$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: EzYF0DNFjCIefNRyU/PUdta+pcZd3Tl9lC9pl3nzYhU= Subject key identifier: 95:F6:57:5D:CC:99:F2:57:D4:EB:55:48:B4:B4:A0:E5:A9:63:8C:84 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0BAA Signing time: Sat 18 Oct 2025 19:49:39 +0000 Manifest this update: Sat 18 Oct 2025 19:49:39 +0000 Manifest next update: Sat 25 Oct 2025 19:49:39 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: rriYCg/DErU0jU/NQKQdzls2bk/MIE+dplLhQkvjDhg=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Oct 18 19:49:39 2025 GMT Not After : Oct 25 19:49:39 2025 GMT Subject: CN=68f3ef53-34c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:cd:f6:0e:59:03:2f:3e:f0:6b:10:14:94: ed:78:6e:d2:11:1a:9c:a0:b2:6a:6c:39:09:ef:cc: c5:f9:f9:54:f7:95:af:36:b3:58:4e:c9:02:46:62: d8:82:f1:59:cf:04:1a:9e:cc:1c:1f:7b:e3:a1:5c: d6:41:25:03:ed:ef:9c:c0:9b:17:4f:fc:d1:6d:59: 1b:a8:16:4f:d5:d6:17:4c:67:a7:ff:91:5d:6d:96: 35:a8:c8:fe:3f:f4:bf:23:fa:7f:8c:d6:28:e3:da: 8d:11:af:82:43:b0:2b:b9:d7:c3:77:a2:53:c2:06: 7a:d0:ef:15:d8:d6:a9:08:df:f3:61:a9:06:46:77: bf:9d:cb:ee:ad:14:10:d4:d9:4f:f1:fa:81:25:39: a7:d3:d2:81:1a:a4:c5:6d:15:f6:a3:e8:0c:f7:78: e5:7f:7f:15:dc:48:15:8c:cd:a6:1b:7c:de:5a:b6: 63:fb:d2:a6:d3:fb:58:ab:e9:f0:8f:e2:d8:1f:ee: 93:22:53:50:58:7a:52:88:7d:9e:12:bd:43:23:7d: ec:9e:e5:cb:b6:55:4d:31:7e:e5:60:2d:63:26:10: 60:1c:d6:3d:81:f8:a3:29:3f:7a:0b:db:5d:ac:6c: c1:98:7e:a8:38:0f:47:98:cb:e4:84:bd:26:94:17: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:57:5D:CC:99:F2:57:D4:EB:55:48:B4:B4:A0:E5:A9:63:8C:84 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a8:3a:4b:8d:43:6f:59:4f:26:b9:54:91:19:d4:00:21:73: b4:f5:34:bb:16:a2:49:c1:f2:e3:53:f4:1b:a5:0c:16:5c:48: 1e:d7:00:72:ac:5b:72:e3:49:17:46:0f:43:e8:2a:8d:d1:37: d7:93:55:d0:f6:96:d1:86:48:4c:fb:69:02:07:0a:26:00:a7: 99:a5:88:18:a9:d4:ae:4b:82:25:a4:14:15:ad:60:45:31:a1: 57:e0:3e:2a:58:41:d0:bf:c6:e8:4c:7c:c6:46:2b:bc:45:fa: 93:ba:8f:61:ea:46:53:9c:f9:87:95:11:13:97:11:9f:ae:d6: 65:f2:aa:e0:3c:69:52:1a:f3:62:01:8d:8c:39:0f:71:c7:f5: 0b:23:dc:77:db:c1:4d:f5:b4:c9:8d:6f:a0:7a:42:a4:67:9a: 50:2b:8a:39:a2:23:2f:f1:6f:eb:84:d8:cf:f6:32:4f:5d:ec: 51:4a:f3:4b:9d:04:a0:07:fd:cf:5b:c4:45:02:41:a0:c2:23: e5:76:7a:36:e3:02:1b:61:1f:de:91:fe:f0:85:35:6a:5c:81: 6d:af:15:62:f1:72:e9:dd:3b:cf:12:57:44:f1:39:80:45:a0: ae:2a:5f:d5:0d:87:52:0b:8f:11:19:da:da:f2:37:86:63:0d: 72:0e:6b:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUxMDE4MTk0OTM5WhcNMjUxMDI1MTk0OTM5WjAYMRYwFAYD VQQDEw02OGYzZWY1My0zNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGrN9g5ZAy8+8GsQFJTteG7SERqcoLJqbDkJ78zF+flU95WvNrNYTskCRmLY gvFZzwQanswcH3vjoVzWQSUD7e+cwJsXT/zRbVkbqBZP1dYXTGen/5FdbZY1qMj+ P/S/I/p/jNYo49qNEa+CQ7ArudfDd6JTwgZ60O8V2NapCN/zYakGRne/ncvurRQQ 1NlP8fqBJTmn09KBGqTFbRX2o+gM93jlf38V3EgVjM2mG3zeWrZj+9Km0/tYq+nw j+LYH+6TIlNQWHpSiH2eEr1DI33snuXLtlVNMX7lYC1jJhBgHNY9gfijKT96C9td rGzBmH6oOA9HmMvkhL0mlBf9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX2V13M mfJX1OtVSLS0oOWpY4yEMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYqDpLjUNvWU8muVSRGdQAIXO09TS7FqJJwfLjU/QbpQwWXEge1wBy rFty40kXRg9D6CqN0TfXk1XQ9pbRhkhM+2kCBwomAKeZpYgYqdSuS4IlpBQVrWBF MaFX4D4qWEHQv8boTHzGRiu8RfqTuo9h6kZTnPmHlRETlxGfrtZl8qrgPGlSGvNi AY2MOQ9xx/ULI9x328FN9bTJjW+gekKkZ5pQK4o5oiMv8W/rhNjP9jJPXexRSvNL nQSgB/3PW8RFAkGgwiPldno24wIbYR/ekf7whTVqXIFtrxVi8XLp3TvPEldE8TmA RaCuKl/VDYdSC48RGdra8jeGYw1yDmuv -----END CERTIFICATE-----Generated at Mon Oct 20 05:44:55 2025 by rpki-client