$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: nQFB0IfvfKLphAGxP9Dk3yRXY2HZtzgikkGn2A5FyQw= Subject key identifier: 86:5D:60:87:DF:DD:51:69:10:6A:E2:88:3D:D0:6E:E2:4A:A5:9F:3A Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B7C Signing time: Sun 20 Jul 2025 19:08:33 +0000 Manifest this update: Sun 20 Jul 2025 19:08:32 +0000 Manifest next update: Sun 27 Jul 2025 19:08:32 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: akASBZc+RCnhsO3t/MTkU65u/Cp5wcaZ+OsU0/3gxN8=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Jul 20 19:08:32 2025 GMT Not After : Jul 27 19:08:32 2025 GMT Subject: CN=687d3eb1-6bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:e1:85:0c:c8:43:08:99:a8:e1:87:bd:5b: 43:09:69:2c:07:6a:48:15:dd:1f:9d:d2:55:be:9b: 69:52:ee:6a:13:0b:4c:12:9d:49:f9:70:5a:cf:f3: 7e:45:a2:d2:87:77:d2:4f:d2:a9:8e:ce:44:d7:63: 81:7a:fa:63:b5:23:68:3a:46:8d:eb:2c:c0:24:86: 49:7f:ab:e8:47:52:e4:38:40:8e:fb:08:cb:15:58: 9d:fe:e3:d3:fa:d0:19:bc:b0:08:68:0e:db:ca:4b: cc:e1:d7:12:1a:bc:16:d6:1f:91:c2:11:3d:12:55: bf:09:54:3b:02:a3:39:54:a7:31:1a:9d:ed:de:d1: 87:09:fe:8a:80:00:e2:04:15:32:3f:86:62:50:9d: 25:77:6a:b3:66:86:6d:27:85:39:00:8a:fb:d5:a4: 04:65:65:d4:5d:e5:7f:eb:1d:a0:20:ba:9a:2f:29: 38:4a:3c:aa:64:31:91:f7:bc:68:e0:bf:4c:11:80: 8d:e5:3e:f4:37:72:fe:63:66:08:68:69:bb:c2:be: aa:5e:48:3e:39:9d:bb:a5:02:85:1c:b7:6c:40:f2: 15:60:69:9a:68:24:1b:e5:96:c9:21:ce:0b:b3:9f: 1c:a3:ed:d9:d5:9c:f1:66:da:30:e8:d0:43:c5:5e: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:60:87:DF:DD:51:69:10:6A:E2:88:3D:D0:6E:E2:4A:A5:9F:3A X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:3c:78:aa:bb:61:52:4d:0c:ba:28:05:dc:f0:17:80:a9:30: e0:7d:23:7c:b5:a0:87:96:f7:7c:0a:96:f9:8f:d8:4b:ed:76: cd:76:d7:b8:15:74:60:b5:f9:da:90:ea:5e:75:29:d4:4d:6c: 58:ac:77:e5:d4:21:e0:15:bc:50:8d:b0:cd:ed:ef:75:3d:4d: c9:34:e3:b2:35:7a:0e:9d:8f:80:04:8c:89:bb:2f:84:e3:14: 44:36:0d:3b:4d:94:3b:ec:40:36:e9:12:fc:b0:fa:d6:fe:5f: 9e:fd:ab:31:44:1f:18:4a:01:8a:95:72:de:7c:39:0c:97:d0: c3:8b:41:b1:0d:b9:d5:a8:cc:a9:7e:1c:da:d9:05:ba:52:7b: 55:50:8b:b2:bb:ca:31:3d:0f:1b:38:f9:c7:f5:3a:d1:4c:31: cc:19:3f:66:d0:ec:58:76:65:ba:11:0c:4d:dd:fa:eb:c4:85: 4f:1a:ed:91:6d:26:65:ba:e4:8d:b0:6c:5a:37:37:e7:6d:99: 9d:17:fc:3e:4d:95:1e:83:d6:ae:23:4a:bb:e1:6a:0e:c3:e6: 41:cb:05:73:10:f7:73:97:9f:40:0a:bf:1c:76:74:77:97:7f: 99:b9:20:39:79:ad:76:26:f3:ff:e5:da:5b:bf:7f:4a:df:51: f3:34:b2:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwNzIwMTkwODMyWhcNMjUwNzI3MTkwODMyWjAYMRYwFAYD VQQDEw02ODdkM2ViMS02YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEjhhQzIQwiZqOGHvVtDCWksB2pIFd0fndJVvptpUu5qEwtMEp1J+XBaz/N+ RaLSh3fST9Kpjs5E12OBevpjtSNoOkaN6yzAJIZJf6voR1LkOECO+wjLFVid/uPT +tAZvLAIaA7bykvM4dcSGrwW1h+RwhE9ElW/CVQ7AqM5VKcxGp3t3tGHCf6KgADi BBUyP4ZiUJ0ld2qzZoZtJ4U5AIr71aQEZWXUXeV/6x2gILqaLyk4SjyqZDGR97xo 4L9MEYCN5T70N3L+Y2YIaGm7wr6qXkg+OZ27pQKFHLdsQPIVYGmaaCQb5ZbJIc4L s58co+3Z1ZzxZtow6NBDxV6gmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZdYIff 3VFpEGriiD3QbuJKpZ86MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwPHiqu2FSTQy6KAXc8BeAqTDgfSN8taCHlvd8Cpb5j9hL7XbNdte4 FXRgtfnakOpedSnUTWxYrHfl1CHgFbxQjbDN7e91PU3JNOOyNXoOnY+ABIyJuy+E 4xRENg07TZQ77EA26RL8sPrW/l+e/asxRB8YSgGKlXLefDkMl9DDi0GxDbnVqMyp fhza2QW6UntVUIuyu8oxPQ8bOPnH9TrRTDHMGT9m0OxYdmW6EQxN3frrxIVPGu2R bSZluuSNsGxaNzfnbZmdF/w+TZUeg9auI0q74WoOw+ZBywVzEPdzl59ACr8cdnR3 l3+ZuSA5ea12JvP/5dpbv39K31HzNLKE -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:35 2025 by rpki-client