$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json) Hash identifier: FOgRe1tDpRx9I8t6zGV9euL7+Q855Rg1KVh+tSQzjaM= Subject key identifier: 5F:A9:9B:3B:2D:7C:B1:C8:ED:88:91:E1:29:73:5D:C4:1E:BA:5D:0E Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft Manifest number: 65 Signing time: Mon 03 Nov 2025 04:29:24 +0000 Manifest this update: Mon 03 Nov 2025 04:29:24 +0000 Manifest next update: Mon 10 Nov 2025 04:29:24 +0000 Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: 9fJesakcIbIMpHEE+mQQ0PGPNOP7D8xBc0mKIRXZ3co=) 2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: b16d+2kTdbON2ixe1jCa6GapHvNF5ngdixgV1f1xSyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Validity Not Before: Nov 3 04:29:24 2025 GMT Not After : Nov 10 04:29:24 2025 GMT Subject: CN=69082fa4-4fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:6f:05:9b:64:12:73:8d:ca:38:b5:17:f9: b9:d2:7a:5b:c4:d9:39:c0:f2:3b:e7:15:f5:c1:ba: a7:a6:53:b8:da:0c:72:f4:17:ce:47:25:b8:87:10: b6:db:65:d2:80:a0:ba:14:0d:ca:6d:5e:d3:86:38: 29:be:fc:17:f2:39:9b:90:33:65:a3:21:9c:63:34: a5:16:88:d4:cb:f5:2d:e0:fb:cf:ea:fe:21:f1:03: 0f:f0:05:19:77:f1:3a:73:a2:59:69:59:2e:68:15: f7:9b:80:f8:f0:b8:4b:e4:15:c7:04:d8:3f:d1:40: eb:8b:da:69:01:53:85:fd:24:b8:ed:a0:33:8d:0c: d4:15:a7:8f:73:5d:43:9c:59:9d:fb:e2:5d:e9:d3: b3:58:68:e3:37:d1:5d:3e:d6:a7:05:c4:21:16:e7: e1:25:54:c5:d8:d7:63:61:ab:76:fb:fe:60:68:71: 29:8a:72:41:db:32:36:57:fc:75:55:8d:67:38:f7: 37:30:a7:23:07:eb:46:16:60:ff:ee:db:fa:09:1a: 6c:3a:c0:fb:cb:1d:b5:8d:15:32:9c:6c:47:bf:2e: ee:18:59:82:5b:27:46:cd:ef:24:7e:51:1a:88:94: 3b:28:95:07:86:bb:bd:45:6b:b1:4b:4c:8b:2f:12: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A9:9B:3B:2D:7C:B1:C8:ED:88:91:E1:29:73:5D:C4:1E:BA:5D:0E X509v3 Authority Key Identifier: keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ef:78:bf:9e:23:74:82:b7:aa:87:ec:cb:cb:97:79:e5:9a: 4d:7d:80:e9:89:01:ab:22:d3:d7:5e:d3:57:94:f6:3d:ca:2a: 5b:e6:73:25:d7:ca:ff:00:75:8e:66:5a:4c:7b:d8:f4:43:68: e1:79:aa:00:78:ef:eb:55:ef:cb:c2:30:74:99:da:a7:cd:fc: b4:83:c2:d8:78:fc:eb:fe:f6:38:58:98:c6:77:44:1b:c1:3e: f8:b7:a1:69:c4:d4:f8:36:6c:69:dd:d3:48:5a:0a:f8:1a:aa: 78:96:e6:04:27:39:72:6a:cf:6c:d5:5a:c8:d0:5d:a1:78:b8: 63:a8:06:bb:3e:03:cc:00:0e:12:50:01:67:7f:c2:22:76:18: 6b:94:16:b5:6e:1b:b3:04:9c:0d:b1:78:bc:10:8d:ad:b5:ff: 4c:0c:86:18:06:4d:f0:52:0e:ea:6e:c4:00:c0:11:ad:df:9d: 3a:13:b4:94:b8:d3:9c:ed:8f:4a:79:5e:5f:ff:8d:9a:d8:9a: 93:85:db:15:8c:66:23:64:cc:a7:6a:7f:4f:e3:bb:9f:4f:0f: ee:47:e9:25:ae:3f:d8:79:c1:24:cb:06:58:9d:28:64:b9:76: b6:ee:15:75:18:a6:a2:17:0e:c7:27:5f:48:96:9b:82:ee:5d: 59:59:fe:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0E3MjExMC8GA1UEBRMoMkVGNDY5NTQ0M0E0QzBDN0IzNEVBOTFCNjJBM0Q4RjhF NDE0NTE3RTAeFw0yNTExMDMwNDI5MjRaFw0yNTExMTAwNDI5MjRaMBgxFjAUBgNV BAMTDTY5MDgyZmE0LTRmYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSF28Fm2QSc43KOLUX+bnSelvE2TnA8jvnFfXBuqemU7jaDHL0F85HJbiHELbb ZdKAoLoUDcptXtOGOCm+/BfyOZuQM2WjIZxjNKUWiNTL9S3g+8/q/iHxAw/wBRl3 8TpzollpWS5oFfebgPjwuEvkFccE2D/RQOuL2mkBU4X9JLjtoDONDNQVp49zXUOc WZ374l3p07NYaOM30V0+1qcFxCEW5+ElVMXY12Nhq3b7/mBocSmKckHbMjZX/HVV jWc49zcwpyMH60YWYP/u2/oJGmw6wPvLHbWNFTKcbEe/Lu4YWYJbJ0bN7yR+URqI lDsolQeGu71Fa7FLTIsvEtq/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX6mbOy18 scjtiJHhKXNdxB66XQ4wHwYDVR0jBBgwFoAULvRpVEOkwMezTqkbYqPY+OQUUX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3QTcyLzQ0REU2OUNFMkIx NDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01lelRxa2JZcVBZLU9RVVVY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHZScFZFT2t3TWV6VHFrYllxUFktT1FVVVg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 QTcyLzQ0REU2OUNFMkIxNDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01l elRxa2JZcVBZLU9RVVVYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEbveL+eI3SCt6qH7MvLl3nlmk19gOmJAasi09de01eU9j3KKlvmcyXX yv8AdY5mWkx72PRDaOF5qgB47+tV78vCMHSZ2qfN/LSDwth4/Ov+9jhYmMZ3RBvB Pvi3oWnE1Pg2bGnd00haCvgaqniW5gQnOXJqz2zVWsjQXaF4uGOoBrs+A8wADhJQ AWd/wiJ2GGuUFrVuG7MEnA2xeLwQja21/0wMhhgGTfBSDupuxADAEa3fnToTtJS4 05ztj0p5Xl//jZrYmpOF2xWMZiNkzKdqf0/ju59PD+5H6SWuP9h5wSTLBlidKGS5 drbuFXUYpqIXDscnX0iWm4LuXVlZ/hU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:32 2025 by rpki-client