$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: FV9j6XWvaI/MnU0zUcunnfj6DabCPDJdnXVYIrCa7aI= Subject key identifier: 31:52:19:8E:21:76:FD:10:08:81:73:12:DE:EA:99:22:D7:48:82:65 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 2C Signing time: Sun 19 Oct 2025 11:13:13 +0000 Manifest this update: Sun 19 Oct 2025 11:13:13 +0000 Manifest next update: Sun 26 Oct 2025 11:13:13 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: LYQUuhK8qTl7vSZK/zGpHzbAeaEAt0kqltOZCjTeJBE=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Oct 19 11:13:13 2025 GMT Not After : Oct 26 11:13:13 2025 GMT Subject: CN=68f4c7c9-5279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:20:d1:ab:3f:6e:33:80:91:53:0a:98:01: 09:0e:2e:92:7b:a7:e7:61:f2:35:61:a7:4e:1e:6c: f5:24:aa:07:c6:83:14:3a:91:00:9b:7f:ac:d2:e5: d4:8d:c2:88:9b:27:2a:8b:c7:07:29:0f:ef:45:37: 54:13:69:7c:71:e5:1a:4b:93:f6:4d:62:af:3e:bf: a2:de:99:12:c0:c1:73:46:0a:0d:06:3b:e3:2a:72: 66:24:df:2f:b5:be:89:af:2a:69:a8:f6:d4:5e:6e: 2b:d1:81:b6:a8:70:96:5b:ca:82:49:a2:61:a7:52: 86:ed:d3:79:81:03:5d:3f:80:9e:93:de:b5:02:5b: 3e:fb:93:d9:0a:40:d0:6e:e4:38:01:83:57:e1:87: 18:84:9e:cb:af:fa:db:b0:2b:75:b3:98:4d:e0:b4: 69:cc:29:3d:3f:10:7a:8c:a8:36:6d:8b:41:d7:0c: f6:0b:b6:73:cf:70:17:02:8f:cf:39:90:f6:0a:75: 9e:3a:0a:89:47:c0:8c:62:26:fc:b3:d1:22:84:d0: 90:a3:ca:90:18:98:c8:74:39:6d:f1:3c:63:a6:a7: db:d7:fb:3e:48:91:f4:5e:5b:3d:df:3a:a4:37:0c: 38:23:4a:de:94:e6:ab:c0:1f:fc:b9:1c:d8:e3:3a: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:19:8E:21:76:FD:10:08:81:73:12:DE:EA:99:22:D7:48:82:65 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:36:aa:21:1b:58:e7:81:5d:06:25:02:af:39:65:87:89:47: 86:2d:22:74:37:b1:68:6a:23:09:00:be:0c:48:47:3b:31:0b: 07:aa:e8:f8:22:60:09:54:72:4d:c4:b3:52:fc:db:c3:dd:ad: 8a:2d:e9:b0:29:df:11:5b:b6:82:ae:db:6b:15:45:da:bd:47: 2a:cf:a1:77:13:f7:ef:a9:b3:63:ef:c4:88:9d:26:3f:71:0c: 87:75:9e:49:41:a5:1f:fb:6f:3d:f4:53:a5:0c:4d:1b:6f:7d: 75:e0:3b:57:e2:35:b7:e9:23:e4:62:bf:b7:63:52:92:e0:98: df:35:81:f8:6f:f5:ed:8a:15:cc:c9:69:77:84:08:c1:ae:86: ea:69:c7:ff:c8:a7:10:62:12:7d:e9:0b:b7:6f:92:cb:77:ec: 42:ad:bb:44:70:d6:1c:03:d9:dc:00:d0:db:44:88:df:7c:ea: f4:65:ab:d3:a6:3f:3d:7b:10:eb:e7:0b:cc:3f:07:b4:ac:27: ee:73:a0:e4:72:24:12:dd:60:83:49:02:69:cb:d3:49:6c:e6: be:e9:24:54:45:c7:d9:8f:e0:7f:12:01:86:1f:36:8d:1d:95: 3c:f1:d7:62:b8:a3:28:06:67:1c:1f:69:5d:e1:fb:2f:64:d2: 2d:e4:bc:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTEwMTkxMTEzMTNaFw0yNTEwMjYxMTEzMTNaMBgxFjAUBgNV BAMTDTY4ZjRjN2M5LTUyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY1yDRqz9uM4CRUwqYAQkOLpJ7p+dh8jVhp04ebPUkqgfGgxQ6kQCbf6zS5dSN woibJyqLxwcpD+9FN1QTaXxx5RpLk/ZNYq8+v6LemRLAwXNGCg0GO+MqcmYk3y+1 vomvKmmo9tRebivRgbaocJZbyoJJomGnUobt03mBA10/gJ6T3rUCWz77k9kKQNBu 5DgBg1fhhxiEnsuv+tuwK3WzmE3gtGnMKT0/EHqMqDZti0HXDPYLtnPPcBcCj885 kPYKdZ46ColHwIxiJvyz0SKE0JCjypAYmMh0OW3xPGOmp9vX+z5IkfReWz3fOqQ3 DDgjSt6U5qvAH/y5HNjjOiJJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMVIZjiF2 /RAIgXMS3uqZItdIgmUwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAE2qiEbWOeBXQYlAq85ZYeJR4YtInQ3sWhqIwkAvgxIRzsxCweq6Pgi YAlUck3Es1L828PdrYot6bAp3xFbtoKu22sVRdq9RyrPoXcT9++ps2PvxIidJj9x DId1nklBpR/7bz30U6UMTRtvfXXgO1fiNbfpI+Riv7djUpLgmN81gfhv9e2KFczJ aXeECMGuhuppx//IpxBiEn3pC7dvkst37EKtu0Rw1hwD2dwA0NtEiN986vRlq9Om Pz17EOvnC8w/B7SsJ+5zoORyJBLdYINJAmnL00ls5r7pJFRFx9mP4H8SAYYfNo0d lTzx12K4oygGZxwfaV3h+y9k0i3kvCg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:37 2025 by rpki-client