$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: UZMLhMJdXTRD63zDSm6BydkF1JsSzIr+1oVNQRHgS68= Subject key identifier: 6F:A7:5C:DA:E7:64:41:C9:F9:3A:E5:DB:33:40:5A:D1:58:F8:44:C7 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 0840 Signing time: Sun 02 Nov 2025 21:01:59 +0000 Manifest this update: Sun 02 Nov 2025 21:01:58 +0000 Manifest next update: Sun 09 Nov 2025 21:01:58 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: hZm2dah/cunuRlUooIGkzRn6d2nd8kcBIvcLOkc5lUU=) 2: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (hash: Rz/l4cwIWK/gcFPFzENAaQQtEAacYXl5yCLeBdnkcaA=) 3: BC38A630AFB511F0912BFF37C4F9AE02.roa (hash: oPBgnVvNsWUsWyM6MTNBUeG3AJr025Hszcims1Fy1pQ=) 4: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: UUEsJz/WQSBHmwrRY/8iQ6JdsqT1T0sucZ71LaxIHRw=) 5: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c=) 6: F539311C7DA011F08A71610EC4F9AE02.roa (hash: rIaR04bxVatwfOhoJKTzdjL/92gsYJAaafix9cN000U=) 7: C32677AA984111F0A8CC3773C4F9AE02.roa (hash: zvt5PKHfXMN6X7f4V6clzwtgf+Vm+WQejAV68riLY3A=) 8: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: c/n6DX8r7nJjVUXwPVxV5kzEZ7bIPC1UqZ86XGA9if0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Nov 2 21:01:58 2025 GMT Not After : Nov 9 21:01:58 2025 GMT Subject: CN=6907c6c6-060c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:cd:e0:2c:2b:1a:c2:b2:8b:4a:f8:bc:3c: a7:6c:81:cf:81:82:82:e4:a2:1f:0c:21:fa:7a:33: c9:13:59:a9:06:fa:38:58:24:8a:78:1d:74:25:20: 4c:0d:3e:90:1b:cc:06:a6:70:dd:f3:ce:39:52:80: a6:88:6a:a1:49:9e:33:ae:f9:c8:05:df:df:d6:87: 9e:b7:2b:81:cb:7b:06:1f:04:8e:e6:96:a3:30:50: 0a:4d:06:a9:91:69:8b:64:a3:8e:1c:6c:32:9e:a3: 22:f3:d4:e4:a7:d5:76:70:99:ee:75:4f:a3:07:09: 1e:da:06:57:df:77:d4:1b:68:da:0c:e0:50:54:79: fb:35:8c:46:08:58:81:d2:29:0f:94:93:35:e3:1f: be:dc:f5:61:0d:25:32:6e:af:f3:33:a7:11:c7:cf: 50:da:e6:aa:3c:4c:8d:e0:e8:3f:60:ca:01:9d:3c: 48:b5:2a:24:35:e7:4f:6d:17:c1:b8:95:a9:c2:e1: fe:25:d1:59:77:d3:09:fa:22:b7:b7:ad:59:4c:42: d2:0c:d3:3d:40:da:6d:cc:80:da:a2:12:12:c2:3b: 8a:41:1b:3c:84:91:4e:81:49:c6:c9:97:ce:f0:e6: 1b:b3:1a:21:11:66:f4:3f:22:5c:fa:e2:a6:d1:ed: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A7:5C:DA:E7:64:41:C9:F9:3A:E5:DB:33:40:5A:D1:58:F8:44:C7 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:bc:f0:c0:aa:ec:57:e8:bd:b6:ff:90:c4:02:4a:60:db:5f: 1d:60:45:2d:69:09:01:3b:69:e9:91:23:f6:3d:8b:5c:6f:e8: 25:06:72:9f:f3:07:25:4e:53:82:a6:67:9f:e2:2d:96:92:94: df:ea:87:2a:8d:9f:99:a0:18:39:29:35:f2:bf:df:25:10:e4: 84:a5:83:62:c0:17:ca:cf:85:ad:6b:50:ac:60:f6:05:5a:b2: ca:87:d9:ac:14:7e:3c:cc:2c:94:2e:35:f2:0f:43:72:f2:b5: 3a:11:08:0d:45:ff:e4:98:cc:ca:e0:b4:b8:31:3d:92:9f:95: dd:1c:90:53:fa:c3:bb:bd:d8:93:b0:ef:ff:e8:8a:53:c3:ca: 96:ce:90:fa:e5:a9:b2:d9:7f:ad:d7:06:4f:26:38:46:4a:af: c3:f5:24:48:41:b9:07:cf:71:24:89:e0:be:6f:e6:81:9d:f7: 96:c0:02:d0:c3:03:29:eb:ef:8f:b8:2e:bd:04:2c:78:69:d4: 2d:77:69:b9:07:f6:67:6e:e8:05:4f:08:58:ff:f8:89:bd:73: a7:21:89:07:6a:2e:5d:a0:29:f7:11:89:f4:de:12:54:13:4d: a2:f0:60:17:66:42:67:45:74:a6:9c:48:c3:5f:dc:2e:d6:ec: 97:60:dd:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUxMTAyMjEwMTU4WhcNMjUxMTA5MjEwMTU4WjAYMRYwFAYD VQQDEw02OTA3YzZjNi0wNjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+jN4CwrGsKyi0r4vDynbIHPgYKC5KIfDCH6ejPJE1mpBvo4WCSKeB10JSBM DT6QG8wGpnDd8845UoCmiGqhSZ4zrvnIBd/f1oeetyuBy3sGHwSO5pajMFAKTQap kWmLZKOOHGwynqMi89Tkp9V2cJnudU+jBwke2gZX33fUG2jaDOBQVHn7NYxGCFiB 0ikPlJM14x++3PVhDSUybq/zM6cRx89Q2uaqPEyN4Og/YMoBnTxItSokNedPbRfB uJWpwuH+JdFZd9MJ+iK3t61ZTELSDNM9QNptzIDaohISwjuKQRs8hJFOgUnGyZfO 8OYbsxohEWb0PyJc+uKm0e0OVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+nXNrn ZEHJ+Trl2zNAWtFY+ETHMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrvPDAquxX6L22/5DEAkpg218dYEUtaQkBO2npkSP2PYtcb+glBnKf 8wclTlOCpmef4i2WkpTf6ocqjZ+ZoBg5KTXyv98lEOSEpYNiwBfKz4Wta1CsYPYF WrLKh9msFH48zCyULjXyD0Ny8rU6EQgNRf/kmMzK4LS4MT2Sn5XdHJBT+sO7vdiT sO//6IpTw8qWzpD65amy2X+t1wZPJjhGSq/D9SRIQbkHz3EkieC+b+aBnfeWwALQ wwMp6++PuC69BCx4adQtd2m5B/ZnbugFTwhY//iJvXOnIYkHai5doCn3EYn03hJU E02i8GAXZkJnRXSmnEjDX9wu1uyXYN0I -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:01 2025 by rpki-client