$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: tTNxg87r6gT/E/NT0SEEqdQx620iARKZHpOIybAnMjA= Subject key identifier: 72:EC:91:BB:29:71:7C:FC:1D:3A:09:86:61:0A:74:CD:CD:0C:EE:3E Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B87 Signing time: Sun 10 Aug 2025 19:02:42 +0000 Manifest this update: Sun 10 Aug 2025 19:02:41 +0000 Manifest next update: Sun 17 Aug 2025 19:02:41 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: Kh5hAA3HzM0Eg8jNBMtatNeb3iw0AILOY1D3+TaqDwI=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Aug 10 19:02:41 2025 GMT Not After : Aug 17 19:02:41 2025 GMT Subject: CN=6898ecd1-1222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:31:c3:8b:21:5a:5d:54:d4:a5:de:0d:36: ec:7f:4e:b0:6c:40:ff:90:04:32:56:60:cd:b8:9b: c9:16:e5:5b:e9:49:e6:41:a3:01:7f:fc:79:e1:c0: b0:5c:c0:1d:ad:44:28:d1:f6:ca:be:58:f0:8d:bc: 7c:1b:df:57:9c:fd:3c:27:c4:1c:28:bf:1f:f5:b9: 80:ab:31:29:cb:f3:c5:4f:7f:72:fa:01:da:db:17: 64:84:11:5d:f6:1b:92:a4:f9:58:39:42:39:4c:33: 34:50:11:33:7c:a7:0f:96:a8:06:40:37:0c:3a:26: 3a:5f:55:6f:d7:ae:fb:04:ff:fb:54:78:4a:51:6a: 93:86:e0:88:1e:35:a7:ed:b2:c1:d7:74:ba:df:2b: 8f:c5:ee:7c:45:e7:47:56:2e:8e:38:f5:f7:8a:16: 68:d6:5c:35:3f:a8:0a:0a:f1:42:6a:67:4a:77:90: 57:8e:ec:c8:b1:fd:dd:2f:2a:55:9f:42:ff:ec:bb: 3a:84:d9:be:24:1a:c7:8f:1f:4f:cc:79:27:9e:46: ec:86:29:39:fd:34:e3:01:c3:75:84:23:b1:6a:9a: 96:82:1c:15:fe:3d:d7:81:37:cb:0f:04:cf:a0:da: ba:d6:56:01:15:97:42:1c:ef:cf:2b:e0:5b:ac:ea: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EC:91:BB:29:71:7C:FC:1D:3A:09:86:61:0A:74:CD:CD:0C:EE:3E X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:49:84:6a:6f:b1:4f:ef:5c:4d:97:97:64:b8:d3:cd:b0: 7e:36:5c:66:ae:f3:18:da:bd:78:45:ad:cd:5a:8e:1e:ab:1c: b0:24:ce:cf:08:03:49:09:cf:82:c9:cb:1b:dc:8b:b0:f7:92: 62:87:38:ca:9b:d3:84:b5:ca:d0:52:5b:ee:13:1a:a9:8f:8d: 8b:c6:cf:62:38:11:6c:0f:78:2a:f3:79:ed:44:c3:1b:4e:6a: fe:01:c4:14:36:c9:53:4f:7f:d0:af:6d:07:35:a2:76:9e:2a: 98:5f:49:5c:e2:c3:de:e5:14:a4:a7:c4:1e:a3:75:36:0f:cb: 64:85:41:8a:d3:10:10:eb:e8:8d:6b:67:ac:64:ba:62:ef:70: bb:ef:d0:20:d3:4a:af:af:e0:c5:ce:70:77:2e:8a:72:24:6f: 92:3f:9f:71:ad:a7:a1:2a:d2:55:ef:aa:f6:99:c6:95:3c:a6: 16:9e:e3:5a:e5:64:2c:45:de:3a:c3:30:57:8a:4f:a5:cd:90: 76:03:ac:d3:80:3e:2a:23:73:fd:57:59:a4:e4:30:4b:b4:1a: 10:99:77:07:38:41:20:3d:7e:72:8c:4e:f6:89:06:03:86:ba: c7:1b:64:eb:92:c1:45:99:9f:66:a7:e4:7d:3e:70:b5:e8:da: 1f:49:31:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwODEwMTkwMjQxWhcNMjUwODE3MTkwMjQxWjAYMRYwFAYD VQQDEw02ODk4ZWNkMS0xMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ0xw4shWl1U1KXeDTbsf06wbED/kAQyVmDNuJvJFuVb6UnmQaMBf/x54cCw XMAdrUQo0fbKvljwjbx8G99XnP08J8QcKL8f9bmAqzEpy/PFT39y+gHa2xdkhBFd 9huSpPlYOUI5TDM0UBEzfKcPlqgGQDcMOiY6X1Vv1677BP/7VHhKUWqThuCIHjWn 7bLB13S63yuPxe58RedHVi6OOPX3ihZo1lw1P6gKCvFCamdKd5BXjuzIsf3dLypV n0L/7Ls6hNm+JBrHjx9PzHknnkbshik5/TTjAcN1hCOxapqWghwV/j3XgTfLDwTP oNq61lYBFZdCHO/PK+BbrOqIfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLskbsp cXz8HToJhmEKdM3NDO4+MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWFkmEam+xT+9cTZeXZLjTzbB+NlxmrvMY2r14Ra3NWo4eqxywJM7P CANJCc+Cycsb3Iuw95JihzjKm9OEtcrQUlvuExqpj42Lxs9iOBFsD3gq83ntRMMb Tmr+AcQUNslTT3/Qr20HNaJ2niqYX0lc4sPe5RSkp8Qeo3U2D8tkhUGK0xAQ6+iN a2esZLpi73C779Ag00qvr+DFznB3LopyJG+SP59xraehKtJV76r2mcaVPKYWnuNa 5WQsRd46wzBXik+lzZB2A6zTgD4qI3P9V1mk5DBLtBoQmXcHOEEgPX5yjE72iQYD hrrHG2TrksFFmZ9mp+R9PnC16NofSTFc -----END CERTIFICATE-----Generated at Mon Aug 11 04:32:47 2025 by rpki-client