$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json) Hash identifier: a4+6rIeOXZ5//mK4Vzmj1zGi8bSNdP1ll34D4mlAqa4= Subject key identifier: 0D:07:87:92:D5:BA:C5:85:85:F3:C7:A5:9C:2D:C1:A1:A6:19:6B:8E Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft Manifest number: 34 Signing time: Sat 09 Aug 2025 05:23:31 +0000 Manifest this update: Sat 09 Aug 2025 05:23:30 +0000 Manifest next update: Sat 16 Aug 2025 05:23:30 +0000 Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: n8YC9lKnWR+N3lGMmev1SBo4TLxO7pkreeM9Zm+5cOI=) 2: 75BE1B766DDF11F0BDC0DA4AC4F9AE02.roa (hash: xGZZlrDNDkFaLniK4xDu2fVUb+QoGgFz7ExHydYZgMQ=) 3: A1BECC526DDF11F0868E7C4BC4F9AE02.roa (hash: YXuf5BTEPj7fnB9oxoKkcmwqAfw/328NMNkT0ipByB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Validity Not Before: Aug 9 05:23:30 2025 GMT Not After : Aug 16 05:23:30 2025 GMT Subject: CN=6896db53-27ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:40:cf:ab:16:1f:ce:d3:6d:d8:a2:ac:c4: 63:c7:7c:44:70:bf:fc:3b:51:48:14:f3:92:ee:ec: f4:36:07:6a:fc:25:f4:fa:0f:5f:6f:e9:8e:05:e1: bb:e8:be:f3:d7:f3:a9:05:65:e1:68:e5:46:87:47: d2:e0:4d:b0:3f:2d:7c:16:b7:a6:25:f3:a7:b1:8c: 2b:d4:9b:bc:0a:25:78:09:c1:d9:45:4f:0f:2f:4d: 67:35:b2:79:dd:66:4b:59:08:27:a6:93:57:31:48: 34:8c:7e:ee:c8:a3:69:4d:5f:80:61:a5:92:1e:5b: 10:d9:07:55:42:d5:15:ac:2f:79:6a:70:50:ff:92: cb:a5:a7:29:69:92:16:6e:a5:b4:bb:17:fb:a3:6d: 66:86:9c:9f:c4:85:1a:4d:13:4c:27:1d:bc:e7:71: b8:85:4e:1c:81:b1:e2:59:e7:51:6b:02:a3:3e:7a: ec:74:c7:4e:2a:ef:7f:b3:ef:c3:98:4c:f4:a1:68: 01:cd:b6:a6:8d:97:6c:52:f6:b1:76:67:b0:e7:85: 6a:9c:ec:d5:1e:d4:2e:03:af:9c:af:5a:26:73:96: bf:5f:96:c9:f9:ea:fb:7c:17:c8:07:fa:6e:58:e8: b3:5c:ca:82:b0:55:e2:0b:b2:b9:41:9c:b1:0f:f8: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:87:92:D5:BA:C5:85:85:F3:C7:A5:9C:2D:C1:A1:A6:19:6B:8E X509v3 Authority Key Identifier: keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:35:0d:c0:99:8f:5b:3b:92:08:fb:c3:cc:b4:0f:4f:c2:80: 95:8b:2a:b1:35:73:f9:a7:73:0b:8f:70:8d:4d:fc:57:37:59: 5a:b9:59:46:c4:7b:fb:f8:88:12:1d:a1:94:36:05:ac:48:e8: f2:26:c8:81:86:a1:da:e3:b7:c0:9e:ee:e5:57:39:6e:a1:c0: 84:6e:91:32:21:f2:d6:04:fc:08:cc:46:9a:aa:7a:aa:d5:50: 04:52:75:e8:6a:3e:ff:79:d4:50:c3:fd:35:f5:3d:58:04:8f: 83:39:3d:9c:b0:88:ce:fe:10:3c:dd:fa:a3:d5:5d:a8:d9:c6: 00:15:68:3d:1c:97:d0:38:aa:ef:ff:9f:0d:7d:dd:d3:a4:48: 42:0c:7a:69:02:3e:b3:0a:dc:bf:6d:2f:f1:8f:11:6a:91:14: e1:be:34:1f:d9:d5:b0:20:90:d7:9d:bb:b5:d5:cf:9d:e6:82: 00:7d:21:61:e9:46:83:4e:7e:c7:56:16:ac:1d:76:f3:58:08: 72:21:06:64:57:66:6f:f5:61:4b:8e:6f:19:b4:6b:84:5a:1d: d1:59:19:da:d3:16:03:72:9d:8b:24:59:ab:81:56:04:4f:d9: 95:96:25:cf:55:84:a9:35:bc:0d:ae:5c:23:5c:90:aa:ac:ea: 18:09:10:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0E3MjExMC8GA1UEBRMoMkVGNDY5NTQ0M0E0QzBDN0IzNEVBOTFCNjJBM0Q4RjhF NDE0NTE3RTAeFw0yNTA4MDkwNTIzMzBaFw0yNTA4MTYwNTIzMzBaMBgxFjAUBgNV BAMTDTY4OTZkYjUzLTI3ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5s0DPqxYfztNt2KKsxGPHfERwv/w7UUgU85Lu7PQ2B2r8JfT6D19v6Y4F4bvo vvPX86kFZeFo5UaHR9LgTbA/LXwWt6Yl86exjCvUm7wKJXgJwdlFTw8vTWc1snnd ZktZCCemk1cxSDSMfu7Io2lNX4BhpZIeWxDZB1VC1RWsL3lqcFD/ksulpylpkhZu pbS7F/ujbWaGnJ/EhRpNE0wnHbzncbiFThyBseJZ51FrAqM+eux0x04q73+z78OY TPShaAHNtqaNl2xS9rF2Z7DnhWqc7NUe1C4Dr5yvWiZzlr9flsn56vt8F8gH+m5Y 6LNcyoKwVeILsrlBnLEP+MErAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDQeHktW6 xYWF88elnC3BoaYZa44wHwYDVR0jBBgwFoAULvRpVEOkwMezTqkbYqPY+OQUUX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3QTcyLzQ0REU2OUNFMkIx NDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01lelRxa2JZcVBZLU9RVVVY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHZScFZFT2t3TWV6VHFrYllxUFktT1FVVVg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 QTcyLzQ0REU2OUNFMkIxNDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01l elRxa2JZcVBZLU9RVVVYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABY1DcCZj1s7kgj7w8y0D0/CgJWLKrE1c/mncwuPcI1N/Fc3WVq5WUbE e/v4iBIdoZQ2BaxI6PImyIGGodrjt8Ce7uVXOW6hwIRukTIh8tYE/AjMRpqqeqrV UARSdehqPv951FDD/TX1PVgEj4M5PZywiM7+EDzd+qPVXajZxgAVaD0cl9A4qu// nw193dOkSEIMemkCPrMK3L9tL/GPEWqRFOG+NB/Z1bAgkNedu7XVz53mggB9IWHp RoNOfsdWFqwddvNYCHIhBmRXZm/1YUuObxm0a4RaHdFZGdrTFgNynYskWauBVgRP 2ZWWJc9VhKk1vA2uXCNckKqs6hgJEP4= -----END CERTIFICATE-----Generated at Sun Aug 10 18:50:48 2025 by rpki-client