$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json) Hash identifier: HpqzGqywELOSY+qG4XYJOgR8yPtpyd58D22XjLa8E/w= Subject key identifier: 29:12:1A:0B:2D:A2:0B:30:18:1B:02:2E:99:D7:C6:2A:C6:C1:AD:32 Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft Manifest number: 3B Signing time: Sat 23 Aug 2025 05:03:12 +0000 Manifest this update: Sat 23 Aug 2025 05:03:12 +0000 Manifest next update: Sat 30 Aug 2025 05:03:12 +0000 Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: dR1STB/Gk5dN3FaJe2if0gSJhrLVdjg/7vVuS26VaoI=) 2: 75BE1B766DDF11F0BDC0DA4AC4F9AE02.roa (hash: xGZZlrDNDkFaLniK4xDu2fVUb+QoGgFz7ExHydYZgMQ=) 3: A1BECC526DDF11F0868E7C4BC4F9AE02.roa (hash: YXuf5BTEPj7fnB9oxoKkcmwqAfw/328NMNkT0ipByB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Validity Not Before: Aug 23 05:03:12 2025 GMT Not After : Aug 30 05:03:12 2025 GMT Subject: CN=68a94b90-af8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:2d:15:15:99:13:cb:8a:d7:92:ee:b1:52: b9:f4:42:ad:00:29:99:df:d6:47:98:cf:d5:5a:0a: 72:79:48:d8:b1:93:1f:20:d8:aa:42:70:aa:15:6b: 56:7a:7f:38:55:0a:5c:24:89:23:6b:f1:62:60:10: f3:44:dc:a6:9c:98:d1:5c:9c:c8:90:fe:aa:87:f8: 62:f6:e9:f5:c8:87:04:dc:87:93:65:98:f4:5d:95: 04:7d:73:ca:06:57:cb:04:76:25:ff:53:3b:b2:0b: 7f:f0:8c:a8:e0:53:85:6d:63:90:ef:bb:69:f6:48: 6d:26:8c:c5:f5:a4:8a:a3:34:1f:15:28:86:90:d6: 0e:80:79:76:0c:6d:a2:63:04:27:be:7d:fb:db:2c: 8e:41:20:33:1f:1f:a7:1e:04:82:05:d2:22:cb:13: f0:b2:cf:4c:f5:5f:f5:43:b6:c8:8f:a5:b5:c3:33: 3f:45:f4:16:f3:e6:29:ce:96:dc:c4:68:4d:5c:ab: 25:bc:ee:b5:da:55:e0:7b:d4:4f:d5:2b:ca:8a:09: 1e:63:a2:18:36:02:b5:b0:0b:40:1f:bd:66:a0:39: 55:da:9e:f5:6e:a8:4c:26:ad:7c:68:3a:61:e2:87: 49:76:7b:78:0c:71:1e:0f:94:62:c5:38:22:f4:27: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:1A:0B:2D:A2:0B:30:18:1B:02:2E:99:D7:C6:2A:C6:C1:AD:32 X509v3 Authority Key Identifier: keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fe:20:bc:1c:92:7f:9f:12:0d:ca:5f:f0:59:60:f5:99:eb: 94:19:e7:25:65:21:af:d1:6c:fc:3c:11:81:11:bc:ae:d7:a6: 4a:37:68:84:f4:ad:78:fe:7a:ce:77:3c:8a:eb:47:c3:e3:fd: 96:0d:2d:a5:e2:5e:0a:16:28:c9:6f:99:22:ca:c6:0e:30:4f: f1:02:15:e5:66:7a:5b:e9:e6:6f:20:f8:a6:8a:f1:e3:6c:62: a7:42:3e:8b:8e:b0:80:cd:41:58:27:75:79:05:65:a6:8e:5b: 22:bb:ea:59:1d:37:97:5a:9f:0e:d1:15:7f:ec:6b:77:98:c0: c0:b5:c1:b1:ce:76:83:c2:92:97:64:1c:ff:76:dc:b6:66:d9: d4:ba:f8:07:31:4d:7a:6e:9f:7a:29:ea:12:f2:32:28:9d:6f: d7:95:06:1a:a6:39:71:f5:6c:23:17:5c:8b:b3:19:a8:4e:83: 2d:15:be:5a:48:07:03:4b:f7:b2:1c:0b:84:b6:af:a1:26:d4: 17:40:2d:89:68:eb:06:49:b0:19:7a:de:84:a4:71:82:e3:9d: 51:a0:8e:92:18:29:cf:26:cb:eb:e1:91:be:79:cd:8d:a6:d7: c6:38:89:0a:b9:a4:9c:a7:05:b2:ce:c2:72:96:35:76:eb:24: 86:3b:6a:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0E3MjExMC8GA1UEBRMoMkVGNDY5NTQ0M0E0QzBDN0IzNEVBOTFCNjJBM0Q4RjhF NDE0NTE3RTAeFw0yNTA4MjMwNTAzMTJaFw0yNTA4MzAwNTAzMTJaMBgxFjAUBgNV BAMTDTY4YTk0YjkwLWFmOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4kC0VFZkTy4rXku6xUrn0Qq0AKZnf1keYz9VaCnJ5SNixkx8g2KpCcKoVa1Z6 fzhVClwkiSNr8WJgEPNE3KacmNFcnMiQ/qqH+GL26fXIhwTch5NlmPRdlQR9c8oG V8sEdiX/UzuyC3/wjKjgU4VtY5Dvu2n2SG0mjMX1pIqjNB8VKIaQ1g6AeXYMbaJj BCe+ffvbLI5BIDMfH6ceBIIF0iLLE/Cyz0z1X/VDtsiPpbXDMz9F9Bbz5inOltzE aE1cqyW87rXaVeB71E/VK8qKCR5johg2ArWwC0AfvWagOVXanvVuqEwmrXxoOmHi h0l2e3gMcR4PlGLFOCL0J8SdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKRIaCy2i CzAYGwIumdfGKsbBrTIwHwYDVR0jBBgwFoAULvRpVEOkwMezTqkbYqPY+OQUUX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3QTcyLzQ0REU2OUNFMkIx NDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01lelRxa2JZcVBZLU9RVVVY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHZScFZFT2t3TWV6VHFrYllxUFktT1FVVVg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 QTcyLzQ0REU2OUNFMkIxNDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01l elRxa2JZcVBZLU9RVVVYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHT+ILwckn+fEg3KX/BZYPWZ65QZ5yVlIa/RbPw8EYERvK7Xpko3aIT0 rXj+es53PIrrR8Pj/ZYNLaXiXgoWKMlvmSLKxg4wT/ECFeVmelvp5m8g+KaK8eNs YqdCPouOsIDNQVgndXkFZaaOWyK76lkdN5danw7RFX/sa3eYwMC1wbHOdoPCkpdk HP923LZm2dS6+AcxTXpun3op6hLyMiidb9eVBhqmOXH1bCMXXIuzGahOgy0VvlpI BwNL97IcC4S2r6Em1BdALYlo6wZJsBl63oSkcYLjnVGgjpIYKc8my+vhkb55zY2m 18Y4iQq5pJynBbLOwnKWNXbrJIY7apk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:17 2025 by rpki-client