$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: 5xY50xfWq9ROYcgFjgALMyZjE0jqYBodun6Qe9Aup0g= Subject key identifier: B2:B8:92:83:51:05:3F:92:D8:B9:5C:31:D4:51:43:87:32:E9:17:01 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01C4 Signing time: Tue 05 Aug 2025 03:23:29 +0000 Manifest this update: Tue 05 Aug 2025 03:23:29 +0000 Manifest next update: Tue 12 Aug 2025 03:23:29 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: nKgiMAXQOY87YyBEl1xui7Heu/ArG2mivmGzSnBDE1k=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Aug 5 03:23:29 2025 GMT Not After : Aug 12 03:23:29 2025 GMT Subject: CN=68917931-9fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:b1:e6:3f:ab:7e:c8:f6:eb:7d:43:d1:e9: b2:73:fa:fd:af:70:2f:b0:57:ea:7a:26:db:8f:0e: 95:29:a3:cf:ab:a0:09:34:4f:e2:05:69:dd:d2:9f: 57:fc:4c:df:a8:5c:44:39:fc:ba:2a:08:23:a4:77: a9:87:e3:33:40:ce:cd:74:fb:3f:57:f0:19:42:42: 9f:68:4a:6a:58:71:7e:62:4b:1f:e3:27:70:69:3b: 76:98:ab:d2:33:47:e8:0b:58:f4:ef:1b:ac:88:d4: 10:ab:99:a4:68:ec:04:47:bb:2a:36:5b:52:37:10: 9e:f2:b3:04:19:fc:d8:03:7e:66:4e:ca:c1:dc:ae: f7:93:8c:ae:91:fa:fb:03:78:bd:9f:0b:05:27:f4: a6:51:e8:0d:e3:13:fc:95:2b:4d:31:73:1f:62:f6: 25:a5:64:b5:19:aa:4c:e0:6e:cc:f1:21:e4:fd:0e: 47:e5:7b:9f:48:14:b1:07:1a:ca:0b:03:0b:a5:f6: 6d:13:ba:26:67:b2:a8:83:6a:b4:97:b7:90:68:96: 2b:db:43:18:64:0e:45:00:1e:df:6a:14:59:1d:13: 2a:9d:1e:68:2c:77:1a:c9:7d:8c:e0:89:30:e2:ac: d4:12:7d:85:25:1e:ad:c8:41:a1:da:b7:6e:b2:44: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:92:83:51:05:3F:92:D8:B9:5C:31:D4:51:43:87:32:E9:17:01 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:01:4c:fd:fb:aa:ec:54:21:f5:03:67:df:94:1b:b6:0d:a8: d9:9a:a4:59:19:7b:f4:20:51:8d:53:c4:f3:84:b4:b9:cf:3d: 3a:37:e0:c9:f2:0d:49:b7:49:db:21:8a:32:6c:c4:ff:8b:bf: a4:b7:46:e2:ae:64:86:86:cf:8a:09:17:b0:b8:c4:5f:e8:ae: 6d:29:d8:f5:8b:6e:54:56:ab:a5:56:62:db:ed:85:bf:07:64: 57:9f:ad:83:00:12:d9:a0:93:28:bf:91:60:63:27:56:7f:95: 37:9c:5d:54:17:c5:92:81:cb:03:f3:3d:ac:42:79:fe:a8:48: ea:c5:36:e7:80:a7:cc:ec:9f:c6:02:f0:dd:20:c0:a2:70:19: e1:f6:8b:18:eb:d9:7c:a3:56:66:c5:b2:a8:8b:36:f1:90:a4: 33:e4:57:69:0e:e9:4e:51:3d:d6:ef:0b:a0:93:b3:70:2d:99: 4d:40:3c:61:de:57:0f:69:06:9a:46:1b:c4:69:b6:74:2f:9d: cf:d5:83:72:a4:86:6d:b5:ed:ee:5d:fe:1a:ad:1b:14:08:37: 7f:b3:18:00:dd:23:26:4d:d6:b7:8d:83:88:46:27:94:7a:71: 29:ba:7c:2f:1b:73:48:63:01:d7:2e:3d:3b:cd:18:51:b6:cd: a6:ec:8d:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwODA1MDMyMzI5WhcNMjUwODEyMDMyMzI5WjAYMRYwFAYD VQQDEw02ODkxNzkzMS05ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jmx5j+rfsj2631D0emyc/r9r3AvsFfqeibbjw6VKaPPq6AJNE/iBWnd0p9X /EzfqFxEOfy6KggjpHeph+MzQM7NdPs/V/AZQkKfaEpqWHF+Yksf4ydwaTt2mKvS M0foC1j07xusiNQQq5mkaOwER7sqNltSNxCe8rMEGfzYA35mTsrB3K73k4yukfr7 A3i9nwsFJ/SmUegN4xP8lStNMXMfYvYlpWS1GapM4G7M8SHk/Q5H5XufSBSxBxrK CwMLpfZtE7omZ7Kog2q0l7eQaJYr20MYZA5FAB7fahRZHRMqnR5oLHcayX2M4Ikw 4qzUEn2FJR6tyEGh2rduskRAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK4koNR BT+S2LlcMdRRQ4cy6RcBMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyAUz9+6rsVCH1A2fflBu2DajZmqRZGXv0IFGNU8TzhLS5zz06N+DJ 8g1Jt0nbIYoybMT/i7+kt0birmSGhs+KCRewuMRf6K5tKdj1i25UVqulVmLb7YW/ B2RXn62DABLZoJMov5FgYydWf5U3nF1UF8WSgcsD8z2sQnn+qEjqxTbngKfM7J/G AvDdIMCicBnh9osY69l8o1ZmxbKoizbxkKQz5FdpDulOUT3W7wugk7NwLZlNQDxh 3lcPaQaaRhvEabZ0L53P1YNypIZtte3uXf4arRsUCDd/sxgA3SMmTda3jYOIRieU enEpunwvG3NIYwHXLj07zRhRts2m7I3N -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:25 2025 by rpki-client