$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: Rq2Kqnm/ekZmU+QaC6P/1TSHXRIlw3Rkey4yqpsJMrk= Subject key identifier: 2D:B8:BD:27:C7:0E:F0:68:3C:EF:09:5A:07:71:E8:C1:62:29:91:93 Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 0134 Signing time: Sat 09 Aug 2025 04:57:51 +0000 Manifest this update: Sat 09 Aug 2025 04:57:51 +0000 Manifest next update: Sat 16 Aug 2025 04:57:51 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: nATF+q3jMuxSP6cgMY96cPBOQAZA30Vw/nuYXd6qnxk=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: g8Elzlw4tRoXrBliL3a4u/fyR/SHOUoxq/RpKAIAzgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Aug 9 04:57:51 2025 GMT Not After : Aug 16 04:57:51 2025 GMT Subject: CN=6896d54f-f0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:ab:4b:5b:51:76:35:d9:78:03:6f:01:6d: ed:11:4f:17:d2:1c:e5:d9:fb:0c:cc:b3:99:3c:c9: 9b:94:f6:03:a2:0f:9a:ad:07:32:1d:45:fd:e2:7d: a9:58:9c:aa:1e:a9:3b:ab:21:bd:c5:c2:3d:ff:fa: 22:25:be:04:42:3b:f0:2e:7f:72:47:df:dd:54:c1: e5:7e:8e:65:b8:6b:5e:86:58:4c:1c:a6:fc:5c:72: 9d:d2:dc:21:80:7f:f0:c4:6b:fc:d6:b4:db:6f:ff: e6:14:99:42:6f:bd:6e:92:97:e4:cd:6b:84:04:94: db:77:74:97:da:67:eb:55:93:13:10:2c:1c:8e:bb: dd:c5:67:af:b1:9e:8b:3f:93:27:db:5f:24:c1:95: 5a:14:3c:41:28:4d:62:95:4e:60:3d:d1:a6:19:1a: b6:45:e3:d7:fa:90:37:b5:bf:83:2f:dd:b6:f8:62: 9d:88:12:9e:25:63:9b:3d:21:eb:c0:c6:c9:2a:fc: df:02:3b:2e:d4:a0:4e:f8:6c:70:b1:04:ec:17:52: 2d:61:3f:d2:cc:28:a1:34:a1:c8:7b:4b:36:02:c4: c7:08:93:80:d1:00:99:45:a1:88:b5:a6:d9:da:e6: 20:07:78:b8:9b:b5:6a:14:af:35:47:cd:d3:94:34: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B8:BD:27:C7:0E:F0:68:3C:EF:09:5A:07:71:E8:C1:62:29:91:93 X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:40:28:64:94:34:62:f7:12:02:15:43:c5:0c:db:07:a5:8b: c9:1d:81:63:be:c3:f0:69:57:05:2e:09:a0:35:fc:6f:7a:43: 87:c6:9e:79:93:e5:04:72:94:a8:ba:64:a9:ed:60:55:94:be: c2:a3:02:75:d3:ab:84:82:a2:5c:e2:5b:a9:fa:19:28:64:74: fc:1e:29:40:7c:5a:ac:78:56:e3:0d:0f:cd:a4:82:52:f1:bf: 67:ed:ab:d0:b8:de:25:07:55:7c:3c:92:49:cd:78:fc:c6:3e: ea:a3:10:45:d6:a6:d7:df:1f:b4:c1:03:82:f9:65:38:1a:3f: b2:79:3d:28:1b:07:9e:4d:6d:4d:bc:ab:17:76:54:72:60:6f: 0a:9b:61:45:eb:0e:e5:fc:24:48:d7:07:0f:0e:f8:db:3c:ff: 54:af:cf:83:cd:9b:f4:8d:0c:20:fb:a4:e2:b5:f6:c0:b4:98: 3b:b9:a6:4d:58:31:03:33:23:81:69:33:7f:c8:2e:06:cc:c0: 2a:b0:e4:2e:4c:12:88:e4:3b:fe:ca:9b:4b:86:24:ce:0c:35: ef:42:12:20:2c:e1:12:d3:e8:76:27:ef:13:e9:81:2e:40:e9: 67:98:2c:a7:66:6d:ac:b5:fd:35:ff:24:6b:ca:ba:be:94:32: 55:1b:99:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjUwODA5MDQ1NzUxWhcNMjUwODE2MDQ1NzUxWjAYMRYwFAYD VQQDEw02ODk2ZDU0Zi1mMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQOrS1tRdjXZeANvAW3tEU8X0hzl2fsMzLOZPMmblPYDog+arQcyHUX94n2p WJyqHqk7qyG9xcI9//oiJb4EQjvwLn9yR9/dVMHlfo5luGtehlhMHKb8XHKd0twh gH/wxGv81rTbb//mFJlCb71ukpfkzWuEBJTbd3SX2mfrVZMTECwcjrvdxWevsZ6L P5Mn218kwZVaFDxBKE1ilU5gPdGmGRq2RePX+pA3tb+DL922+GKdiBKeJWObPSHr wMbJKvzfAjsu1KBO+GxwsQTsF1ItYT/SzCihNKHIe0s2AsTHCJOA0QCZRaGItabZ 2uYgB3i4m7VqFK81R83TlDSzZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC24vSfH DvBoPO8JWgdx6MFiKZGTMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfQChklDRi9xICFUPFDNsHpYvJHYFjvsPwaVcFLgmgNfxvekOHxp55 k+UEcpSoumSp7WBVlL7CowJ106uEgqJc4lup+hkoZHT8HilAfFqseFbjDQ/NpIJS 8b9n7avQuN4lB1V8PJJJzXj8xj7qoxBF1qbX3x+0wQOC+WU4Gj+yeT0oGweeTW1N vKsXdlRyYG8Km2FF6w7l/CRI1wcPDvjbPP9Ur8+DzZv0jQwg+6TitfbAtJg7uaZN WDEDMyOBaTN/yC4GzMAqsOQuTBKI5Dv+yptLhiTODDXvQhIgLOES0+h2J+8T6YEu QOlnmCynZm2stf01/yRryrq+lDJVG5n4 -----END CERTIFICATE-----Generated at Sat Aug 9 23:10:12 2025 by rpki-client