$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: vmpl0qxeEdmlQRE830kXPI2j22k6McMPgyW/nlOl1LA= Subject key identifier: 37:A5:C8:E9:8A:01:05:0F:AF:E6:23:D5:53:AD:1B:44:B2:06:D1:F3 Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 030D Signing time: Sun 19 Oct 2025 03:15:44 +0000 Manifest this update: Sun 19 Oct 2025 03:15:43 +0000 Manifest next update: Sun 26 Oct 2025 03:15:43 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: LZXEPHDifJy2pZkpcxOxq7ggQn1bIIIOSSVASTF+rPI=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Oct 19 03:15:43 2025 GMT Not After : Oct 26 03:15:43 2025 GMT Subject: CN=68f457e0-3015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:1a:e9:02:1d:56:1f:f1:bf:51:dc:3d:38: c3:b6:6f:63:98:c6:e2:7e:67:48:62:98:2e:63:0a: 3b:26:b1:ed:97:9f:be:7d:56:94:32:eb:45:6e:c3: ed:2e:ac:6a:56:65:95:7d:af:26:4b:a5:00:de:6f: 5d:ae:af:72:e7:79:17:0f:11:52:d2:4c:7c:bc:d9: 58:73:ba:da:f3:ef:1f:b5:4a:f5:e8:fc:41:83:43: 0c:af:29:8c:87:bf:c0:4a:ee:b3:15:5a:30:29:23: c4:0b:88:77:15:47:f3:45:90:33:94:b8:17:78:90: 73:f1:51:5a:65:99:a7:db:3e:74:34:9d:02:a9:ff: f9:38:7e:56:18:21:dc:e9:11:84:4a:67:67:2b:be: 02:e2:f5:7a:94:bd:d6:31:96:bc:35:d6:3b:79:0d: d0:d6:e7:2f:34:00:83:23:63:00:bb:63:b6:33:38: 20:78:dc:83:32:a4:91:95:d4:1b:54:ae:41:57:85: 6a:f5:13:57:26:48:a0:c5:e1:9a:e9:bd:af:6e:fc: b6:30:86:39:5b:b5:64:02:e0:9d:b2:49:e6:bd:2a: 96:29:e2:67:c3:06:b7:76:aa:a6:b5:b5:94:74:63: c7:c1:ff:cd:5d:fd:9d:f3:f0:4c:6b:d3:87:3d:9a: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A5:C8:E9:8A:01:05:0F:AF:E6:23:D5:53:AD:1B:44:B2:06:D1:F3 X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b2:20:a3:98:33:03:c4:be:57:20:ac:ff:d7:81:3b:c7:52: 81:85:15:e4:38:e0:0b:1e:5c:4a:17:6f:db:ec:23:c8:9a:ae: f6:93:eb:54:0d:f2:f6:e2:fb:1d:d9:1d:b5:07:c2:52:1f:a6: 03:9e:2e:ed:27:f0:40:d0:3c:c5:2e:94:14:a2:fd:40:0b:52: d8:f2:c7:04:8e:c0:3c:54:66:b3:82:1f:89:84:22:98:0d:90: ff:a3:15:b6:a1:2b:2b:8e:64:c9:3a:0e:67:b8:c4:00:47:5f: 92:be:0d:2b:7d:58:c4:fc:55:4b:31:dc:f9:fb:b0:f2:b2:29: 00:75:7c:e8:f6:36:53:83:66:a5:fd:13:d7:64:72:7a:6f:0a: bc:39:5e:a5:5e:03:d5:c5:83:ac:3e:62:2e:99:08:b4:0b:dd: 0d:a1:8a:c6:c8:fa:99:b4:5b:a0:d8:1a:ac:b2:50:85:9a:2f: 6d:58:d8:f8:e8:a8:b1:19:86:bc:72:e7:c8:fd:c1:8f:a5:8b: a5:d1:ef:ed:25:41:8b:26:8e:71:bd:78:b3:66:df:5f:a2:08: 5d:e0:9a:8a:74:c6:35:2f:1c:bd:e3:fa:34:44:64:a1:d8:e0: 8f:83:49:af:04:20:54:10:1a:8b:30:f0:54:53:cb:ab:4d:ad: e0:a5:75:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUxMDE5MDMxNTQzWhcNMjUxMDI2MDMxNTQzWjAYMRYwFAYD VQQDEw02OGY0NTdlMC0zMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7Ua6QIdVh/xv1HcPTjDtm9jmMbifmdIYpguYwo7JrHtl5++fVaUMutFbsPt LqxqVmWVfa8mS6UA3m9drq9y53kXDxFS0kx8vNlYc7ra8+8ftUr16PxBg0MMrymM h7/ASu6zFVowKSPEC4h3FUfzRZAzlLgXeJBz8VFaZZmn2z50NJ0Cqf/5OH5WGCHc 6RGESmdnK74C4vV6lL3WMZa8NdY7eQ3Q1ucvNACDI2MAu2O2MzggeNyDMqSRldQb VK5BV4Vq9RNXJkigxeGa6b2vbvy2MIY5W7VkAuCdsknmvSqWKeJnwwa3dqqmtbWU dGPHwf/NXf2d8/BMa9OHPZo4dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDelyOmK AQUPr+Yj1VOtG0SyBtHzMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3siCjmDMDxL5XIKz/14E7x1KBhRXkOOALHlxKF2/b7CPImq72k+tU DfL24vsd2R21B8JSH6YDni7tJ/BA0DzFLpQUov1AC1LY8scEjsA8VGazgh+JhCKY DZD/oxW2oSsrjmTJOg5nuMQAR1+Svg0rfVjE/FVLMdz5+7DysikAdXzo9jZTg2al /RPXZHJ6bwq8OV6lXgPVxYOsPmIumQi0C90NoYrGyPqZtFug2BqsslCFmi9tWNj4 6KixGYa8cufI/cGPpYul0e/tJUGLJo5xvXizZt9foghd4JqKdMY1Lxy94/o0RGSh 2OCPg0mvBCBUEBqLMPBUU8urTa3gpXVg -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:55 2025 by rpki-client