$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: qRfMqJeFU58sCG2Nb2NYYrI4r6miC245wkRylMpaRjc= Subject key identifier: 88:15:1F:D2:E3:A9:69:42:F8:E7:E7:FA:B2:81:8F:3A:5F:BA:DA:B6 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 0D Signing time: Tue 17 Jun 2025 06:57:19 +0000 Manifest this update: Tue 17 Jun 2025 06:57:18 +0000 Manifest next update: Tue 24 Jun 2025 06:57:18 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: y+ctFpA2/q57WucNkXXGFu0blUk4qRb8h1Aub/F+UrY=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Jun 17 06:57:18 2025 GMT Not After : Jun 24 06:57:18 2025 GMT Subject: CN=685111cf-5e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:4e:3f:fc:d1:25:9a:26:7f:ce:c7:1e:a4: 2b:7d:f2:aa:82:a7:3d:9c:71:97:bb:e2:d6:fd:88: 17:14:36:fe:49:9f:c0:b7:07:b4:bc:c8:e0:f1:cb: 2a:28:0a:af:85:66:a9:17:3d:81:52:fa:09:be:a6: 95:70:eb:bb:82:e0:da:f6:d2:b3:86:7d:45:37:00: 1c:80:ee:a2:13:61:37:80:2b:c4:8f:a0:ab:07:f5: 51:a2:08:5b:59:3d:4f:73:8d:eb:ce:44:45:14:20: be:6c:ed:92:b4:2c:cd:d6:8b:e4:b4:c6:ab:72:f6: 68:ba:82:cb:cc:70:73:ba:82:f6:a0:e5:4a:eb:2d: 8c:36:19:8a:fc:67:bf:10:e9:b2:34:e0:07:10:c6: 96:34:73:57:1a:30:c9:7f:d2:ca:73:a8:93:e4:d3: b5:56:88:55:07:e2:59:3c:a9:c9:92:2a:a4:79:71: b4:95:e7:9e:f1:28:46:ad:db:8f:a6:8a:fe:7c:b0: 51:6a:e2:38:46:0d:a6:95:2e:a6:3a:4b:f0:a5:db: 64:c0:88:bd:46:fa:33:cd:f3:69:71:4d:9d:2e:2e: 73:c3:64:ac:41:13:9c:65:73:65:ce:5a:29:c7:5b: 79:d8:0e:0e:41:5f:5e:14:4c:61:cd:82:59:13:02: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:1F:D2:E3:A9:69:42:F8:E7:E7:FA:B2:81:8F:3A:5F:BA:DA:B6 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4b:c2:f4:38:40:e7:f7:ef:10:01:02:6f:a8:bf:b4:87:b3: 8c:4d:5d:de:1e:f7:12:c5:05:29:1c:47:4c:08:53:17:a4:2c: 01:69:36:9a:3e:1f:cd:ec:7d:bb:c6:7a:f8:00:78:1a:48:cf: 39:64:d0:43:f5:e0:77:f3:d4:5c:be:2f:94:44:c5:50:03:75: 7b:8a:4f:47:d2:77:1e:d8:f3:41:7b:d0:d4:7f:83:6b:f3:1c: 58:65:73:6e:a7:cb:74:96:ac:2c:5b:e3:67:15:4c:ff:cb:cc: 90:43:b7:21:da:7b:2c:00:f1:8b:60:cc:d5:7d:8d:17:e2:af: 6e:37:91:b2:b6:76:35:f9:b8:81:b3:c1:d1:26:37:9f:01:3e: 2f:6f:aa:d7:fd:b1:37:71:39:1b:1e:39:1e:74:5d:6e:e5:ff: 0b:49:b5:b8:b4:0e:d3:4e:a6:73:2a:3b:2c:3a:3e:f3:da:92: 37:9b:8d:a7:7f:82:52:fe:f2:df:ea:d6:fd:3b:0f:46:69:b2: fe:d2:5b:7d:ec:05:66:4b:2f:40:20:b5:37:2c:70:27:ff:fe: b3:53:14:1f:2c:03:c9:f0:e3:3d:c1:4a:13:d3:96:fd:74:23: 67:4e:02:e4:4e:4d:97:f4:85:12:eb:98:0e:92:f1:e9:4f:31: c3:72:95:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTA2MTcwNjU3MThaFw0yNTA2MjQwNjU3MThaMBgxFjAUBgNV BAMTDTY4NTExMWNmLTVlNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8TE4//NElmiZ/zscepCt98qqCpz2ccZe74tb9iBcUNv5Jn8C3B7S8yODxyyoo Cq+FZqkXPYFS+gm+ppVw67uC4Nr20rOGfUU3AByA7qITYTeAK8SPoKsH9VGiCFtZ PU9zjevOREUUIL5s7ZK0LM3Wi+S0xqty9mi6gsvMcHO6gvag5UrrLYw2GYr8Z78Q 6bI04AcQxpY0c1caMMl/0spzqJPk07VWiFUH4lk8qcmSKqR5cbSV557xKEat24+m iv58sFFq4jhGDaaVLqY6S/Cl22TAiL1G+jPN82lxTZ0uLnPDZKxBE5xlc2XOWinH W3nYDg5BX14UTGHNglkTAhlhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiBUf0uOp aUL45+f6soGPOl+62rYwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABVLwvQ4QOf37xABAm+ov7SHs4xNXd4e9xLFBSkcR0wIUxekLAFpNpo+ H83sfbvGevgAeBpIzzlk0EP14Hfz1Fy+L5RExVADdXuKT0fSdx7Y80F70NR/g2vz HFhlc26ny3SWrCxb42cVTP/LzJBDtyHaeywA8YtgzNV9jRfir243kbK2djX5uIGz wdEmN58BPi9vqtf9sTdxORseOR50XW7l/wtJtbi0DtNOpnMqOyw6PvPakjebjad/ glL+8t/q1v07D0Zpsv7SW33sBWZLL0AgtTcscCf//rNTFB8sA8nw4z3BShPTlv10 I2dOAuROTZf0hRLrmA6S8elPMcNylTI= -----END CERTIFICATE-----Generated at Thu Jun 19 05:13:41 2025 by rpki-client