$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: Ig/PumT60SXSAGR/H9xJhzZGEFda1HH5P+NGD9JvBVc= Subject key identifier: 49:4D:06:2D:53:EE:20:8B:BF:47:ED:72:D4:FE:6F:F4:94:96:71:02 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 28 Signing time: Sat 09 Aug 2025 08:17:14 +0000 Manifest this update: Sat 09 Aug 2025 08:17:13 +0000 Manifest next update: Sat 16 Aug 2025 08:17:13 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: Bj3Dh5P6KEIQWOT8zFMa7mVobvRaJvXId7H+QudzM4g=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Aug 9 08:17:13 2025 GMT Not After : Aug 16 08:17:13 2025 GMT Subject: CN=6897040a-f413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:74:0d:94:17:4a:ab:4a:d8:36:5d:4d:98: 0a:a5:68:e3:82:df:4d:61:9d:44:cb:0b:91:e4:9f: 10:a8:68:e5:c5:26:c6:d3:35:d6:78:93:7c:37:9f: 55:0f:da:09:e2:39:b2:0a:70:17:17:90:38:05:02: be:7f:d0:2e:09:c0:e5:a5:0d:bd:73:5d:a2:b8:fc: 47:de:ab:96:ae:ca:b4:d5:ef:32:a4:ca:93:a4:c5: 17:07:f1:df:dc:e8:9f:c8:26:75:69:bd:83:ff:1d: 4b:a7:af:06:00:7f:6d:60:e1:f1:95:ba:f2:e1:ee: b4:51:9a:b9:d3:3b:6e:d0:0c:d2:74:37:3e:5c:ac: d7:82:5e:df:c0:99:20:bb:d0:e3:a0:8e:6a:be:e2: d4:d6:2c:f8:14:64:e3:86:03:2b:15:c7:10:31:bc: 2e:ab:88:b7:89:b4:ff:ba:b7:ad:3d:32:f0:29:1c: a4:d6:41:c5:4d:29:c4:34:59:8a:b0:d8:b6:e5:f2: e6:f6:c2:ae:b9:4f:42:57:b4:68:8e:e4:0b:84:5f: 4b:92:5c:78:70:ae:a3:80:18:69:1d:f4:cd:ef:7a: cd:f8:08:6f:06:a6:76:9e:1e:92:5d:c4:b2:96:e4: 44:b7:27:92:77:e7:87:44:bc:ee:26:c9:1a:10:a4: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4D:06:2D:53:EE:20:8B:BF:47:ED:72:D4:FE:6F:F4:94:96:71:02 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:19:5d:c8:d5:af:23:74:0d:30:1a:18:af:d7:dc:90:32:22: f9:2e:5a:cd:6e:cd:46:81:4d:d9:fc:67:02:53:5e:fe:fa:17: 8f:25:61:6e:36:98:31:dc:72:38:dc:5d:e3:9e:c5:85:f4:01: 24:3a:0b:da:e1:9f:1b:37:3c:c6:4f:da:6d:af:2a:04:bb:a5: be:07:ea:38:f1:5b:fe:68:b8:ba:7d:44:e8:9b:1b:72:b3:cd: 4a:24:28:3e:1e:da:53:3f:f9:18:aa:76:e6:66:9b:88:05:76: 37:75:62:a7:cb:1c:69:eb:0f:5f:92:34:ec:fe:44:b6:bf:5e: 31:2c:45:9d:f8:22:32:dc:e0:39:24:3c:ad:fd:2b:ce:f5:77: 58:45:13:90:73:82:db:96:dc:ea:64:04:51:18:93:2a:4f:df: aa:1d:c2:20:54:10:81:e0:85:bd:35:f5:b7:74:47:f1:1f:c2: 35:f8:8b:36:da:cf:00:b2:8f:17:e0:31:51:83:c5:0e:48:93: 72:18:c0:e9:0a:be:4e:c0:12:06:26:e9:bd:b0:9e:79:8a:52: 0c:35:d9:fc:4a:26:43:ca:64:b1:92:42:06:2d:ce:15:8e:69: eb:1b:74:af:91:83:0d:9b:64:86:4c:d8:60:de:42:b6:51:f3: 24:bc:7a:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTA4MDkwODE3MTNaFw0yNTA4MTYwODE3MTNaMBgxFjAUBgNV BAMTDTY4OTcwNDBhLWY0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC29XQNlBdKq0rYNl1NmAqlaOOC301hnUTLC5HknxCoaOXFJsbTNdZ4k3w3n1UP 2gniObIKcBcXkDgFAr5/0C4JwOWlDb1zXaK4/Efeq5auyrTV7zKkypOkxRcH8d/c 6J/IJnVpvYP/HUunrwYAf21g4fGVuvLh7rRRmrnTO27QDNJ0Nz5crNeCXt/AmSC7 0OOgjmq+4tTWLPgUZOOGAysVxxAxvC6riLeJtP+6t609MvApHKTWQcVNKcQ0WYqw 2Lbl8ub2wq65T0JXtGiO5AuEX0uSXHhwrqOAGGkd9M3ves34CG8GpnaeHpJdxLKW 5ES3J5J354dEvO4myRoQpNCdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSU0GLVPu IIu/R+1y1P5v9JSWcQIwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMQZXcjVryN0DTAaGK/X3JAyIvkuWs1uzUaBTdn8ZwJTXv76F48lYW42 mDHccjjcXeOexYX0ASQ6C9rhnxs3PMZP2m2vKgS7pb4H6jjxW/5ouLp9ROibG3Kz zUokKD4e2lM/+RiqduZmm4gFdjd1YqfLHGnrD1+SNOz+RLa/XjEsRZ34IjLc4Dkk PK39K871d1hFE5BzgtuW3OpkBFEYkypP36odwiBUEIHghb019bd0R/EfwjX4izba zwCyjxfgMVGDxQ5Ik3IYwOkKvk7AEgYm6b2wnnmKUgw12fxKJkPKZLGSQgYtzhWO aesbdK+Rgw2bZIZM2GDeQrZR8yS8ekE= -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:09 2025 by rpki-client