$ rpki-client -vvf rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft File: LVzM98MOtjzd6jS-g75guw4CehM.mft (raw, json) Hash identifier: n0NgSM+mDWDN0ntW39xncQqTcL/N7H6mSNteH60/+WA= Subject key identifier: 69:32:9A:31:93:81:C5:C8:46:09:12:7D:51:0E:C0:E7:EB:01:EA:66 Authority key identifier: 2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 Certificate issuer: /CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft Manifest number: 0B31 Signing time: Fri 22 Aug 2025 19:23:08 +0000 Manifest this update: Fri 22 Aug 2025 19:23:07 +0000 Manifest next update: Fri 29 Aug 2025 19:23:07 +0000 Files and hashes: 1: LVzM98MOtjzd6jS-g75guw4CehM.crl (hash: D3gjhDibOiubxb2BJhvKBnl+SLIYUErAmAYnIzT9kSo=) 2: AE5FD48E431911EAB8FF4125C4F9AE02.roa (hash: wUVOr7bU61HRquV+b+lva4AIoFme7G1z56Vw7wfpFH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F10A, serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Validity Not Before: Aug 22 19:23:07 2025 GMT Not After : Aug 29 19:23:07 2025 GMT Subject: CN=68a8c39c-d0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:f9:2e:ad:81:d2:63:ee:49:97:9c:ff:8b: e5:91:24:60:6b:e0:44:ac:17:f1:72:5e:8a:36:99: c7:08:3c:1a:0b:84:11:33:4f:a4:fc:ea:71:b2:a4: eb:84:ec:8f:a8:f7:2a:d1:53:86:26:4c:47:e2:8b: 9e:77:cb:3f:ef:89:4b:79:59:7c:99:e5:cd:42:3b: ea:55:77:1c:21:31:e0:3d:d4:dd:96:84:f5:62:fe: 1c:d3:02:db:78:7c:69:a5:fe:84:12:f6:99:6b:90: 72:d6:c3:45:c5:dc:ac:08:f1:39:ef:1b:b6:b7:9b: 76:3c:f3:f6:62:02:09:5b:b8:80:a6:84:01:91:b4: 48:ac:42:35:33:88:88:6e:11:25:d0:03:e1:d0:9e: a7:23:fe:9c:ce:3b:5a:35:29:79:b3:8a:88:71:1c: c6:97:e5:f0:c1:79:67:ff:95:bd:59:41:a0:16:8a: 6a:22:07:78:7f:43:c3:65:72:9a:43:68:5a:e8:b1: 6d:e6:41:3c:3d:3a:52:6a:95:47:5f:28:d3:95:33: f5:ee:94:5e:cb:07:2c:12:f0:bb:33:f4:2c:4c:11: fb:3c:b6:ab:69:bb:7b:6b:63:3f:bc:62:93:5c:10: 8f:b3:51:31:80:b4:dd:4a:d8:7c:51:e8:a5:28:4f: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:32:9A:31:93:81:C5:C8:46:09:12:7D:51:0E:C0:E7:EB:01:EA:66 X509v3 Authority Key Identifier: keyid:2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6d:fa:4e:e0:fe:05:12:ea:e8:34:62:d7:67:67:be:2a:89: ef:ca:77:81:99:a4:21:fa:f8:e5:53:46:f0:01:e5:aa:ea:dd: cb:30:0e:3d:0c:36:88:48:56:33:4c:3b:2e:63:87:49:0e:69: d6:b9:ea:03:47:de:a7:4c:21:e9:87:91:84:13:a2:96:99:2c: 1f:3d:b9:44:4f:3a:4a:0d:bb:3e:4d:96:1e:f7:26:88:34:20: 11:4e:45:de:39:5e:40:ee:3b:ff:33:3b:7f:23:42:b8:28:e3: 57:12:f7:9a:c4:99:40:02:7f:39:23:ef:75:e3:80:21:96:0d: 8f:a1:1c:f9:20:a6:bd:5c:a8:ce:e1:be:e6:58:82:f6:52:ee: a8:07:6c:0b:87:d3:9d:5d:20:37:a1:58:ce:66:aa:d1:2b:f2: 0f:47:70:dd:e2:0f:3e:0d:b1:e7:25:b3:d0:3e:73:03:95:72: f0:e5:3d:bb:25:2f:05:c3:df:4b:76:7b:91:a3:eb:c8:45:e5: 24:4f:86:f8:2f:0d:32:68:7b:4a:4b:58:49:b4:ab:e3:cd:4b: cc:7a:aa:c1:4d:09:87:43:33:a5:7e:ff:86:55:07:36:6f:eb: fc:d6:0e:b7:b8:e2:b9:9b:1a:fb:24:ef:11:0b:62:91:15:4b: eb:be:88:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYxMEExMTAvBgNVBAUTKDJENUNDQ0Y3QzMwRUI2M0NEREVBMzRCRTgzQkU2MEJC MEUwMjdBMTMwHhcNMjUwODIyMTkyMzA3WhcNMjUwODI5MTkyMzA3WjAYMRYwFAYD VQQDEw02OGE4YzM5Yy1kMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9n5Lq2B0mPuSZec/4vlkSRga+BErBfxcl6KNpnHCDwaC4QRM0+k/OpxsqTr hOyPqPcq0VOGJkxH4oued8s/74lLeVl8meXNQjvqVXccITHgPdTdloT1Yv4c0wLb eHxppf6EEvaZa5By1sNFxdysCPE57xu2t5t2PPP2YgIJW7iApoQBkbRIrEI1M4iI bhEl0APh0J6nI/6czjtaNSl5s4qIcRzGl+XwwXln/5W9WUGgFopqIgd4f0PDZXKa Q2ha6LFt5kE8PTpSapVHXyjTlTP17pReywcsEvC7M/QsTBH7PLarabt7a2M/vGKT XBCPs1ExgLTdSth8UeilKE/F5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkymjGT gcXIRgkSfVEOwOfrAepmMB8GA1UdIwQYMBaAFC1czPfDDrY83eo0voO+YLsOAnoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjEwQS8yNzQ1NTdGRTQz MTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3RqemQ2alMtZzc1Z3V3NENl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWek05OE1PdGp6ZDZqUy1nNzVndXc0Q2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjEwQS8yNzQ1NTdGRTQzMTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3Rq emQ2alMtZzc1Z3V3NENlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADbfpO4P4FEuroNGLXZ2e+KonvyneBmaQh+vjlU0bwAeWq6t3LMA49 DDaISFYzTDsuY4dJDmnWueoDR96nTCHph5GEE6KWmSwfPblETzpKDbs+TZYe9yaI NCARTkXeOV5A7jv/Mzt/I0K4KONXEveaxJlAAn85I+9144Ahlg2PoRz5IKa9XKjO 4b7mWIL2Uu6oB2wLh9OdXSA3oVjOZqrRK/IPR3Dd4g8+DbHnJbPQPnMDlXLw5T27 JS8Fw99LdnuRo+vIReUkT4b4Lw0yaHtKS1hJtKvjzUvMeqrBTQmHQzOlfv+GVQc2 b+v81g63uOK5mxr7JO8RC2KRFUvrvoiH -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:15 2025 by rpki-client