$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: 0l76OvhKWA/R9PyYYQZ4JsJqHTJXHQfVin9HB5NRkiA= Subject key identifier: 94:0C:EF:DA:84:AB:CD:B2:AD:32:3C:D0:71:9E:C6:4A:24:E7:57:A5 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 0F Signing time: Sat 23 Aug 2025 08:19:16 +0000 Manifest this update: Sat 23 Aug 2025 08:19:16 +0000 Manifest next update: Sat 30 Aug 2025 08:19:16 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: CJCIXAV5+0efGcfAU4vQ/hboWf3sRDceUvufciOH5wo=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Aug 23 08:19:16 2025 GMT Not After : Aug 30 08:19:16 2025 GMT Subject: CN=68a97984-8390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:c0:90:f1:bf:9b:61:8d:d7:38:45:2c:67: 85:bd:8f:f2:b4:95:a0:ac:b3:6c:5c:46:33:5f:58: 76:a2:ed:d8:92:16:20:0e:78:45:92:58:d4:0c:29: 94:de:9c:57:0f:01:0d:e7:37:b6:ce:34:40:32:df: 14:9d:20:cf:8e:fd:7c:df:08:9e:d1:a9:fd:49:6b: a8:45:b8:f7:de:9b:fc:02:82:c3:03:ea:14:6e:05: c1:62:27:27:e4:3e:96:37:26:21:af:e9:08:6f:ac: 02:2b:dc:96:bd:3d:ae:88:9a:50:f5:58:0f:d0:97: 10:e8:c1:cf:e9:cd:d2:4e:fc:3d:7a:01:5d:c1:a2: 61:9c:67:64:92:13:c5:59:04:75:6e:1f:e6:b9:77: c3:cf:c2:77:cd:a6:6f:29:ed:b1:8b:3a:29:06:ef: a5:59:ec:af:15:3c:dc:0b:45:49:7e:ce:e5:49:21: d8:1c:79:42:09:50:f6:b3:9b:f6:b9:4f:a7:f6:01: 2e:46:bc:a4:f5:d5:0e:8f:07:72:ef:ac:16:1a:c4: e1:b8:33:60:43:9a:6a:e8:08:73:a5:cf:3e:1b:65: 58:d3:4c:c4:e5:aa:ec:19:4a:17:89:33:d4:79:1d: 6c:a0:7a:8a:7b:a1:35:d8:0b:4b:1c:16:13:fb:01: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0C:EF:DA:84:AB:CD:B2:AD:32:3C:D0:71:9E:C6:4A:24:E7:57:A5 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a9:07:ca:93:ba:ee:41:5c:84:62:86:c3:60:a7:e5:5d:8b: 70:4d:39:ed:3c:a4:c8:c0:fb:d2:52:fc:68:50:42:cb:67:1e: 8d:fd:c1:65:96:b9:3e:a5:8b:95:2c:36:be:a8:8d:df:7b:58: cc:5d:f6:4b:31:57:9e:b3:7c:9b:4f:ce:d0:e5:cc:c2:d7:c6: 70:36:e1:11:70:49:9d:27:39:95:52:f3:7d:95:a4:65:91:86: a5:bd:40:04:7f:e6:7c:30:7d:40:60:9b:23:fb:e9:5e:19:aa: 0e:9d:1b:78:3e:18:9d:b4:0c:bb:78:78:50:c9:1d:89:af:e0: 13:cb:fc:c2:fc:b8:10:46:a2:78:23:09:a3:04:5c:f3:09:fe: e4:f7:da:b5:bd:04:1f:4b:ff:f6:89:e5:9d:c3:ef:56:8b:ac: 65:0d:24:bd:7b:01:1d:fe:17:bf:a2:06:0d:0f:98:f1:05:ff: 02:97:57:03:92:58:e9:cd:53:bd:30:1a:7e:78:e4:c0:15:a9: ab:5b:8f:e5:8f:b7:e2:55:8e:d4:2a:6a:3c:6a:fe:6d:31:54: a7:4f:aa:49:76:e9:8a:c0:9b:5c:3e:c3:14:4a:e1:b6:cd:76: eb:5b:5f:e5:1b:7c:30:7e:09:8a:97:4d:94:0e:d4:25:c3:38: b8:58:db:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTA4MjMwODE5MTZaFw0yNTA4MzAwODE5MTZaMBgxFjAUBgNV BAMTDTY4YTk3OTg0LTgzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMnMCQ8b+bYY3XOEUsZ4W9j/K0laCss2xcRjNfWHai7diSFiAOeEWSWNQMKZTe nFcPAQ3nN7bONEAy3xSdIM+O/XzfCJ7Rqf1Ja6hFuPfem/wCgsMD6hRuBcFiJyfk PpY3JiGv6QhvrAIr3Ja9Pa6ImlD1WA/QlxDowc/pzdJO/D16AV3BomGcZ2SSE8VZ BHVuH+a5d8PPwnfNpm8p7bGLOikG76VZ7K8VPNwLRUl+zuVJIdgceUIJUPazm/a5 T6f2AS5GvKT11Q6PB3LvrBYaxOG4M2BDmmroCHOlzz4bZVjTTMTlquwZSheJM9R5 HWygeop7oTXYC0scFhP7AWeVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlAzv2oSr zbKtMjzQcZ7GSiTnV6UwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2pB8qTuu5BXIRihsNgp+Vdi3BNOe08pMjA+9JS/GhQQstnHo39wWWW uT6li5UsNr6ojd97WMxd9ksxV56zfJtPztDlzMLXxnA24RFwSZ0nOZVS832VpGWR hqW9QAR/5nwwfUBgmyP76V4Zqg6dG3g+GJ20DLt4eFDJHYmv4BPL/ML8uBBGongj CaMEXPMJ/uT32rW9BB9L//aJ5Z3D71aLrGUNJL17AR3+F7+iBg0PmPEF/wKXVwOS WOnNU70wGn545MAVqatbj+WPt+JVjtQqajxq/m0xVKdPqkl26YrAm1w+wxRK4bbN dutbX+UbfDB+CYqXTZQO1CXDOLhY2yM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:36 2025 by rpki-client