$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: gAgBYcQZpFhGwJgbxbr3YGW3IW2HnMTYh+1rE/ooh8E= Subject key identifier: FE:65:44:34:E4:09:37:FB:30:EB:96:90:35:D0:AC:65:FC:A0:CF:F0 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B69 Signing time: Thu 12 Jun 2025 18:53:53 +0000 Manifest this update: Thu 12 Jun 2025 18:53:52 +0000 Manifest next update: Thu 19 Jun 2025 18:53:52 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: CjGRWk5l6lwXbQgx5n+u9cV+4p3wVgtdtiOjTQMgMqg=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Jun 12 18:53:52 2025 GMT Not After : Jun 19 18:53:52 2025 GMT Subject: CN=684b2240-e8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:06:6e:ce:3b:70:0d:ba:7d:e6:5a:59:61: bf:9f:6a:99:33:b0:a5:47:fd:70:a9:9c:dd:7f:51: 36:2e:53:3c:93:a9:c2:8c:8b:8b:97:b6:fb:df:8e: c1:f4:35:6a:68:e6:39:7d:0e:34:35:35:27:9b:ce: 16:28:e7:3e:71:a9:e7:e6:58:17:b0:48:d1:d5:6a: e2:37:43:3c:18:12:d5:b3:f8:52:1b:3a:ce:04:bc: 05:57:fb:e0:ea:fe:1d:a8:f1:b2:5c:f9:6e:fb:d7: d6:77:14:2f:3a:1b:0b:30:c8:bc:1f:da:8f:f7:6f: 43:ee:79:06:7e:24:ed:8d:7f:b7:b8:cc:71:d1:88: 0c:3a:80:55:71:29:da:ea:c6:50:ba:00:88:47:d1: 52:a4:10:29:76:61:06:59:46:dc:e8:e5:28:44:2b: af:1f:bc:db:0a:2a:51:41:0b:9f:86:da:23:94:3e: e8:63:63:cb:50:f6:0e:5e:31:61:58:ef:c8:25:ad: c3:a2:be:71:21:1e:6f:5d:15:f6:fd:d5:03:27:41: d0:81:d5:eb:0c:03:07:5f:eb:4e:a9:24:ae:ab:79: 84:57:8e:6b:fc:6e:32:67:2f:29:e7:22:88:16:1f: ae:86:f0:83:a0:39:6a:22:6e:50:66:4b:eb:f0:de: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:65:44:34:E4:09:37:FB:30:EB:96:90:35:D0:AC:65:FC:A0:CF:F0 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a9:91:0e:d4:ef:a6:9e:34:ba:35:6e:b5:25:04:55:3c:96: cb:19:9b:f7:fc:be:b1:d0:ba:8c:84:80:37:48:59:a5:aa:7a: 7c:72:0a:6b:36:54:d2:a3:d8:b7:cc:3c:02:1d:24:54:2a:8f: c7:17:46:70:15:a8:1e:59:e8:7b:5e:bd:d7:98:73:8a:91:0d: 27:fe:8f:3b:33:26:91:44:84:b5:74:81:22:f4:4c:29:c6:ae: 4b:3c:44:15:53:ea:d3:24:c7:95:de:33:32:14:7a:b0:47:52: 8e:3d:0c:cc:82:0c:ad:f6:f4:ad:97:fe:90:22:95:11:05:c5: ef:6d:e0:75:2f:cd:de:ad:30:4e:07:c7:0f:da:92:8d:6b:d1: c5:3c:37:dc:92:61:b3:a5:99:0b:96:db:ce:e3:fb:c8:21:ba: 68:95:a3:ee:32:ca:78:ff:3e:fb:16:e7:d3:11:77:50:d1:85: 54:ef:8c:d2:77:82:b8:53:0e:d0:86:f2:c4:71:59:65:62:7b: 76:55:43:5d:6e:6d:98:77:74:a9:a1:69:63:4a:84:52:83:d7: a9:8d:38:d0:f3:ac:2b:e1:76:a3:e5:d9:29:09:0d:3a:ef:d3: 0e:f4:32:a8:3a:89:1a:e2:59:eb:c9:3d:7c:4c:fa:9a:12:b2: 9d:6a:24:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwNjEyMTg1MzUyWhcNMjUwNjE5MTg1MzUyWjAYMRYwFAYD VQQDEw02ODRiMjI0MC1lOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04kGbs47cA26feZaWWG/n2qZM7ClR/1wqZzdf1E2LlM8k6nCjIuLl7b7347B 9DVqaOY5fQ40NTUnm84WKOc+cann5lgXsEjR1WriN0M8GBLVs/hSGzrOBLwFV/vg 6v4dqPGyXPlu+9fWdxQvOhsLMMi8H9qP929D7nkGfiTtjX+3uMxx0YgMOoBVcSna 6sZQugCIR9FSpBApdmEGWUbc6OUoRCuvH7zbCipRQQufhtojlD7oY2PLUPYOXjFh WO/IJa3Dor5xIR5vXRX2/dUDJ0HQgdXrDAMHX+tOqSSuq3mEV45r/G4yZy8p5yKI Fh+uhvCDoDlqIm5QZkvr8N5DIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5lRDTk CTf7MOuWkDXQrGX8oM/wMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqZEO1O+mnjS6NW61JQRVPJbLGZv3/L6x0LqMhIA3SFmlqnp8cgpr NlTSo9i3zDwCHSRUKo/HF0ZwFageWeh7Xr3XmHOKkQ0n/o87MyaRRIS1dIEi9Ewp xq5LPEQVU+rTJMeV3jMyFHqwR1KOPQzMggyt9vStl/6QIpURBcXvbeB1L83erTBO B8cP2pKNa9HFPDfckmGzpZkLltvO4/vIIbpolaPuMsp4/z77FufTEXdQ0YVU74zS d4K4Uw7QhvLEcVllYnt2VUNdbm2Yd3SpoWljSoRSg9epjTjQ86wr4Xaj5dkpCQ06 79MO9DKoOoka4lnryT18TPqaErKdaiT7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:38 2025 by rpki-client