$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: 4il9MPRR9PW8BIigxgOM+xKuiwoGbSjvgQ8AffYCcAo= Subject key identifier: 91:39:8C:8D:A4:6D:D6:83:7C:5C:E0:1A:63:24:26:9B:BB:87:04:8E Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 34 Signing time: Wed 05 Nov 2025 07:47:50 +0000 Manifest this update: Wed 05 Nov 2025 07:47:50 +0000 Manifest next update: Wed 12 Nov 2025 07:47:50 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: tj+AuLTgvjD1+zVhHdE6icraZtX1NBRY6iGnLttcMkI=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Nov 5 07:47:50 2025 GMT Not After : Nov 12 07:47:50 2025 GMT Subject: CN=690b0126-d7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:93:4d:54:56:08:ad:28:4c:cb:4d:ab:39: 4d:87:da:98:4a:66:80:ba:4e:71:b5:50:8d:bd:09: ba:5c:a1:0b:dd:4b:25:93:63:1a:1a:2b:ae:c8:75: f6:ab:b7:d9:16:30:07:b1:10:01:02:e0:07:6a:ea: b0:85:d1:b5:fc:1a:b2:b1:a6:7f:dd:22:eb:f3:2a: 20:be:8e:7d:c5:4e:04:7c:04:36:8b:d9:d0:eb:5c: e2:7d:11:30:4b:63:58:7a:4c:26:50:de:ff:f8:69: 9b:48:37:aa:db:27:37:17:a7:5c:cc:92:1e:cb:0f: 21:ed:8a:7f:f1:70:d4:69:ae:11:d2:ba:7e:98:57: 68:28:b5:d7:b6:e1:54:80:69:de:28:1c:8b:d7:9a: 6d:21:42:38:be:e9:dc:54:a9:44:99:f4:3b:6e:c1: a9:90:f0:40:59:8d:db:e3:3c:00:1f:23:1e:68:9e: 34:58:83:6f:76:e4:41:03:31:8b:42:e7:27:fe:6a: d6:af:64:91:da:0a:d6:b0:21:6c:ec:53:5b:a8:b4: 41:15:dc:e4:c5:47:fc:6e:20:7e:d9:98:13:1a:6d: 20:ed:98:46:c5:f4:cc:a8:c2:28:d0:12:ad:b6:4c: 3e:16:77:2f:d2:27:bf:4a:bd:e4:5b:81:ff:ed:df: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:39:8C:8D:A4:6D:D6:83:7C:5C:E0:1A:63:24:26:9B:BB:87:04:8E X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:df:e3:b2:02:ea:a5:a0:db:fb:b6:8d:bf:e2:81:0e:9f:cb: f0:8c:2e:d9:a7:f0:e4:68:6d:51:58:9f:b3:92:26:26:f1:1e: 7b:c0:7e:92:d6:0e:b9:57:b2:02:2b:04:95:84:28:7a:fb:91: 6d:6d:b2:d7:1c:38:81:75:b8:05:61:1d:2b:12:55:ad:3a:fa: 9d:61:f6:20:ba:d1:94:29:f4:b1:95:95:c5:26:4c:ae:4c:af: 2d:8b:f4:d0:2d:9b:9e:ab:2c:83:4f:39:05:44:4d:e0:31:9a: ba:f8:46:57:ca:a3:e8:b1:11:30:b2:18:ee:fb:ad:fb:87:7c: 99:92:19:6a:1e:6e:4f:aa:08:ca:b7:81:de:45:4a:4d:fb:9e: be:15:b6:21:bb:fa:61:1b:ab:f8:62:3d:9b:89:7c:2b:7f:d9: 18:6f:42:c8:8c:2e:94:2c:3c:42:33:c1:ff:98:dd:6c:70:30: f7:e3:66:39:28:94:99:f2:d7:66:11:d9:a6:c8:96:ec:67:e2: cd:e1:b2:1d:0c:d4:ae:cd:c7:ee:84:9e:3c:72:e6:96:42:8d: a6:91:08:85:c9:e8:50:38:74:ff:80:5a:7d:ea:c0:ee:e7:c9: d6:e0:27:0e:3e:06:bc:af:e6:09:b3:14:58:74:02:81:cf:13: ee:cf:a3:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTExMDUwNzQ3NTBaFw0yNTExMTIwNzQ3NTBaMBgxFjAUBgNV BAMTDTY5MGIwMTI2LWQ3YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2XJNNVFYIrShMy02rOU2H2phKZoC6TnG1UI29CbpcoQvdSyWTYxoaK67Idfar t9kWMAexEAEC4Adq6rCF0bX8GrKxpn/dIuvzKiC+jn3FTgR8BDaL2dDrXOJ9ETBL Y1h6TCZQ3v/4aZtIN6rbJzcXp1zMkh7LDyHtin/xcNRprhHSun6YV2gotde24VSA ad4oHIvXmm0hQji+6dxUqUSZ9DtuwamQ8EBZjdvjPAAfIx5onjRYg2925EEDMYtC 5yf+atavZJHaCtawIWzsU1uotEEV3OTFR/xuIH7ZmBMabSDtmEbF9MyowijQEq22 TD4Wdy/SJ79KveRbgf/t3+N9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkTmMjaRt 1oN8XOAaYyQmm7uHBI4wHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3f47IC6qWg2/u2jb/igQ6fy/CMLtmn8ORobVFYn7OSJibxHnvAfpLW DrlXsgIrBJWEKHr7kW1tstccOIF1uAVhHSsSVa06+p1h9iC60ZQp9LGVlcUmTK5M ry2L9NAtm56rLINPOQVETeAxmrr4RlfKo+ixETCyGO77rfuHfJmSGWoebk+qCMq3 gd5FSk37nr4VtiG7+mEbq/hiPZuJfCt/2RhvQsiMLpQsPEIzwf+Y3WxwMPfjZjko lJny12YR2abIluxn4s3hsh0M1K7Nx+6Enjxy5pZCjaaRCIXJ6FA4dP+AWn3qwO7n ydbgJw4+Bryv5gmzFFh0AoHPE+7Po/s= -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:53 2025 by rpki-client