$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: s7b8SSLgikLfuAVSUsaxHOsEpThtxE6Isgdnz6cXAGw= Subject key identifier: 2A:F6:75:2E:1B:96:54:E3:4C:74:F6:44:64:BC:59:E3:BB:39:0B:27 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 081A Signing time: Sat 06 Sep 2025 21:23:35 +0000 Manifest this update: Sat 06 Sep 2025 21:23:35 +0000 Manifest next update: Sat 13 Sep 2025 21:23:35 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: EeTnhLSUfs3FCAMGs35bUMnXXfja4carWB7HYJcbIIs=) 2: EBA9F66C895911F0B21B8C5EC4F9AE02.roa (hash: 632OLcaH2Ce4tGgKF5z6q15VrLS/joH9Wyhj5vpSVok=) 3: 0B936B04519A11F097B33C66C4F9AE02.roa (hash: zQu4u2JO01TmQyY0bqceKLhLEt8+ZErPoKlMzyxcG3I=) 4: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: UUEsJz/WQSBHmwrRY/8iQ6JdsqT1T0sucZ71LaxIHRw=) 5: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c=) 6: F539311C7DA011F08A71610EC4F9AE02.roa (hash: sGFVeVlQiEcMhmkTknSI/d7oBH7XwuBkFL1jG9NNeJQ=) 7: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: c/n6DX8r7nJjVUXwPVxV5kzEZ7bIPC1UqZ86XGA9if0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Sep 6 21:23:35 2025 GMT Not After : Sep 13 21:23:35 2025 GMT Subject: CN=68bca657-ef8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:b8:90:f1:3d:96:38:cb:03:5c:86:93:c5: 75:2e:59:5a:77:e1:e5:64:11:a8:a5:2c:6e:32:ea: e0:c3:40:9f:b4:5e:a2:a6:2f:6b:34:64:56:ae:59: 4c:3f:f8:58:1f:13:25:8b:22:79:72:29:4f:d0:d0: d3:59:b9:ed:fb:24:ba:0c:5a:0b:07:f0:4e:42:1d: 94:a7:5a:aa:98:3a:15:77:e7:92:5a:d5:e9:e7:b1: 27:ee:75:31:61:46:62:3a:74:07:da:91:8f:3f:e2: 7d:cd:74:d5:4e:cc:e2:69:4e:29:65:5e:3b:af:71: 4e:81:c2:3e:65:8d:2f:f5:f7:0d:1f:c6:6e:eb:07: b4:05:63:e0:eb:6b:5e:36:69:9e:c3:c5:0f:e3:f7: 58:d7:b5:db:57:a4:e7:2b:52:58:46:ca:a5:cc:8e: bc:05:95:a5:4f:47:14:82:c7:32:bf:56:73:88:e6: b1:99:cf:3e:f1:37:82:63:f4:7d:5f:c3:34:e2:d2: 23:b9:62:66:1a:d7:ec:ac:a1:bd:ca:e2:ca:9e:cc: 2c:2a:ed:55:ed:e9:93:5b:7e:75:38:28:44:ee:e2: d0:39:7a:9c:a7:d5:36:cf:1e:cb:46:73:04:48:fa: 4c:bd:f8:94:4a:c7:71:6e:e8:a6:ae:5b:41:76:8f: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:75:2E:1B:96:54:E3:4C:74:F6:44:64:BC:59:E3:BB:39:0B:27 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:50:7c:e6:c5:80:4a:13:bc:39:2f:9a:df:25:fe:87:be:e7: 4c:50:e0:6a:fe:aa:83:2d:45:df:e3:f7:af:91:9c:5c:07:f4: 7d:f7:97:b1:4e:e8:1b:f0:42:2d:53:39:db:59:af:63:26:80: f2:07:68:36:88:b8:7b:59:27:ba:f4:2a:92:6d:ab:80:f4:21: c3:d2:f4:c9:12:79:23:bb:f9:23:18:58:21:e5:0c:0a:75:22: 37:7d:f7:31:26:c2:4b:81:c7:89:8f:fa:62:3a:0b:bd:14:11: b6:d1:09:27:27:f5:30:83:94:1a:01:28:88:e5:9f:10:92:f7: cd:7b:ec:2c:6e:3b:88:fe:83:03:b9:9e:b1:ab:47:a6:7f:8a: 41:3c:30:e5:81:4b:2b:81:78:c1:e7:b5:14:d8:5b:a6:a9:cb: d6:ef:9b:63:fa:92:53:58:15:96:bb:4a:7e:33:99:76:20:be: c2:7a:03:1c:48:90:40:a2:84:98:51:b7:ef:73:d0:8a:b2:c6: 46:bb:7d:f4:90:93:39:45:df:b7:d4:d0:5a:5c:58:90:7c:1d: a8:50:7f:62:17:12:44:2f:b2:25:ee:07:bf:40:4a:a6:28:70: 85:d1:56:0b:cd:99:f7:93:a6:a9:b8:b4:2d:5d:0c:42:ed:4c: 27:71:6b:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwOTA2MjEyMzM1WhcNMjUwOTEzMjEyMzM1WjAYMRYwFAYD VQQDEw02OGJjYTY1Ny1lZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4C4kPE9ljjLA1yGk8V1Lllad+HlZBGopSxuMurgw0CftF6ipi9rNGRWrllM P/hYHxMliyJ5cilP0NDTWbnt+yS6DFoLB/BOQh2Up1qqmDoVd+eSWtXp57En7nUx YUZiOnQH2pGPP+J9zXTVTsziaU4pZV47r3FOgcI+ZY0v9fcNH8Zu6we0BWPg62te Nmmew8UP4/dY17XbV6TnK1JYRsqlzI68BZWlT0cUgscyv1ZziOaxmc8+8TeCY/R9 X8M04tIjuWJmGtfsrKG9yuLKnswsKu1V7emTW351OChE7uLQOXqcp9U2zx7LRnME SPpMvfiUSsdxbuimrltBdo8r9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr2dS4b llTjTHT2RGS8WeO7OQsnMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1UHzmxYBKE7w5L5rfJf6HvudMUOBq/qqDLUXf4/evkZxcB/R995ex Tugb8EItUznbWa9jJoDyB2g2iLh7WSe69CqSbauA9CHD0vTJEnkju/kjGFgh5QwK dSI3ffcxJsJLgceJj/piOgu9FBG20QknJ/Uwg5QaASiI5Z8QkvfNe+wsbjuI/oMD uZ6xq0emf4pBPDDlgUsrgXjB57UU2FumqcvW75tj+pJTWBWWu0p+M5l2IL7CegMc SJBAooSYUbfvc9CKssZGu330kJM5Rd+31NBaXFiQfB2oUH9iFxJEL7Il7ge/QEqm KHCF0VYLzZn3k6apuLQtXQxC7UwncWvr -----END CERTIFICATE-----Generated at Mon Sep 8 08:49:41 2025 by rpki-client