$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: qVDtMUFdjUTPgt0hl9/xgz9BrDuWtUjM0200d63LocI= Subject key identifier: DB:9F:61:73:5D:1C:E8:F8:9A:EE:A8:5F:0D:D8:BF:8C:EF:94:AB:36 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 07F7 Signing time: Tue 22 Jul 2025 21:29:07 +0000 Manifest this update: Tue 22 Jul 2025 21:29:07 +0000 Manifest next update: Tue 29 Jul 2025 21:29:06 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: pzGOYyN66UWqwLwMeWplgc827SLjIlwRKO8e/92RKpk=) 2: 8E78E710480811F0ACF60C35C4F9AE02.roa (hash: z77md3m8c3h/BOMclCr7QuWWsIwVdVh0PS/50wCIFxI=) 3: 0B936B04519A11F097B33C66C4F9AE02.roa (hash: 1Y1ntLDIFXG0Y71B9AnkRxYD3oDia8ly4pVFW9UXge8=) 4: 7A97188E480811F0BF5AC634C4F9AE02.roa (hash: icKx4Ois0//CCRKXA9FyImW/RJbFJcA0Vztw+V1Ne7s=) 5: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: +KuGVCl8Z50MGZFbQ4D/yeTuZ3JhdbipU0AQQsVOceI=) 6: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM=) 7: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: iRd1/ZHW+2xlwhXyNjL/uUSU9QGRKaTGijCT9xr8AHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Jul 22 21:29:07 2025 GMT Not After : Jul 29 21:29:06 2025 GMT Subject: CN=688002a3-6ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:87:77:da:e1:40:00:d7:b9:b7:49:2a:ec: 35:51:75:34:61:19:d2:b6:79:67:72:ce:41:25:9a: da:0b:bd:cc:48:ec:07:99:91:64:ad:c4:22:cb:da: f2:d4:ea:d0:ba:b1:e4:f2:60:9b:87:d8:b2:03:62: 48:36:76:d4:14:c3:40:7e:1b:2a:52:9b:5d:5e:2c: 00:0a:51:f8:ee:e9:6c:c7:07:df:3c:38:2a:ae:7b: 8e:28:61:90:64:54:05:bf:77:ab:bd:40:ba:fa:29: 56:1e:57:1a:3e:84:2c:c5:95:40:b0:67:2a:fc:47: 12:68:2d:9f:5e:69:92:ba:51:7a:fb:c3:62:d1:27: c0:d8:5c:a9:a5:dc:23:63:c9:0e:3d:09:b4:ca:1a: 20:14:dd:e8:2f:d6:da:cd:29:3e:01:b1:37:b2:36: 00:83:4d:00:d1:a4:d5:89:ba:74:05:f8:5a:4b:f3: b6:e8:d0:d8:d7:73:64:1e:bf:a0:ee:0b:b2:7c:b2: d5:02:c2:b0:77:97:12:0c:d9:6c:f4:68:f4:e6:ea: d2:d5:4d:dc:88:d8:c7:14:bf:e4:90:c1:02:5e:ac: 3a:d2:db:1d:0c:3d:41:39:63:8b:71:82:02:ab:ca: 8b:7f:41:c5:57:8a:38:37:3e:b2:16:d2:22:16:e1: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9F:61:73:5D:1C:E8:F8:9A:EE:A8:5F:0D:D8:BF:8C:EF:94:AB:36 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:94:ac:c7:9b:74:44:ad:cd:85:97:2f:79:5f:f2:fc:23:5d: 2d:6a:fd:8d:a9:01:96:8a:37:31:e6:35:05:71:b0:6e:b9:01: 6f:2e:04:c2:3f:fe:dc:1a:22:9d:a8:70:2a:79:34:ed:cf:59: a7:35:5c:2f:fd:14:0a:4c:2c:24:b4:60:ef:b9:fa:b8:5e:ab: 48:16:83:7c:a0:1e:13:70:a6:b5:57:81:04:52:f6:9a:ec:c9: ba:87:bf:50:67:85:ac:c7:66:b8:31:90:83:33:ff:38:da:20: a6:2f:75:24:af:51:74:1b:66:10:3c:0a:3f:29:05:1f:00:e9: 07:20:80:f9:0f:4f:61:68:7a:c9:17:ef:86:13:48:c5:82:25: 62:4d:73:39:ed:62:ab:9b:85:70:89:29:89:3e:8e:75:08:68: 76:26:4f:c4:dd:8b:66:51:c3:54:dc:23:32:38:73:ae:ea:ef: d4:a6:0b:1f:51:1f:2a:4c:6a:57:45:84:46:93:06:5c:7a:5f: 26:84:b0:9e:e3:e7:3f:d4:e3:28:0e:03:bf:6b:c4:8b:5a:00: d8:34:1e:24:45:83:55:90:ac:5a:f2:e7:12:e0:44:b4:ae:94: 97:a7:b0:1c:24:64:c4:41:03:de:c5:19:63:f1:7b:0e:99:96: 2a:ed:99:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwNzIyMjEyOTA3WhcNMjUwNzI5MjEyOTA2WjAYMRYwFAYD VQQDEw02ODgwMDJhMy02ZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv2Hd9rhQADXubdJKuw1UXU0YRnStnlncs5BJZraC73MSOwHmZFkrcQiy9ry 1OrQurHk8mCbh9iyA2JINnbUFMNAfhsqUptdXiwAClH47ulsxwffPDgqrnuOKGGQ ZFQFv3ervUC6+ilWHlcaPoQsxZVAsGcq/EcSaC2fXmmSulF6+8Ni0SfA2Fyppdwj Y8kOPQm0yhogFN3oL9bazSk+AbE3sjYAg00A0aTVibp0BfhaS/O26NDY13NkHr+g 7guyfLLVAsKwd5cSDNls9Gj05urS1U3ciNjHFL/kkMECXqw60tsdDD1BOWOLcYIC q8qLf0HFV4o4Nz6yFtIiFuECfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNufYXNd HOj4mu6oXw3Yv4zvlKs2MB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1lKzHm3RErc2Fly95X/L8I10tav2NqQGWijcx5jUFcbBuuQFvLgTC P/7cGiKdqHAqeTTtz1mnNVwv/RQKTCwktGDvufq4XqtIFoN8oB4TcKa1V4EEUvaa 7Mm6h79QZ4Wsx2a4MZCDM/842iCmL3Ukr1F0G2YQPAo/KQUfAOkHIID5D09haHrJ F++GE0jFgiViTXM57WKrm4VwiSmJPo51CGh2Jk/E3YtmUcNU3CMyOHOu6u/Upgsf UR8qTGpXRYRGkwZcel8mhLCe4+c/1OMoDgO/a8SLWgDYNB4kRYNVkKxa8ucS4ES0 rpSXp7AcJGTEQQPexRlj8XsOmZYq7ZnP -----END CERTIFICATE-----Generated at Thu Jul 24 09:15:49 2025 by rpki-client