$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: qNPQx7u5lb99ucusWdtvTyEUNhXH+UsiYSw2vJwgy/s= Subject key identifier: D5:49:DE:BB:37:9A:A8:D3:07:A7:14:08:66:13:4F:A3:6A:4B:84:A1 Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 02F0 Signing time: Sat 23 Aug 2025 01:32:15 +0000 Manifest this update: Sat 23 Aug 2025 01:32:15 +0000 Manifest next update: Sat 30 Aug 2025 01:32:15 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: ab4/xkLELfLj7XUbWd3OOPS4w80lKpDxUXN9+y8n1Bo=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Aug 23 01:32:15 2025 GMT Not After : Aug 30 01:32:15 2025 GMT Subject: CN=68a91a1f-cf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:d5:08:60:f1:dd:af:4b:53:54:9d:d2:25: 73:27:93:26:b3:7a:14:d0:b0:88:b8:37:d5:01:ac: 41:4a:4a:57:6f:8c:84:38:8c:3a:04:ec:a1:42:31: a7:3d:4a:dd:2b:32:56:c6:d8:ed:d4:35:4c:46:87: 69:66:c7:65:35:bd:30:49:07:8e:27:af:d8:40:7f: da:a7:38:fa:89:92:2d:55:98:d2:9e:ae:20:e7:6e: 36:c4:f4:9e:c2:40:e7:e1:3f:36:9a:73:d6:ed:e7: 25:bb:1c:e9:a2:ca:88:21:fe:86:09:e0:5e:45:97: 4b:ba:a8:76:f2:df:3e:70:36:0d:17:b9:85:0d:d3: b6:a1:eb:30:29:4d:94:be:0c:e4:69:f8:23:28:7e: e5:65:3b:39:50:e6:5a:8d:fd:f0:b8:dc:93:2b:dd: 59:88:7c:c6:9c:45:a1:b1:8a:38:3d:33:f1:ee:3e: 87:c5:9c:f5:a4:97:69:6a:a1:f5:28:da:7b:b3:b3: c1:02:2e:22:32:08:54:1b:ee:5b:3c:bb:c8:25:78: d2:94:94:64:f3:86:a7:b7:2a:b1:9e:fd:93:8b:5b: 6a:a9:7f:da:3d:a2:99:45:59:44:26:73:41:f4:3f: dc:ff:18:06:a1:80:71:5d:c4:86:80:aa:40:89:48: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:DE:BB:37:9A:A8:D3:07:A7:14:08:66:13:4F:A3:6A:4B:84:A1 X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ab:d8:a5:33:56:3a:bf:26:3f:ae:00:a2:2a:89:e2:1b:ec: 6a:6d:f9:11:60:3c:27:26:2e:04:96:e6:a1:d1:49:12:f2:61: 65:27:bd:7d:fe:03:2d:b5:a6:7a:cb:7a:20:ea:60:49:df:c2: a5:58:16:38:9a:b9:cf:b6:aa:f1:81:32:fe:63:56:56:d9:6f: d6:fc:f7:b3:53:e1:e0:78:1f:ae:08:aa:e1:e1:5c:fb:fa:22: 8b:a4:e1:a0:3e:38:76:6d:f8:3b:a1:90:eb:b5:a9:c7:5a:c7: 91:d3:6a:bd:6b:49:f7:da:2f:b5:8c:f8:26:e0:0f:27:63:75: d1:7b:68:b8:50:6f:4e:f1:41:d8:2a:28:cc:37:43:1c:47:67: 4f:e9:00:bf:ca:51:0b:57:82:66:52:5c:05:1f:11:56:fd:f2: 50:fc:f7:28:8e:83:aa:e1:1a:13:0f:e4:62:39:cb:37:07:ec: 3c:d9:8c:bb:dd:e4:3f:9d:6c:3f:ac:9d:66:d2:97:92:66:61: 01:50:56:dd:a9:d5:b1:82:05:d3:c5:e5:74:2e:b3:25:5c:83: fd:a7:7d:a6:34:dd:67:41:1d:f6:b6:9c:82:0d:e7:66:ba:ba: 67:19:a7:c0:dd:67:dc:f3:41:09:fc:d2:7d:22:4a:39:56:94: 1e:e1:41:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUwODIzMDEzMjE1WhcNMjUwODMwMDEzMjE1WjAYMRYwFAYD VQQDEw02OGE5MWExZi1jZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpzVCGDx3a9LU1Sd0iVzJ5Mms3oU0LCIuDfVAaxBSkpXb4yEOIw6BOyhQjGn PUrdKzJWxtjt1DVMRodpZsdlNb0wSQeOJ6/YQH/apzj6iZItVZjSnq4g5242xPSe wkDn4T82mnPW7ecluxzposqIIf6GCeBeRZdLuqh28t8+cDYNF7mFDdO2oeswKU2U vgzkafgjKH7lZTs5UOZajf3wuNyTK91ZiHzGnEWhsYo4PTPx7j6HxZz1pJdpaqH1 KNp7s7PBAi4iMghUG+5bPLvIJXjSlJRk84antyqxnv2Ti1tqqX/aPaKZRVlEJnNB 9D/c/xgGoYBxXcSGgKpAiUi63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVJ3rs3 mqjTB6cUCGYTT6NqS4ShMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTq9ilM1Y6vyY/rgCiKoniG+xqbfkRYDwnJi4Eluah0UkS8mFlJ719 /gMttaZ6y3og6mBJ38KlWBY4mrnPtqrxgTL+Y1ZW2W/W/PezU+HgeB+uCKrh4Vz7 +iKLpOGgPjh2bfg7oZDrtanHWseR02q9a0n32i+1jPgm4A8nY3XRe2i4UG9O8UHY KijMN0McR2dP6QC/ylELV4JmUlwFHxFW/fJQ/PcojoOq4RoTD+RiOcs3B+w82Yy7 3eQ/nWw/rJ1m0peSZmEBUFbdqdWxggXTxeV0LrMlXIP9p32mNN1nQR32tpyCDedm urpnGafA3Wfc80EJ/NJ9Iko5VpQe4UHb -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:10 2025 by rpki-client