$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: by4Mztse1QqC5SzTHYGA7v0qGJZeQZZD1qNLqKPDK2s= Subject key identifier: 10:3D:81:BB:51:A2:3F:A0:3E:07:2F:0F:C7:4E:BB:35:49:03:A3:13 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 07 Signing time: Thu 07 Aug 2025 08:50:33 +0000 Manifest this update: Thu 07 Aug 2025 08:50:32 +0000 Manifest next update: Thu 14 Aug 2025 08:50:32 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: DKT2UptzK6kRjunUXdohnIGXlZxaHsARcj3VvA7er+I=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Aug 7 08:50:32 2025 GMT Not After : Aug 14 08:50:32 2025 GMT Subject: CN=689468d8-60ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:fe:56:52:0d:da:46:0e:69:49:1e:1f:f5: d6:f8:a5:6d:b2:60:5f:6f:cd:cf:a2:85:3a:33:51: a3:e1:a7:9f:fa:a2:d2:98:d8:76:10:65:c5:d1:b2: de:4b:4c:04:c8:3c:11:75:97:8c:94:cd:f2:d4:b4: 44:c1:38:dd:5c:42:33:7a:29:32:7c:87:7a:c4:9a: 5f:13:2e:b7:64:49:bf:6e:c5:04:22:31:e5:57:15: a4:f5:fb:7b:b6:c1:db:94:68:c2:df:75:fe:a5:c7: cc:56:42:51:0f:46:5f:fc:e5:d8:e5:38:5d:50:70: 5f:e8:1c:61:d6:8b:80:3d:50:55:fd:c5:c6:12:0e: be:5b:53:e7:71:00:7b:b9:28:b9:60:7e:43:6c:be: 2e:51:16:b4:9b:82:60:bb:8d:57:24:f4:2a:ed:4d: ef:84:2d:27:3b:c8:72:18:25:32:70:18:3b:0e:c3: 6c:d3:fb:75:42:a9:44:dd:fe:14:61:f7:eb:56:24: 4c:b4:06:d1:bd:13:12:02:97:03:c0:7e:5a:a6:7a: 33:61:5b:cf:81:3e:a3:65:2d:d4:1f:2e:ce:29:a0: bd:88:64:35:89:4a:48:f5:86:6d:94:72:86:b3:e7: 73:bd:eb:94:65:3e:bb:bc:2e:f1:08:9f:10:f0:05: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:81:BB:51:A2:3F:A0:3E:07:2F:0F:C7:4E:BB:35:49:03:A3:13 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:24:fd:f4:5a:e5:b9:ed:d3:5a:e4:27:f9:1f:1a:de:a9:cc: 4f:fe:9c:3a:4b:df:62:d3:5e:8a:22:72:a9:cc:2e:9f:d3:93: a2:03:ce:c1:aa:f9:2c:30:20:d9:7f:c8:b4:f4:4e:5e:40:5a: 08:52:e4:e2:74:bc:f9:f4:bc:dd:08:fa:8b:c3:9d:ee:29:d2: fd:42:a0:69:5e:96:00:de:2e:f4:7f:ab:63:80:68:3b:a6:a4: 14:6b:09:6b:3e:50:22:b2:f7:d8:07:19:2d:74:91:c3:45:d9: 46:12:50:25:ad:26:80:1f:6b:be:dd:6f:2b:81:bf:c3:2b:75: 81:6f:69:1a:56:56:75:e3:8f:c7:90:ac:b2:1d:a9:f2:64:a9: a4:3f:84:4a:93:af:11:8f:74:da:43:42:a3:36:e4:db:c0:58: 44:bc:ad:e0:ea:d1:bb:d1:2b:f3:9a:9a:78:09:34:c1:8b:b5: 75:41:e7:1e:20:a7:e8:18:35:bf:1a:b1:dc:06:9f:32:c4:9b: 5f:2d:f3:02:50:77:f2:a4:68:0c:23:aa:13:c7:11:66:65:01: 2c:3e:ca:c3:40:9f:aa:10:dc:c1:6e:2d:b0:46:13:c2:af:c3: 7c:3c:aa:e2:14:5f:38:ae:73:ff:ca:8d:ab:96:a2:4a:02:81: 5c:e8:56:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTA4MDcwODUwMzJaFw0yNTA4MTQwODUwMzJaMBgxFjAUBgNV BAMTDTY4OTQ2OGQ4LTYwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDASP5WUg3aRg5pSR4f9db4pW2yYF9vzc+ihTozUaPhp5/6otKY2HYQZcXRst5L TATIPBF1l4yUzfLUtETBON1cQjN6KTJ8h3rEml8TLrdkSb9uxQQiMeVXFaT1+3u2 wduUaMLfdf6lx8xWQlEPRl/85djlOF1QcF/oHGHWi4A9UFX9xcYSDr5bU+dxAHu5 KLlgfkNsvi5RFrSbgmC7jVck9CrtTe+ELSc7yHIYJTJwGDsOw2zT+3VCqUTd/hRh 9+tWJEy0BtG9ExIClwPAflqmejNhW8+BPqNlLdQfLs4poL2IZDWJSkj1hm2Ucoaz 53O965RlPru8LvEInxDwBRCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUED2Bu1Gi P6A+By8Px067NUkDoxMwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFok/fRa5bnt01rkJ/kfGt6pzE/+nDpL32LTXooicqnMLp/Tk6IDzsGq +SwwINl/yLT0Tl5AWghS5OJ0vPn0vN0I+ovDne4p0v1CoGlelgDeLvR/q2OAaDum pBRrCWs+UCKy99gHGS10kcNF2UYSUCWtJoAfa77dbyuBv8MrdYFvaRpWVnXjj8eQ rLIdqfJkqaQ/hEqTrxGPdNpDQqM25NvAWES8reDq0bvRK/OamngJNMGLtXVB5x4g p+gYNb8asdwGnzLEm18t8wJQd/KkaAwjqhPHEWZlASw+ysNAn6oQ3MFuLbBGE8Kv w3w8quIUXziuc//KjauWokoCgVzoVh0= -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:23 2025 by rpki-client