$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: Ui9HRvoKwYmJi6TJ5vb/pFiGAPYbyOxvBGYExZC4bXA= Subject key identifier: 16:7A:81:24:D4:B2:3E:BC:E6:38:51:22:C8:1B:AF:02:66:46:8E:5A Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: D0 Signing time: Sat 09 Aug 2025 06:03:57 +0000 Manifest this update: Sat 09 Aug 2025 06:03:57 +0000 Manifest next update: Sat 16 Aug 2025 06:03:57 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: I4kEua95DuP/waeYxQim2egV9uHJGMp9TBGE5hBYWEs=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Aug 9 06:03:57 2025 GMT Not After : Aug 16 06:03:57 2025 GMT Subject: CN=6896e4cd-807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:70:92:2a:f3:af:6b:a4:b8:3c:a7:66:1a: 07:a7:bf:e2:27:0c:ac:8f:b9:1a:92:d4:9b:88:bd: 42:7f:75:67:2c:35:f9:53:ac:e0:5a:13:98:17:63: ae:bd:1f:49:b7:81:e8:ab:86:88:92:1b:83:d6:9b: 80:52:d9:70:74:7e:c4:3e:ca:d9:14:ba:16:18:13: 8f:b4:31:1b:1f:78:9c:04:d6:e1:81:36:43:2e:7c: 05:41:3c:b8:74:13:8c:f7:5c:64:ff:d3:71:d1:dc: a1:2c:0f:12:2f:75:8a:a8:d3:ce:87:86:11:66:20: b2:50:84:ff:ab:8f:a0:f6:e1:ec:46:e7:52:98:53: b2:e6:0a:13:1d:26:2c:3b:80:1e:a3:cc:96:da:4b: 61:1f:59:ca:77:4d:72:6d:db:8c:0a:19:40:77:1f: 87:b9:47:c0:30:f7:58:12:bf:be:f4:1b:02:2a:5a: c5:3c:4b:82:d8:74:e5:91:04:55:70:48:c7:69:77: d8:91:f3:f1:4d:7e:4b:09:83:a1:6c:5c:5f:5c:56: c2:26:94:9b:ef:ec:07:c7:7c:a1:c3:38:ab:fa:dc: bf:b4:3c:da:75:a9:1e:a7:e6:ae:99:fc:3a:54:5d: 5e:3e:5d:e1:f8:9f:bf:79:d8:4e:2d:f9:34:dc:3f: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7A:81:24:D4:B2:3E:BC:E6:38:51:22:C8:1B:AF:02:66:46:8E:5A X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a3:6c:07:fd:ce:3d:63:0c:6e:f5:37:72:c8:6e:d8:2e:5a: 0a:bd:d0:4e:95:1d:3f:98:01:ff:85:d9:ee:e4:66:c0:d1:b3: cd:d8:5a:02:fc:c1:84:bd:aa:fb:f6:43:54:42:fc:ad:cc:e9: 99:0e:9d:ff:93:fe:a0:3b:fa:6a:ec:f9:8a:eb:03:02:4b:90: fb:6c:d9:f5:d2:19:30:bf:9d:8b:ed:41:70:4c:95:3a:a4:dc: da:52:6a:0b:f8:9e:bc:8f:be:c2:34:4f:1a:aa:59:77:98:9b: 47:18:e4:cb:61:9b:7a:c9:62:dd:2e:aa:be:fd:4d:a9:a4:8c: 9e:67:fa:86:74:a6:80:3c:9a:b6:cc:11:da:29:6e:f4:52:fe: 96:b1:8c:5e:7f:79:1e:fd:16:74:2f:15:ee:fd:52:fc:d7:26: 49:96:ea:4f:a6:eb:53:83:a1:c2:92:11:f9:53:1e:4e:f4:55: b0:12:05:7f:7d:a4:55:c1:e6:a2:84:54:4d:06:8b:c9:b3:fd: d4:07:79:d1:cb:1e:f1:91:fc:9e:5e:72:be:15:01:e0:6e:2c: 0a:73:75:c8:11:64:f6:ab:bc:ef:0f:20:a5:41:07:13:2d:88: a5:4c:50:59:49:97:4a:25:33:45:5d:a9:0f:b3:ac:66:cd:2f: fa:f0:80:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwODA5MDYwMzU3WhcNMjUwODE2MDYwMzU3WjAYMRYwFAYD VQQDEw02ODk2ZTRjZC04MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOtwkirzr2ukuDynZhoHp7/iJwysj7kaktSbiL1Cf3VnLDX5U6zgWhOYF2Ou vR9Jt4Hoq4aIkhuD1puAUtlwdH7EPsrZFLoWGBOPtDEbH3icBNbhgTZDLnwFQTy4 dBOM91xk/9Nx0dyhLA8SL3WKqNPOh4YRZiCyUIT/q4+g9uHsRudSmFOy5goTHSYs O4Aeo8yW2kthH1nKd01ybduMChlAdx+HuUfAMPdYEr++9BsCKlrFPEuC2HTlkQRV cEjHaXfYkfPxTX5LCYOhbFxfXFbCJpSb7+wHx3yhwzir+ty/tDzadakep+aumfw6 VF1ePl3h+J+/edhOLfk03D9W3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZ6gSTU sj685jhRIsgbrwJmRo5aMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALo2wH/c49Ywxu9TdyyG7YLloKvdBOlR0/mAH/hdnu5GbA0bPN2FoC /MGEvar79kNUQvytzOmZDp3/k/6gO/pq7PmK6wMCS5D7bNn10hkwv52L7UFwTJU6 pNzaUmoL+J68j77CNE8aqll3mJtHGOTLYZt6yWLdLqq+/U2ppIyeZ/qGdKaAPJq2 zBHaKW70Uv6WsYxef3ke/RZ0LxXu/VL81yZJlupPputTg6HCkhH5Ux5O9FWwEgV/ faRVweaihFRNBovJs/3UB3nRyx7xkfyeXnK+FQHgbiwKc3XIEWT2q7zvDyClQQcT LYilTFBZSZdKJTNFXakPs6xmzS/68IC4 -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:08 2025 by rpki-client