$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: zi0QbAaE5scLyr6jaYDcCEz8aiUZmDmR/Q136DEjn8Y= Subject key identifier: 62:CC:1B:B6:23:99:A7:3A:E4:E6:A7:56:B9:89:1E:76:90:26:A1:F5 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B8D Signing time: Fri 22 Aug 2025 19:09:31 +0000 Manifest this update: Fri 22 Aug 2025 19:09:31 +0000 Manifest next update: Fri 29 Aug 2025 19:09:31 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: 4gWXpQoPfvuWYaofyrodrUcBZQ+wRtDLCsVxN3fvTF8=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Aug 22 19:09:31 2025 GMT Not After : Aug 29 19:09:31 2025 GMT Subject: CN=68a8c06b-af92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:75:ac:ae:98:f4:d9:97:df:6b:c9:80:3e: f9:84:83:e4:bf:4e:8d:8c:71:90:d8:9c:fb:a2:68: 7b:12:c1:94:97:be:52:b8:c0:18:7e:f8:fd:5e:50: 7b:e6:aa:1e:51:09:72:2b:fd:50:2f:f7:01:a0:d3: 7c:66:8f:8e:4b:67:5c:c9:2a:d1:a7:46:40:06:81: 4c:90:e5:ab:b3:26:c8:b3:9d:ec:da:e4:7a:6e:3d: 91:9d:88:4d:ac:06:61:90:26:ee:08:cf:69:13:81: ef:7d:ed:db:55:0f:64:eb:fe:16:69:cf:8d:de:e6: 45:85:0c:db:30:23:31:64:57:ad:a5:a9:c3:73:0c: ea:71:1a:bb:d9:cf:44:ce:9b:5a:4c:40:8b:99:56: 0c:5d:89:1c:0d:fb:14:5f:15:97:5d:4b:49:14:be: 5b:39:d2:3c:93:03:f4:bf:ea:d2:41:f2:01:a4:85: d3:23:10:e8:36:b0:13:1a:4b:13:73:a7:d7:71:33: b2:52:63:26:56:12:6e:5c:da:dc:c1:88:4c:4a:29: d1:a6:3b:ff:45:36:d4:6f:7e:e0:22:d3:be:25:0e: 48:87:9f:cc:0b:9c:ad:e9:0a:0b:9d:ef:1e:2c:a3: 34:81:d6:c1:e6:f3:68:37:2a:9a:43:47:12:61:0d: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CC:1B:B6:23:99:A7:3A:E4:E6:A7:56:B9:89:1E:76:90:26:A1:F5 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ab:2a:9d:32:9d:ae:00:31:b5:84:a8:a2:44:3b:81:08:ce: 3e:52:8e:12:bf:17:fa:38:af:89:19:5b:73:08:07:b0:6c:e5: 3c:2a:80:82:24:1a:57:cd:d6:cc:71:48:93:c3:8d:53:98:b9: 25:85:37:1a:7d:a1:3e:b1:bb:5f:ea:03:1c:3b:af:d7:15:85: 91:bd:f9:99:b2:b8:72:a5:fc:d8:cf:88:35:5f:a8:4e:4c:07: 9b:b9:eb:a4:5d:88:03:85:4a:b1:1b:94:1e:b0:74:56:ef:04: 31:dc:69:ff:a4:b6:cb:9b:a2:bb:62:94:dd:41:cc:dd:93:a6: 3e:5a:18:fc:f0:24:1a:a2:b7:f9:b0:f9:b6:b0:e4:89:f7:4e: 22:dc:1c:b5:14:0a:05:ac:64:5c:83:f0:22:99:59:6a:3f:e7: 9d:6d:4e:a2:f3:ba:49:e2:ed:99:a7:57:ec:f1:f6:42:4a:dd: 17:52:c2:4b:7d:d4:63:fe:70:cb:4f:f2:73:7d:25:19:13:01: 56:5e:c5:a7:b4:a5:2c:e2:6a:a1:31:5c:73:5f:cc:28:07:ce: f3:b0:17:10:ee:df:b7:ec:f4:6e:be:fa:93:75:46:7a:14:c3: 62:37:b0:b2:e5:7b:53:d3:4e:07:a8:89:aa:33:7e:5d:a0:23: c4:a1:33:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwODIyMTkwOTMxWhcNMjUwODI5MTkwOTMxWjAYMRYwFAYD VQQDEw02OGE4YzA2Yi1hZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxJ1rK6Y9NmX32vJgD75hIPkv06NjHGQ2Jz7omh7EsGUl75SuMAYfvj9XlB7 5qoeUQlyK/1QL/cBoNN8Zo+OS2dcySrRp0ZABoFMkOWrsybIs53s2uR6bj2RnYhN rAZhkCbuCM9pE4Hvfe3bVQ9k6/4Wac+N3uZFhQzbMCMxZFetpanDcwzqcRq72c9E zptaTECLmVYMXYkcDfsUXxWXXUtJFL5bOdI8kwP0v+rSQfIBpIXTIxDoNrATGksT c6fXcTOyUmMmVhJuXNrcwYhMSinRpjv/RTbUb37gItO+JQ5Ih5/MC5yt6QoLne8e LKM0gdbB5vNoNyqaQ0cSYQ2Y6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLMG7Yj mac65OanVrmJHnaQJqH1MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQqyqdMp2uADG1hKiiRDuBCM4+Uo4Svxf6OK+JGVtzCAewbOU8KoCC JBpXzdbMcUiTw41TmLklhTcafaE+sbtf6gMcO6/XFYWRvfmZsrhypfzYz4g1X6hO TAebueukXYgDhUqxG5QesHRW7wQx3Gn/pLbLm6K7YpTdQczdk6Y+Whj88CQaorf5 sPm2sOSJ904i3By1FAoFrGRcg/AimVlqP+edbU6i87pJ4u2Zp1fs8fZCSt0XUsJL fdRj/nDLT/JzfSUZEwFWXsWntKUs4mqhMVxzX8woB87zsBcQ7t+37PRuvvqTdUZ6 FMNiN7Cy5XtT004HqImqM35doCPEoTMd -----END CERTIFICATE-----Generated at Sat Aug 23 10:59:26 2025 by rpki-client