$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: sqZZZSo+Xe6r+/OuF4t50qBFMXl1JpnBsrNCRJlKGM0= Subject key identifier: 10:38:4F:FA:04:EA:30:FF:C0:2B:D6:71:7F:17:0A:8B:A3:17:E7:CC Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 07E7 Signing time: Wed 02 Jul 2025 21:30:22 +0000 Manifest this update: Wed 02 Jul 2025 21:30:21 +0000 Manifest next update: Wed 09 Jul 2025 21:30:21 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: W67Etm19EsCg6u5pNuXre0twbYPp90M2CCsjtKaEids=) 2: DB93E152555111F08C849D70C4F9AE02.roa (hash: 14Mdzz8EOKLcxuuVj8u7Es1SJcx7bFRiFzfBta8Gn5E=) 3: 8E78E710480811F0ACF60C35C4F9AE02.roa (hash: z77md3m8c3h/BOMclCr7QuWWsIwVdVh0PS/50wCIFxI=) 4: 0B936B04519A11F097B33C66C4F9AE02.roa (hash: FH7txRCe8kj9e6keV1BxANASN3zFMeDLRafrq0+1Y0c=) 5: 7A97188E480811F0BF5AC634C4F9AE02.roa (hash: icKx4Ois0//CCRKXA9FyImW/RJbFJcA0Vztw+V1Ne7s=) 6: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: PpCRlK4RP+48kgnoCh7cAO+2OSBAz/la1enRM0wXwgc=) 7: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM=) 8: C9040A8A555111F0B1AA0B5BC4F9AE02.roa (hash: Mg3WMKBIQuAczQ1qeg9Zknh10roooyL/6DjSsEwoaoE=) 9: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: iRd1/ZHW+2xlwhXyNjL/uUSU9QGRKaTGijCT9xr8AHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Jul 2 21:30:21 2025 GMT Not After : Jul 9 21:30:21 2025 GMT Subject: CN=6865a4ee-a3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:4a:9b:f5:2f:52:76:f2:11:48:bd:b4:2a: 67:55:1a:23:6f:39:75:03:36:a4:cf:27:c5:ff:6c: 54:17:cc:41:13:5f:4b:9c:4a:1e:b1:60:36:d5:b9: d9:e6:99:eb:26:1d:79:80:ea:39:ce:f2:33:08:64: c2:f6:f4:62:61:ee:55:46:20:64:23:4a:21:1c:66: 0d:e8:84:e5:63:60:cf:16:22:26:e2:39:c6:3d:31: c5:5e:e0:03:b6:81:ea:08:d1:8b:37:0f:f1:0b:8f: ac:97:76:2b:1e:3e:93:a4:89:97:51:10:4f:dd:78: 62:d8:63:07:42:aa:d0:8f:5d:8e:ab:24:ae:d8:0e: 3b:cc:50:f5:58:a7:bf:0b:a4:90:c1:b0:83:8d:f0: a8:2c:c2:12:eb:5e:e1:5a:31:a4:92:27:da:ee:99: 2f:fa:7b:dd:70:98:76:ec:81:50:83:d3:7f:df:1d: 70:38:79:f0:37:b0:8f:9e:ec:3c:67:c3:7e:f8:c0: e3:7b:98:49:2c:01:c2:72:23:06:12:93:e2:a1:1d: 48:93:6f:9f:51:df:d3:2a:d3:1b:59:ba:3b:84:f2: 90:9c:37:d8:fa:1a:b4:b8:79:92:af:fa:85:79:b5: b3:8a:60:e7:73:b3:4f:b2:e7:e7:76:09:85:fd:83: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:38:4F:FA:04:EA:30:FF:C0:2B:D6:71:7F:17:0A:8B:A3:17:E7:CC X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:2c:7b:98:db:c1:a6:c7:e9:3b:16:58:81:62:8d:dd:95: 32:69:50:4e:e5:30:db:32:4f:24:06:15:17:19:13:36:55:bf: 69:0d:10:4c:d0:80:1f:05:45:8c:d0:ca:fe:b6:70:b4:0e:74: 5d:ae:97:a7:13:ab:49:d3:d2:47:46:90:44:63:da:f8:95:b7: 27:db:24:85:e5:89:2b:cd:59:9e:5a:04:11:10:67:21:56:83: fa:7c:96:24:50:18:e0:e1:fe:89:a0:6d:aa:78:40:1e:0b:81: c8:7f:ef:a8:66:b6:d9:9a:95:8d:89:17:91:53:7d:1f:cc:ba: b1:4d:76:af:aa:9b:f7:c6:c1:28:6e:85:5e:2f:c0:ca:45:21: bc:03:fc:88:01:4d:fa:af:98:ca:61:30:df:30:ef:9f:de:8f: 77:7d:1e:85:0d:3a:0d:40:a9:f3:2f:fc:4b:62:76:5d:af:1b: 6e:18:93:1e:c0:62:b5:34:c1:6e:6c:76:53:3e:a4:2e:c6:d9: b8:e4:f9:76:1a:d0:79:ee:c1:08:00:37:a4:9e:9c:7c:7a:5f: 86:47:f8:6a:98:8d:b3:ca:e5:03:2d:3f:04:6f:af:9d:41:e0: bd:32:98:d3:a7:8b:35:21:d7:3e:0f:8c:1b:92:40:8f:48:fb: f7:c5:92:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwNzAyMjEzMDIxWhcNMjUwNzA5MjEzMDIxWjAYMRYwFAYD VQQDEw02ODY1YTRlZS1hM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz1Km/UvUnbyEUi9tCpnVRojbzl1AzakzyfF/2xUF8xBE19LnEoesWA21bnZ 5pnrJh15gOo5zvIzCGTC9vRiYe5VRiBkI0ohHGYN6ITlY2DPFiIm4jnGPTHFXuAD toHqCNGLNw/xC4+sl3YrHj6TpImXURBP3Xhi2GMHQqrQj12OqySu2A47zFD1WKe/ C6SQwbCDjfCoLMIS617hWjGkkifa7pkv+nvdcJh27IFQg9N/3x1wOHnwN7CPnuw8 Z8N++MDje5hJLAHCciMGEpPioR1Ik2+fUd/TKtMbWbo7hPKQnDfY+hq0uHmSr/qF ebWzimDnc7NPsufndgmF/YPglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA4T/oE 6jD/wCvWcX8XCoujF+fMMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhMix7mNvBpsfpOxZYgWKN3ZUyaVBO5TDbMk8kBhUXGRM2Vb9pDRBM 0IAfBUWM0Mr+tnC0DnRdrpenE6tJ09JHRpBEY9r4lbcn2ySF5YkrzVmeWgQREGch VoP6fJYkUBjg4f6JoG2qeEAeC4HIf++oZrbZmpWNiReRU30fzLqxTXavqpv3xsEo boVeL8DKRSG8A/yIAU36r5jKYTDfMO+f3o93fR6FDToNQKnzL/xLYnZdrxtuGJMe wGK1NMFubHZTPqQuxtm45Pl2GtB57sEIADeknpx8el+GR/hqmI2zyuUDLT8Eb6+d QeC9MpjTp4s1Idc+D4wbkkCPSPv3xZKE -----END CERTIFICATE-----Generated at Thu Jul 3 11:14:32 2025 by rpki-client