$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: nS4JTM0A04uqBVeFgDzDJmdKF3RPQCc3z1zKLrC/0Yg= Subject key identifier: 32:3C:E7:71:48:44:24:71:BF:15:87:F8:7F:3F:72:F3:5C:33:96:78 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B73 Signing time: Wed 02 Jul 2025 19:17:45 +0000 Manifest this update: Wed 02 Jul 2025 19:17:45 +0000 Manifest next update: Wed 09 Jul 2025 19:17:45 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: qvLPhUc//nzaUGljB+Ro0D41aaoR2wzHaoeByomfJCI=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Jul 2 19:17:45 2025 GMT Not After : Jul 9 19:17:45 2025 GMT Subject: CN=686585d9-f6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:3c:ba:09:d3:93:50:f0:28:84:85:08:6e: bc:64:ad:40:b2:e7:e0:bd:ba:b8:a8:ee:ec:aa:22: 0f:ce:f2:61:21:34:ef:cf:31:ed:73:40:ba:a4:f5: 7f:e0:52:dd:bf:cd:01:3e:d7:d5:ae:14:2b:6f:2a: e2:2f:8d:f3:23:5e:ba:c8:01:c6:cd:d2:a6:f3:c3: 61:85:54:6f:99:0d:20:46:a9:df:a4:70:1c:89:58: 22:eb:eb:14:dc:65:c7:f3:24:10:29:d6:75:6f:fa: dd:08:90:73:58:54:5d:34:ad:2f:e0:99:a0:c8:61: cb:f3:00:75:d8:3d:33:99:d6:a6:05:a9:40:a2:55: 9c:ab:78:56:e2:85:17:a5:fd:59:7e:24:c9:94:19: 0f:9c:3e:b4:b9:d1:9a:b1:a3:7f:21:ae:ca:ac:45: 0b:06:79:f9:b1:fa:49:a4:76:03:34:a2:89:89:12: 6e:a6:28:fa:4b:f6:e6:02:08:4c:62:8d:b6:fb:3c: 10:aa:bd:55:56:9b:d3:79:18:b9:9c:e8:8b:c0:c0: 21:e1:af:48:fd:f6:1a:d6:aa:c0:04:04:b9:4b:e1: 9b:a2:6b:d7:d1:e3:e6:3d:1c:9c:ea:d1:11:a2:f0: 8e:74:a3:8b:08:57:38:f6:7c:2b:37:99:80:69:ea: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3C:E7:71:48:44:24:71:BF:15:87:F8:7F:3F:72:F3:5C:33:96:78 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:81:1d:78:b8:74:43:b3:2b:38:f6:f7:01:48:ea:fe:d4:ce: 20:44:28:f0:cd:0d:88:3e:77:4f:4d:7a:4a:3a:0e:a5:2a:49: ed:aa:d0:53:ab:cb:90:52:94:a2:71:e9:7d:57:56:ba:ae:4a: 03:60:fc:1e:6f:6f:1b:38:f6:99:64:e3:f8:73:3c:49:b2:3e: 62:df:36:07:e1:7d:e1:2e:e4:e8:24:16:53:ac:47:b0:73:c8: a6:05:dd:27:56:ed:df:d2:ce:54:82:35:8a:75:e2:cf:a1:3e: 7f:58:27:59:83:29:73:25:61:48:b0:17:00:4f:2e:82:09:af: 8e:0c:f3:08:95:36:1b:6f:8f:08:e9:2a:3b:a7:e1:75:1d:87: 4b:fe:8f:fe:fc:79:0c:fe:37:4f:c0:fb:f1:10:f8:48:6e:7f: 3d:32:ec:95:0a:92:77:7a:1e:3d:a7:49:39:ae:24:0a:10:97: d7:07:e1:1b:b6:6e:6f:9f:65:26:7d:cb:b0:5e:ee:b8:d8:ce: ee:6c:0d:f8:19:e3:81:0f:6a:ec:fc:df:89:06:9f:73:26:95: ed:e5:1d:f3:99:b1:bc:4e:f7:db:47:c9:75:0c:b4:ed:93:f4: a6:5d:e2:b7:32:aa:07:00:e3:b1:a1:db:db:d0:ca:f8:59:2b: db:21:0f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwNzAyMTkxNzQ1WhcNMjUwNzA5MTkxNzQ1WjAYMRYwFAYD VQQDEw02ODY1ODVkOS1mNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOM8ugnTk1DwKISFCG68ZK1Asufgvbq4qO7sqiIPzvJhITTvzzHtc0C6pPV/ 4FLdv80BPtfVrhQrbyriL43zI166yAHGzdKm88NhhVRvmQ0gRqnfpHAciVgi6+sU 3GXH8yQQKdZ1b/rdCJBzWFRdNK0v4JmgyGHL8wB12D0zmdamBalAolWcq3hW4oUX pf1ZfiTJlBkPnD60udGasaN/Ia7KrEULBnn5sfpJpHYDNKKJiRJupij6S/bmAghM Yo22+zwQqr1VVpvTeRi5nOiLwMAh4a9I/fYa1qrABAS5S+GbomvX0ePmPRyc6tER ovCOdKOLCFc49nwrN5mAaeqgpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI853FI RCRxvxWH+H8/cvNcM5Z4MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCugR14uHRDsys49vcBSOr+1M4gRCjwzQ2IPndPTXpKOg6lKkntqtBT q8uQUpSicel9V1a6rkoDYPweb28bOPaZZOP4czxJsj5i3zYH4X3hLuToJBZTrEew c8imBd0nVu3f0s5UgjWKdeLPoT5/WCdZgylzJWFIsBcATy6CCa+ODPMIlTYbb48I 6So7p+F1HYdL/o/+/HkM/jdPwPvxEPhIbn89MuyVCpJ3eh49p0k5riQKEJfXB+Eb tm5vn2UmfcuwXu642M7ubA34GeOBD2rs/N+JBp9zJpXt5R3zmbG8TvfbR8l1DLTt k/SmXeK3MqoHAOOxodvb0Mr4WSvbIQ/Z -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:16 2025 by rpki-client