$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: tewKZQ6iBGicui1hU7xIK48UOZVJIl1OIhSd44FBkoY= Subject key identifier: A0:D7:89:C9:C7:48:7A:AF:BD:23:3E:AE:3B:F5:F0:C2:C8:BF:46:9C Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 0837 Signing time: Sat 18 Oct 2025 22:20:32 +0000 Manifest this update: Sat 18 Oct 2025 22:20:31 +0000 Manifest next update: Sat 25 Oct 2025 22:20:31 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: SVOLxQksjunBtTb/cdVmXHgS21hRKx+iYt7CgmKGAVo=) 2: 0B936B04519A11F097B33C66C4F9AE02.roa (hash: gg5UClknykBKSgMUWw9KgKhcxVJlFsp4nQm3k026P78=) 3: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: UUEsJz/WQSBHmwrRY/8iQ6JdsqT1T0sucZ71LaxIHRw=) 4: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c=) 5: F539311C7DA011F08A71610EC4F9AE02.roa (hash: rIaR04bxVatwfOhoJKTzdjL/92gsYJAaafix9cN000U=) 6: C32677AA984111F0A8CC3773C4F9AE02.roa (hash: zvt5PKHfXMN6X7f4V6clzwtgf+Vm+WQejAV68riLY3A=) 7: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: c/n6DX8r7nJjVUXwPVxV5kzEZ7bIPC1UqZ86XGA9if0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Oct 18 22:20:31 2025 GMT Not After : Oct 25 22:20:31 2025 GMT Subject: CN=68f412af-7b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:b8:d8:02:1b:ac:4f:ac:a4:40:2e:6c:7c: 93:20:2f:a0:97:b6:91:bd:fb:7b:77:9e:dc:29:05: 69:e7:e2:00:09:d5:ad:0f:ae:6b:77:ee:75:bf:e8: 1b:18:17:6c:5b:dd:71:ba:d6:98:f2:83:9b:19:ed: cd:5b:f1:d4:0d:f6:b5:4f:8c:71:5c:44:40:72:6e: 0b:53:e9:a1:1c:1f:56:d3:63:0b:ba:ba:48:e2:3f: 1a:5e:df:c6:3d:2b:b2:26:0c:27:e8:2a:3f:ac:11: 84:0d:48:05:5d:01:a5:32:b4:63:59:0d:b4:02:9e: 2f:90:76:d5:5d:74:34:11:a6:d6:7a:1b:f1:f3:16: 9a:4d:9e:17:32:ed:34:e5:ab:6a:7d:c1:dc:9e:d3: b2:0a:d9:a7:6a:e1:1d:62:e5:d0:68:e9:01:cd:8c: 92:da:72:ab:f9:fc:38:b6:9e:73:82:96:47:73:26: e8:0f:a4:cd:04:62:de:a5:52:43:89:f6:ae:59:6d: 23:27:42:94:11:a2:64:50:52:3e:e1:9b:70:75:9c: e2:7a:63:de:14:04:90:7f:82:e4:81:13:38:29:6d: fb:5f:07:36:73:4c:7e:52:af:3f:8c:a7:0f:d3:32: 26:5e:cf:a2:a4:85:45:48:94:02:a5:6b:1f:a3:d8: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:89:C9:C7:48:7A:AF:BD:23:3E:AE:3B:F5:F0:C2:C8:BF:46:9C X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:d6:5c:26:3b:4c:34:a7:af:35:cf:77:51:a5:59:2f:e6:0c: 8d:7f:a9:55:b8:4b:8b:79:60:ab:bb:bc:f3:22:f7:27:6c:7e: 8c:88:fe:de:89:07:c2:70:76:b8:f5:9c:40:78:7b:2d:33:9b: c9:49:c4:16:cd:cd:28:7f:9c:b6:5a:d0:3b:a5:bb:01:9d:04: 01:fe:70:50:49:3e:d1:28:83:80:23:65:0b:af:67:71:cc:da: 29:9e:a8:b5:60:b6:b6:66:11:3b:c5:71:c5:7c:bb:ad:e7:29: de:ce:e4:f1:4e:e3:cf:d5:9a:b2:23:6d:7c:98:b1:7c:10:3f: 78:b6:b4:b0:5f:31:6d:58:c7:70:37:78:8f:db:f5:f5:5a:fc: 1c:7a:7d:e8:9a:2c:3e:cc:a3:46:86:04:1e:9b:d4:e6:fa:68: c2:aa:8c:c4:c1:f9:42:fe:f6:0d:76:2d:3a:d5:13:93:83:25: f0:3f:b7:c7:95:bf:49:6f:bc:0f:d6:08:47:e7:63:47:3b:9b: a8:48:4b:d4:87:cb:87:d4:43:6c:45:4c:4a:44:d7:57:08:81: b9:f8:51:aa:a8:f1:00:b8:2a:20:2e:52:a5:63:52:4f:42:78: c5:ad:33:67:4a:f9:d8:6a:a4:90:53:5b:c6:11:b5:b3:c8:0b: f7:9a:cb:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUxMDE4MjIyMDMxWhcNMjUxMDI1MjIyMDMxWjAYMRYwFAYD VQQDEw02OGY0MTJhZi03YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbG42AIbrE+spEAubHyTIC+gl7aRvft7d57cKQVp5+IACdWtD65rd+51v+gb GBdsW91xutaY8oObGe3NW/HUDfa1T4xxXERAcm4LU+mhHB9W02MLurpI4j8aXt/G PSuyJgwn6Co/rBGEDUgFXQGlMrRjWQ20Ap4vkHbVXXQ0EabWehvx8xaaTZ4XMu00 5atqfcHcntOyCtmnauEdYuXQaOkBzYyS2nKr+fw4tp5zgpZHcyboD6TNBGLepVJD ifauWW0jJ0KUEaJkUFI+4ZtwdZziemPeFASQf4LkgRM4KW37Xwc2c0x+Uq8/jKcP 0zImXs+ipIVFSJQCpWsfo9jUiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDXicnH SHqvvSM+rjv18MLIv0acMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC01lwmO0w0p681z3dRpVkv5gyNf6lVuEuLeWCru7zzIvcnbH6MiP7e iQfCcHa49ZxAeHstM5vJScQWzc0of5y2WtA7pbsBnQQB/nBQST7RKIOAI2ULr2dx zNopnqi1YLa2ZhE7xXHFfLut5ynezuTxTuPP1ZqyI218mLF8ED94trSwXzFtWMdw N3iP2/X1Wvwcen3omiw+zKNGhgQem9Tm+mjCqozEwflC/vYNdi061ROTgyXwP7fH lb9Jb7wP1ghH52NHO5uoSEvUh8uH1ENsRUxKRNdXCIG5+FGqqPEAuCogLlKlY1JP QnjFrTNnSvnYaqSQU1vGEbWzyAv3mssU -----END CERTIFICATE-----Generated at Tue Oct 21 02:39:49 2025 by rpki-client