$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: WPH/AYywtQCg0eyqHaaxLsGe35eHZODVaQ1qZcaQ8m8= Subject key identifier: FA:29:5C:0F:4A:69:E7:E7:45:6D:5A:73:3E:4B:A4:73:D1:8B:C7:B0 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 04CA Signing time: Sun 19 Oct 2025 01:39:42 +0000 Manifest this update: Sun 19 Oct 2025 01:39:42 +0000 Manifest next update: Sun 26 Oct 2025 01:39:42 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: wVLBGe4Leq73y6YjKvTHDXxyO55jf8aDOPo9u4wd2J8=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: Oct 19 01:39:42 2025 GMT Not After : Oct 26 01:39:42 2025 GMT Subject: CN=68f4415e-8918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:c6:5a:c8:f4:5b:b1:f6:fb:c9:19:b5:ec: d7:87:90:16:c2:1e:b1:27:a3:25:47:6c:d5:03:ad: 84:d5:a7:df:9a:49:74:7a:0f:93:77:d4:9d:93:bb: 89:f3:c2:7d:db:fa:1a:46:a9:87:72:04:6b:00:04: b7:d3:17:8a:10:6e:91:a9:c3:94:3e:0d:2c:00:43: d0:18:b9:59:24:07:e9:04:8f:d4:dd:a8:92:9d:34: e6:fe:87:0a:bb:94:ca:99:1f:35:e1:5d:c0:4e:4c: 75:39:0a:b7:76:4f:04:cf:68:99:3f:b9:b4:5e:5e: 41:06:1c:7a:99:be:38:a9:95:0c:02:23:2d:7d:50: 2e:55:3a:ee:8a:e2:be:1c:40:11:cb:f3:25:29:7c: 06:21:9a:18:27:ce:5b:78:2f:ab:a7:04:f2:f8:32: d7:ee:d1:3c:cf:99:fa:f5:14:04:ba:7a:f0:36:f9: 89:d8:f2:63:23:cf:d2:f9:3b:8d:10:90:73:69:d0: b9:2f:69:98:6a:de:cf:b9:0b:06:25:a1:18:91:9e: 08:ef:af:66:a3:dd:f5:f1:49:ce:30:53:3d:e6:22: 47:f0:c4:af:69:28:14:93:f0:43:fd:a8:3b:3f:2f: 21:f3:40:5d:f3:6d:5a:07:1a:78:91:61:f2:44:e2: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:29:5C:0F:4A:69:E7:E7:45:6D:5A:73:3E:4B:A4:73:D1:8B:C7:B0 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:e0:b6:12:0a:62:28:4d:a9:37:8c:fa:60:13:3a:11:8c: 42:96:9a:89:4f:f5:f0:98:d1:d9:85:cc:fa:3b:58:3c:ba:1b: 4f:e9:dd:60:0e:84:b1:5d:33:f7:e2:2b:c1:4d:1f:d8:93:d1: 74:71:ac:c0:89:1a:da:8c:53:21:ee:28:f1:37:2c:70:71:9d: 2d:6b:14:25:74:d8:d1:3d:b8:35:0d:b2:99:e0:17:e1:70:75: 14:82:1c:1f:f8:50:b6:04:8b:fd:6c:1d:04:a1:39:99:86:fd: 6b:bd:7f:b4:0e:3e:1e:13:6e:d8:22:27:44:3a:e9:7f:a1:e1: 1a:57:b8:b6:2d:74:d3:9c:20:41:7a:76:36:3d:32:1e:3a:1d: 8c:33:79:34:8b:4d:ac:65:81:74:72:46:e0:7c:5f:3e:19:cf: 95:33:58:d0:e2:59:4f:58:b6:f6:81:59:8f:46:f0:ea:b5:1c: c8:40:cb:19:e8:ef:a9:b0:3f:8d:41:18:38:2c:bd:f3:8e:0a: 5d:ea:d6:4b:37:df:dc:4f:2b:d5:26:dd:da:77:48:b4:f9:6b: 6c:cb:fb:2e:52:49:fa:75:cf:29:b6:cd:ef:91:7b:f6:f5:e8: 2e:e7:db:98:d0:02:04:ba:c4:62:b4:48:75:a5:d4:f4:cd:9d: 06:92:75:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjUxMDE5MDEzOTQyWhcNMjUxMDI2MDEzOTQyWjAYMRYwFAYD VQQDEw02OGY0NDE1ZS04OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwTGWsj0W7H2+8kZtezXh5AWwh6xJ6MlR2zVA62E1affmkl0eg+Td9Sdk7uJ 88J92/oaRqmHcgRrAAS30xeKEG6RqcOUPg0sAEPQGLlZJAfpBI/U3aiSnTTm/ocK u5TKmR814V3ATkx1OQq3dk8Ez2iZP7m0Xl5BBhx6mb44qZUMAiMtfVAuVTruiuK+ HEARy/MlKXwGIZoYJ85beC+rpwTy+DLX7tE8z5n69RQEunrwNvmJ2PJjI8/S+TuN EJBzadC5L2mYat7PuQsGJaEYkZ4I769mo9318UnOMFM95iJH8MSvaSgUk/BD/ag7 Py8h80Bd821aBxp4kWHyROK0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPopXA9K aefnRW1acz5LpHPRi8ewMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvc+C2EgpiKE2pN4z6YBM6EYxClpqJT/XwmNHZhcz6O1g8uhtP6d1g DoSxXTP34ivBTR/Yk9F0cazAiRrajFMh7ijxNyxwcZ0taxQldNjRPbg1DbKZ4Bfh cHUUghwf+FC2BIv9bB0EoTmZhv1rvX+0Dj4eE27YIidEOul/oeEaV7i2LXTTnCBB enY2PTIeOh2MM3k0i02sZYF0ckbgfF8+Gc+VM1jQ4llPWLb2gVmPRvDqtRzIQMsZ 6O+psD+NQRg4LL3zjgpd6tZLN9/cTyvVJt3ad0i0+Wtsy/suUkn6dc8pts3vkXv2 9egu59uY0AIEusRitEh1pdT0zZ0GknXc -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:36 2025 by rpki-client