a0:c9:71:03:55:a4:03:3d:20:bf:2d:54:43:71:b0: 53:2d:c9:de:71:b7:69:51:76:e4:50:2b:66:61:30: 10:5e:28:44:80:21:8e:56:df:91:99:d2:8a:d8:02: 93:db:43:d0:ac:f9:bb:c8:4d:22:8a:40:7a:11:92: 20:7e:d1:0c:66:c6:cd:b0:52:aa:c6:d1:ae:d8:ca: 44:1b:84:f6:13:a1:9b:e4:f5:fb:54:02:ce:15:dc: e4:a1:f9:f2:9c:51:9b:f9:00:41:1e:20:5f:12:3a: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A1:AF:39:20:AD:0C:67:7A:16:2E:6F:CA:A4:CE:1A:22:DB:22:62 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:53:c2:e0:cb:00:08:1c:1b:b4:b0:b8:6d:79:65:c8:ed:53: b5:a6:64:07:c0:bc:be:0c:2f:6b:d9:d3:2f:5e:0b:84:c4:ca: 38:7b:ca:05:7b:1f:19:a3:cb:ac:d9:fe:09:ce:53:9a:14:54: 17:29:bf:2b:fd:93:8b:1b:67:d2:88:79:e5:de:0f:3b:f7:50: a7:36:2e:d6:37:ef:7c:2b:30:3c:4c:d6:bb:ee:4b:33:e8:45: 56:17:d1:13:01:46:b9:ed:27:94:a7:7b:2a:30:9a:1f:fb:fd: 84:3e:12:60:f2:01:bd:c9:90:43:29:0f:aa:20:6b:32:a4:e7: 06:6e:89:6a:b5:4b:6a:cb:63:f7:b3:ff:3c:8d:3f:00:51:16: 24:0d:08:b0:84:b5:97:f0:93:7c:53:92:0f:e8:48:0c:06:fa: 48:dd:d2:49:3e:10:75:8c:69:20:de:79:23:a1:3c:8f:df:09: 0f:60:ac:1d:05:9b:e5:ad:91:17:4f:f7:11:78:fc:4b:0d:68: 12:fa:02:aa:e1:ca:f7:4d:c7:7d:df:60:0d:46:73:91:82:a2: 51:f3:2a:ab:41:e4:9e:32:4f:51:bb:9d:cc:c1:73:06:08:d7: 23:2a:5e:4c:d3:ae:a4:30:e2:d5:97:4e:a2:7b:54:3e:4b:76: 3a:51:7f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwNjE1MDIyODI3WhcNMjUwNjIyMDIyODI3WjAYMRYwFAYD VQQDEw02ODRlMmZjYi1kYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTgtSVjvmHF2B1ShhD5nW0E4jTSk7y1DpXPcixPnORNeMleGZaFi1kXaJYJb 3GfYCultBkGWZ5WIjxUeaLCuRHNyKladPGUfQAEsqdDS+rs815MaVDcG0bA3oQFT WRK/aGBPdYLGJqLrMiIz+HJdZD9pxGvm05WrPlfm27Fnx6ix/k1vHuhHDJXxLQFH fDRvAk8yhBWgyXEDVaQDPSC/LVRDcbBTLcnecbdpUXbkUCtmYTAQXihEgCGOVt+R mdKK2AKT20PQrPm7yE0iikB6EZIgftEMZsbNsFKqxtGu2MpEG4T2E6Gb5PX7VALO FdzkofnynFGb+QBBHiBfEjoWyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGhrzkg rQxnehYub8qkzhoi2yJiMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3U8LgywAIHBu0sLhteWXI7VO1pmQHwLy+DC9r2dMvXguExMo4e8oF ex8Zo8us2f4JzlOaFFQXKb8r/ZOLG2fSiHnl3g8791CnNi7WN+98KzA8TNa77ksz 6EVWF9ETAUa57SeUp3sqMJof+/2EPhJg8gG9yZBDKQ+qIGsypOcGbolqtUtqy2P3 s/88jT8AURYkDQiwhLWX8JN8U5IP6EgMBvpI3dJJPhB1jGkg3nkjoTyP3wkPYKwd BZvlrZEXT/cRePxLDWgS+gKq4cr3Tcd932ANRnORgqJR8yqrQeSeMk9Ru53MwXMG CNcjKl5M066kMOLVl06ie1Q+S3Y6UX+3 -----END CERTIFICATE-----Generated at Mon Jun 16 18:50:37 2025 by rpki-client