$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: tsMeFdbTw0zlX1WWTRsXB260TGyq0MwauqIrLAPxpYE= Subject key identifier: 09:C2:D1:9C:A4:67:F8:66:BE:BE:21:71:BD:08:A6:EA:F1:84:12:A4 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: B6 Signing time: Thu 19 Jun 2025 05:18:52 +0000 Manifest this update: Thu 19 Jun 2025 05:18:52 +0000 Manifest next update: Thu 26 Jun 2025 05:18:52 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: cb66vqAOyGHQs5IT4c+67XUpioJJJpkHF4YztyUSFpQ=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Jun 19 05:18:52 2025 GMT Not After : Jun 26 05:18:52 2025 GMT Subject: CN=68539dbc-c7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a3:4c:3e:65:50:01:f3:76:ed:14:83:89:2c: 86:01:96:3c:ef:89:f7:37:39:81:b7:05:62:0c:d8: bd:b8:68:d5:17:66:32:39:42:a2:2c:40:e8:e5:41: f8:71:1a:13:92:a2:0f:eb:0c:6b:ed:d7:f2:16:4a: be:b2:be:13:6d:92:7f:a0:f0:06:c4:a6:02:50:5f: 7d:6a:a9:c3:98:63:a4:a7:fc:10:1a:85:31:1f:1d: 07:8f:be:82:fb:0e:c8:fd:ee:5c:51:b6:5c:fb:7a: 34:8b:93:80:06:03:04:3d:c3:66:dd:54:9e:ef:8b: e4:8d:1f:dd:84:8e:42:de:d1:0a:ec:62:6a:eb:3b: ea:cb:0d:25:bd:57:53:58:23:f3:1b:a0:af:77:a6: 7a:58:8c:55:ae:ec:3d:8c:e3:aa:e9:9c:3a:4b:d2: 7a:db:d3:b2:ca:06:d2:05:6a:41:b0:25:1e:61:60: 45:19:44:fb:f4:c0:46:dd:46:9f:d4:02:83:90:5c: 0b:e5:9f:e5:08:cb:e3:f5:17:40:9c:67:33:e2:d9: b5:ee:42:b2:10:aa:3d:7a:00:58:fa:27:21:b3:dc: 78:29:74:46:83:05:3d:ad:ea:15:63:bf:f3:8c:0b: f1:a0:ff:b6:ef:33:13:39:8a:68:09:66:96:27:5c: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C2:D1:9C:A4:67:F8:66:BE:BE:21:71:BD:08:A6:EA:F1:84:12:A4 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:22:89:b8:f4:69:3b:84:12:e6:ba:4e:70:b2:f6:96:47:45: 11:b5:c0:f8:0f:d7:fe:2d:a5:90:7d:05:0a:c4:2a:ac:50:fb: 0f:6c:e7:c9:b7:24:f1:37:9b:b7:e4:cf:74:3f:a4:97:1a:dc: a1:55:45:01:80:c6:b1:47:0e:52:a7:cd:4c:a6:8e:6c:6b:c9: 48:5a:d5:de:19:15:d1:5e:18:e4:16:45:84:b2:fd:9a:07:35: d4:a5:63:90:f8:6c:d9:01:1e:58:99:7b:64:1d:68:9e:6d:f7: 0b:44:06:01:e2:41:8b:1e:be:12:f8:4c:34:55:7a:5e:84:78: 63:2e:eb:3a:1b:7d:b8:c9:9b:1a:b6:50:18:f1:b7:1d:68:5d: 67:fe:23:00:ac:5a:d7:41:a3:11:84:d0:66:3b:ae:3c:c6:89: ef:52:95:a2:95:94:fb:4b:b2:e0:7b:7f:1c:03:0d:13:6e:1a: 0d:e6:9e:01:31:81:96:78:da:86:c9:d5:f5:1c:66:ea:f1:c1: 05:87:44:64:25:30:b2:15:87:6f:bf:75:f8:0a:b9:13:e5:f2: 73:e0:c0:a7:10:2b:2f:85:f7:41:e3:c3:f1:06:7e:a3:e0:b9: c5:d6:1a:fa:05:b4:d6:73:b4:85:b9:53:8e:01:e6:27:6b:68: 2d:18:ef:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwNjE5MDUxODUyWhcNMjUwNjI2MDUxODUyWjAYMRYwFAYD VQQDEw02ODUzOWRiYy1jN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66NMPmVQAfN27RSDiSyGAZY874n3NzmBtwViDNi9uGjVF2YyOUKiLEDo5UH4 cRoTkqIP6wxr7dfyFkq+sr4TbZJ/oPAGxKYCUF99aqnDmGOkp/wQGoUxHx0Hj76C +w7I/e5cUbZc+3o0i5OABgMEPcNm3VSe74vkjR/dhI5C3tEK7GJq6zvqyw0lvVdT WCPzG6Cvd6Z6WIxVruw9jOOq6Zw6S9J629OyygbSBWpBsCUeYWBFGUT79MBG3Uaf 1AKDkFwL5Z/lCMvj9RdAnGcz4tm17kKyEKo9egBY+ichs9x4KXRGgwU9reoVY7/z jAvxoP+27zMTOYpoCWaWJ1xcOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnC0Zyk Z/hmvr4hcb0IpurxhBKkMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbIom49Gk7hBLmuk5wsvaWR0URtcD4D9f+LaWQfQUKxCqsUPsPbOfJ tyTxN5u35M90P6SXGtyhVUUBgMaxRw5Sp81Mpo5sa8lIWtXeGRXRXhjkFkWEsv2a BzXUpWOQ+GzZAR5YmXtkHWiebfcLRAYB4kGLHr4S+Ew0VXpehHhjLus6G324yZsa tlAY8bcdaF1n/iMArFrXQaMRhNBmO648xonvUpWilZT7S7Lge38cAw0TbhoN5p4B MYGWeNqGydX1HGbq8cEFh0RkJTCyFYdvv3X4CrkT5fJz4MCnECsvhfdB48PxBn6j 4LnF1hr6BbTWc7SFuVOOAeYna2gtGO8a -----END CERTIFICATE-----Generated at Fri Jun 20 12:46:07 2025 by rpki-client