$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: rYnI4pJYC6EpWSbVetyuyt1fdZFMlj0FLS9DQmMbItk= Subject key identifier: 28:D9:93:3E:58:2E:DC:CE:39:C6:F0:71:66:35:1E:14:DD:57:59:9C Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: E8 Signing time: Sat 09 Aug 2025 05:48:07 +0000 Manifest this update: Sat 09 Aug 2025 05:48:07 +0000 Manifest next update: Sat 16 Aug 2025 05:48:07 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: uSPMrnfRmA8F1mgg8OUYYMti0NyNveMDM6+Vu65B2YQ=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Aug 9 05:48:07 2025 GMT Not After : Aug 16 05:48:07 2025 GMT Subject: CN=6896e117-e5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:4a:8e:da:40:5d:36:19:35:38:5a:d0:06: c8:ea:1c:dd:b9:22:95:ae:a7:55:db:aa:f0:3c:f8: 83:f4:e5:68:a4:35:e3:2f:25:8e:33:a6:6d:55:55: ba:d3:38:d4:54:7c:f5:96:de:52:cf:f9:60:08:94: 92:56:bc:8d:7f:b5:b7:05:93:e4:5d:8c:db:46:f1: e9:05:bd:94:93:34:6a:94:13:77:f8:fc:4a:d7:dc: 86:e7:06:ec:1c:4d:88:5b:13:f9:b3:62:bb:ee:d3: ee:a8:21:10:4e:20:bc:08:21:3f:60:b9:76:07:6b: 5e:54:fb:8a:5d:f1:a4:25:1b:aa:17:7a:99:c0:b9: e9:79:e8:f1:cd:ee:cc:a2:7b:47:b2:57:71:9b:fa: a6:38:a0:dd:fd:4d:d6:2e:3b:d2:ff:f8:6d:be:d1: 49:1d:b1:2f:fd:c6:76:28:b5:cb:1c:30:93:7d:bb: 81:f8:62:e8:be:fb:15:5d:88:b2:3f:04:ef:2e:e6: b6:d9:6e:dc:8d:a2:e7:d5:8a:33:a7:72:8c:ce:7a: d1:1b:2d:24:96:81:83:33:03:a7:f8:ec:03:a8:ec: 71:83:ec:c7:70:1f:1f:03:5c:9a:05:e0:06:3a:a8: 2d:ae:92:c3:b0:55:dd:8d:bf:aa:d5:78:14:94:e3: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D9:93:3E:58:2E:DC:CE:39:C6:F0:71:66:35:1E:14:DD:57:59:9C X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:de:b3:dd:b6:88:0d:75:87:c6:f1:ff:ea:de:4a:8c:97:49: 3a:a5:5f:e5:57:a3:1d:41:5e:36:7b:3f:98:fe:bd:b8:5f:a8: a7:9f:f4:e2:ea:b1:44:86:ed:20:1c:1a:a7:00:8d:4e:1c:82: a8:01:70:9b:0f:a9:3d:23:e1:c6:1f:4d:2d:d9:27:d5:17:25: 72:4e:d4:75:3d:66:83:ae:66:2b:0a:fe:b3:62:77:91:58:ce: d4:53:00:a5:ef:c7:d1:5d:68:24:b5:69:14:b5:64:e3:ae:7c: b9:21:1e:f7:92:ca:c6:26:64:64:12:7d:c1:67:55:d4:69:6d: f2:da:08:2c:8c:44:d8:ee:18:4e:58:2d:63:c5:1e:a5:36:da: f4:44:1c:77:0b:df:15:f6:87:ba:84:8d:ee:00:8e:c3:e6:b0: f6:fb:0c:b8:64:38:e3:a4:29:fa:a4:01:e7:98:f3:ca:86:b6: 1c:48:cc:75:bc:31:68:0e:dd:49:8d:e4:ea:39:3b:ac:73:15: c8:21:33:34:2a:db:3d:da:49:39:0a:3e:64:ea:b6:72:74:bc: 86:ea:b5:ea:ce:72:45:f0:7e:89:2f:ae:6b:9f:04:1d:83:75: 9a:25:6f:ac:79:ac:64:a8:80:c2:0d:a3:26:16:f3:ff:2d:3f: 5d:6f:96:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwODA5MDU0ODA3WhcNMjUwODE2MDU0ODA3WjAYMRYwFAYD VQQDEw02ODk2ZTExNy1lNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJtKjtpAXTYZNTha0AbI6hzduSKVrqdV26rwPPiD9OVopDXjLyWOM6ZtVVW6 0zjUVHz1lt5Sz/lgCJSSVryNf7W3BZPkXYzbRvHpBb2UkzRqlBN3+PxK19yG5wbs HE2IWxP5s2K77tPuqCEQTiC8CCE/YLl2B2teVPuKXfGkJRuqF3qZwLnpeejxze7M ontHsldxm/qmOKDd/U3WLjvS//htvtFJHbEv/cZ2KLXLHDCTfbuB+GLovvsVXYiy PwTvLua22W7cjaLn1Yozp3KMznrRGy0kloGDMwOn+OwDqOxxg+zHcB8fA1yaBeAG OqgtrpLDsFXdjb+q1XgUlONhmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjZkz5Y LtzOOcbwcWY1HhTdV1mcMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn3rPdtogNdYfG8f/q3kqMl0k6pV/lV6MdQV42ez+Y/r24X6inn/Ti 6rFEhu0gHBqnAI1OHIKoAXCbD6k9I+HGH00t2SfVFyVyTtR1PWaDrmYrCv6zYneR WM7UUwCl78fRXWgktWkUtWTjrny5IR73ksrGJmRkEn3BZ1XUaW3y2ggsjETY7hhO WC1jxR6lNtr0RBx3C98V9oe6hI3uAI7D5rD2+wy4ZDjjpCn6pAHnmPPKhrYcSMx1 vDFoDt1JjeTqOTuscxXIITM0Kts92kk5Cj5k6rZydLyG6rXqznJF8H6JL65rnwQd g3WaJW+seaxkqIDCDaMmFvP/LT9db5bp -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:52 2025 by rpki-client