$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: R68Yzrj7MpYpludOd9kw7FrN5xIVZ/pdc3I8w7YzJf4= Subject key identifier: 94:C4:D9:47:5C:68:2F:2F:EC:C4:D1:07:92:A0:43:11:46:24:E5:2D Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 02E9 Signing time: Sat 09 Aug 2025 01:51:01 +0000 Manifest this update: Sat 09 Aug 2025 01:51:01 +0000 Manifest next update: Sat 16 Aug 2025 01:51:01 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: JQEXsExImYDLLDuZg0/z9lXkXDcl1wU3LpXiRO5AoDw=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Aug 9 01:51:01 2025 GMT Not After : Aug 16 01:51:01 2025 GMT Subject: CN=6896a985-e777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:b6:a5:29:2e:34:bb:e0:4c:d7:3e:b6:77: 4b:45:3a:ab:70:3d:43:f1:90:3c:8b:1d:44:5a:5f: f4:43:5a:41:7e:e8:f1:d6:14:f7:cb:ef:73:e6:18: ca:33:d9:4b:0d:41:1e:48:02:5b:0b:79:4e:41:96: a9:8f:07:88:9c:ac:47:17:cd:ed:ad:f5:59:60:49: 60:0e:bd:32:3e:21:83:69:34:b4:27:a8:47:b1:0a: 05:d2:9b:d0:c0:6a:c2:58:fd:6d:f1:f2:99:19:8e: ff:89:b0:e0:42:f9:72:f2:4f:91:07:db:1f:0a:d4: 55:07:b5:d5:22:b9:b0:e9:d9:8e:80:9e:b0:ad:8a: d7:5b:b7:c0:cc:17:df:2d:70:47:d8:92:cb:55:d9: 89:eb:3d:a2:f8:f1:ed:ae:bb:66:c5:ab:92:dd:73: 44:5c:a5:38:06:e9:61:4c:61:ca:a2:e7:c0:c2:15: 22:56:d6:d0:ad:4a:60:17:58:be:06:2f:9a:12:2a: 7b:01:85:d4:1f:a2:91:db:57:42:74:d2:0f:72:9a: ae:c3:5d:c4:4e:5d:e3:6f:2d:ed:b0:ea:81:5b:53: 21:9a:db:17:cc:ee:45:42:b6:9b:24:d8:88:a2:bd: 5f:da:d0:29:52:86:e4:42:ef:b0:b2:36:bd:c6:ef: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:D9:47:5C:68:2F:2F:EC:C4:D1:07:92:A0:43:11:46:24:E5:2D X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2f:f1:8a:fc:f8:48:ec:1d:f8:4f:a5:45:b9:e1:22:a1:e8: d6:46:4f:3a:9a:1c:fb:74:50:15:3e:36:1d:4a:83:0c:33:09: a7:60:ca:2d:e9:47:81:d3:b2:21:53:b9:a3:72:2c:6b:c2:42: 23:b6:c9:de:57:92:54:41:80:9b:b8:2f:fe:3d:d8:d1:4f:94: c1:32:f8:2b:7a:ef:fd:79:63:27:12:fd:02:b0:62:c2:6d:be: 15:1c:9c:e5:90:a8:d8:d4:36:f4:12:04:c6:ba:7c:19:65:4e: 3f:d7:e7:49:4d:a3:29:de:c0:6b:28:56:23:85:c7:40:ad:7f: 25:4f:2e:3d:02:e0:60:5a:2f:bb:a2:cd:04:6d:aa:81:1c:4b: 83:ad:70:1e:0d:72:ba:70:3d:c7:2e:e7:bc:e9:bd:15:cb:b8: 34:c3:12:07:1e:03:f7:ae:37:ba:ae:b3:af:6c:2d:d7:36:cc: 82:d5:71:8c:e7:59:49:4b:1e:f3:40:31:30:c8:c8:56:23:18: cb:55:79:ac:a3:2c:f0:7c:ab:9f:32:32:4d:51:f5:83:8a:d2: 40:5f:40:f7:ea:8e:6f:23:48:94:1a:cd:90:4e:b0:e0:2c:9f: 48:0e:57:56:ee:25:1c:33:fb:00:d2:8c:fc:4b:64:1a:65:a4: c1:55:2f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUwODA5MDE1MTAxWhcNMjUwODE2MDE1MTAxWjAYMRYwFAYD VQQDEw02ODk2YTk4NS1lNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApda2pSkuNLvgTNc+tndLRTqrcD1D8ZA8ix1EWl/0Q1pBfujx1hT3y+9z5hjK M9lLDUEeSAJbC3lOQZapjweInKxHF83trfVZYElgDr0yPiGDaTS0J6hHsQoF0pvQ wGrCWP1t8fKZGY7/ibDgQvly8k+RB9sfCtRVB7XVIrmw6dmOgJ6wrYrXW7fAzBff LXBH2JLLVdmJ6z2i+PHtrrtmxauS3XNEXKU4BulhTGHKoufAwhUiVtbQrUpgF1i+ Bi+aEip7AYXUH6KR21dCdNIPcpquw13ETl3jby3tsOqBW1MhmtsXzO5FQrabJNiI or1f2tApUobkQu+wsja9xu/erQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTE2Udc aC8v7MTRB5KgQxFGJOUtMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSL/GK/PhI7B34T6VFueEioejWRk86mhz7dFAVPjYdSoMMMwmnYMot 6UeB07IhU7mjcixrwkIjtsneV5JUQYCbuC/+PdjRT5TBMvgreu/9eWMnEv0CsGLC bb4VHJzlkKjY1Db0EgTGunwZZU4/1+dJTaMp3sBrKFYjhcdArX8lTy49AuBgWi+7 os0EbaqBHEuDrXAeDXK6cD3HLue86b0Vy7g0wxIHHgP3rje6rrOvbC3XNsyC1XGM 51lJSx7zQDEwyMhWIxjLVXmsoyzwfKufMjJNUfWDitJAX0D36o5vI0iUGs2QTrDg LJ9IDldW7iUcM/sA0oz8S2QaZaTBVS+v -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:08 2025 by rpki-client