$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: I9uFap0MYXe1HgH8gpd0muWgNvFFPFg3/QJoDAtPCo8= Subject key identifier: 52:26:65:A3:BE:A7:F0:68:04:56:B0:FD:44:A3:AC:CB:97:9B:F2:4A Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 2575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 2565 Signing time: Thu 12 Jun 2025 15:43:19 +0000 Manifest this update: Thu 12 Jun 2025 15:43:19 +0000 Manifest next update: Thu 19 Jun 2025 15:43:19 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: +zKUbNmQbMTbPEkfyl01oDjYLTjyG9jx5qv8fM5vLSI=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9589 (0x2575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Jun 12 15:43:19 2025 GMT Not After : Jun 19 15:43:19 2025 GMT Subject: CN=684af597-7023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:3c:8c:94:eb:be:5f:9c:89:f1:78:d6:d2: 97:47:d6:22:69:d8:b9:8a:59:7e:dc:0c:14:45:4c: ae:a2:df:d4:cb:fc:05:5e:99:77:ed:d5:01:9b:00: 19:2f:fd:80:79:81:d2:a5:98:79:d1:80:a0:a5:f4: 85:3c:ad:b1:03:51:f8:3c:4c:e4:45:23:59:38:b2: 65:60:81:cb:6b:1d:b2:cb:f7:40:0b:f9:65:e7:cb: 02:37:42:81:9a:0e:81:72:c3:59:c2:3d:ab:ca:32: 07:c5:30:6c:c3:f7:20:a9:ad:d6:b5:b8:f8:7a:7c: 6d:f7:63:d5:01:f3:3e:2b:ae:73:bc:49:8f:e4:37: 91:ac:6e:6c:3e:93:03:2b:55:18:93:f3:21:61:31: db:56:d8:47:59:0a:4c:83:f2:1a:73:0b:5a:51:5a: a1:eb:cf:b4:3e:d1:5f:f5:39:9d:16:79:51:ae:ac: e9:d9:24:23:8c:63:69:94:67:54:52:03:6a:d8:8e: eb:4a:06:b4:4b:72:9a:7c:58:de:e9:bc:51:44:54: 03:8c:de:03:18:cd:9c:6d:b4:d3:f0:97:4b:0a:36: 5d:d5:a3:76:68:75:bf:0d:2b:0c:68:d5:3d:f3:25: ac:2b:69:9a:5e:f5:ba:68:e0:26:82:1e:89:c3:8e: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:26:65:A3:BE:A7:F0:68:04:56:B0:FD:44:A3:AC:CB:97:9B:F2:4A X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:4a:d2:3e:9f:04:d3:1f:63:b0:b3:02:3c:3f:a9:f8:cb: c7:49:e6:af:99:d2:4c:3c:3e:f7:a8:b6:68:86:e8:8a:38:72: a4:82:e7:81:e9:68:86:dd:dc:c4:da:4f:a7:5f:61:3b:c4:45: 17:f0:23:a0:d1:9f:24:93:b8:7c:a9:6a:4b:01:7a:00:ad:35: 34:23:c6:1f:d1:36:67:c5:34:40:ea:b5:16:76:58:60:04:e7: 5c:00:88:d2:bc:01:27:77:d6:37:67:84:8b:8d:a2:a9:6a:ac: 43:e0:82:f7:50:70:ff:e7:03:a9:bb:40:50:38:08:43:a3:61: 79:86:03:2b:87:f1:94:40:4e:c3:67:b7:5e:7c:0b:60:98:a1: 20:83:ff:0f:1d:6f:43:4b:61:55:0f:43:b1:77:62:20:e1:42: ca:37:aa:33:63:33:4a:e9:ee:fd:7b:d4:c0:7c:1c:6b:6c:a7: ca:c9:c3:13:05:bf:05:46:be:b1:b9:89:b7:37:b0:df:e5:6b: b2:0f:de:df:1c:b0:ba:87:9b:d0:f7:aa:22:df:85:a8:57:3e: a5:4a:27:ed:b7:e9:43:3b:ee:67:a2:d0:5d:af:c7:5a:f0:5a: 77:f3:7f:30:d6:f7:e9:e6:87:54:f3:6e:68:65:d0:af:3f:1c: c1:bf:70:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUwNjEyMTU0MzE5WhcNMjUwNjE5MTU0MzE5WjAYMRYwFAYD VQQDEw02ODRhZjU5Ny03MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypY8jJTrvl+cifF41tKXR9Yiadi5ill+3AwURUyuot/Uy/wFXpl37dUBmwAZ L/2AeYHSpZh50YCgpfSFPK2xA1H4PEzkRSNZOLJlYIHLax2yy/dAC/ll58sCN0KB mg6BcsNZwj2ryjIHxTBsw/cgqa3Wtbj4enxt92PVAfM+K65zvEmP5DeRrG5sPpMD K1UYk/MhYTHbVthHWQpMg/IacwtaUVqh68+0PtFf9TmdFnlRrqzp2SQjjGNplGdU UgNq2I7rSga0S3KafFje6bxRRFQDjN4DGM2cbbTT8JdLCjZd1aN2aHW/DSsMaNU9 8yWsK2maXvW6aOAmgh6Jw46mDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFImZaO+ p/BoBFaw/USjrMuXm/JKMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo/krSPp8E0x9jsLMCPD+p+MvHSeavmdJMPD73qLZohuiKOHKkgueB 6WiG3dzE2k+nX2E7xEUX8COg0Z8kk7h8qWpLAXoArTU0I8Yf0TZnxTRA6rUWdlhg BOdcAIjSvAEnd9Y3Z4SLjaKpaqxD4IL3UHD/5wOpu0BQOAhDo2F5hgMrh/GUQE7D Z7defAtgmKEgg/8PHW9DS2FVD0Oxd2Ig4ULKN6ozYzNK6e79e9TAfBxrbKfKycMT Bb8FRr6xuYm3N7Df5WuyD97fHLC6h5vQ96oi34WoVz6lSiftt+lDO+5notBdr8da 8Fp3838w1vfp5odU825oZdCvPxzBv3AK -----END CERTIFICATE-----Generated at Sat Jun 14 17:31:17 2025 by rpki-client