$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft File: LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json) Hash identifier: /Hn9SWYdBw+rlweR7Kwh7aae5oObOG2hA6YSne/TE20= Subject key identifier: 44:25:F0:26:C2:59:E4:44:02:C7:FB:8D:5B:E7:3F:02:43:CA:3D:A5 Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 Certificate issuer: /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft Manifest number: 0BFE Signing time: Fri 24 Oct 2025 19:25:42 +0000 Manifest this update: Fri 24 Oct 2025 19:25:42 +0000 Manifest next update: Fri 31 Oct 2025 19:25:42 +0000 Files and hashes: 1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: DCWlHjzhmtGy2gZxTms5352Y+PC8nHL6j0v3RMjsKSE=) 2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: IjPsFFHCvUaMlnUaOFvCNKSeXcsnIqpFaL3Dn7jwLDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Validity Not Before: Oct 24 19:25:42 2025 GMT Not After : Oct 31 19:25:42 2025 GMT Subject: CN=68fbd2b6-c3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:70:71:96:b9:a4:c2:15:13:53:dd:04:74:7a: 4a:79:ea:bd:ee:b1:40:14:53:80:26:06:b0:81:d9: f2:1a:64:da:29:5f:2a:3e:aa:7e:07:c7:25:b1:a7: a3:f5:b4:5e:e0:7e:01:e2:26:1b:72:39:28:8f:07: f8:48:3c:a4:68:dc:b5:55:67:d7:55:9c:7a:e6:86: 44:61:43:59:39:4c:2d:6c:5a:4b:e9:37:e3:8a:a4: 0d:da:b4:37:60:17:52:a1:7b:9b:57:38:54:b6:7a: 72:08:1a:68:b6:06:48:15:31:d0:af:ab:93:6b:fb: 38:49:fd:ea:58:89:d0:5c:91:82:bf:85:2d:bf:2d: ee:98:2c:7b:80:19:ba:48:d1:1e:80:41:ae:46:77: 45:36:33:96:de:ce:4e:62:99:bb:30:2c:93:b4:41: fa:48:28:eb:e6:95:3b:bb:a7:1c:ab:93:ef:b0:90: 30:49:af:2a:fd:73:59:0e:f4:5d:9d:fb:86:48:57: bb:36:2a:4b:2d:db:4d:15:18:ec:6e:d4:2b:84:7b: 11:ec:7e:83:c6:cc:d4:db:13:46:e0:88:ec:b2:f0: 33:2e:13:d8:e2:d5:c3:ef:ca:a0:9d:ad:c6:90:bd: 4f:9c:85:93:ea:d2:d2:3a:7b:c0:8b:74:8c:3d:a2: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:25:F0:26:C2:59:E4:44:02:C7:FB:8D:5B:E7:3F:02:43:CA:3D:A5 X509v3 Authority Key Identifier: keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6d:7c:cc:30:c4:d4:2f:7c:61:17:9c:d2:d7:13:81:4b:c6: 4c:fd:62:c3:42:c9:6d:54:54:e4:1a:c9:11:28:60:5f:4a:bb: 17:3c:5b:8d:5f:fb:00:03:c2:e5:f7:d4:1e:f4:71:13:9f:98: 8e:68:43:e1:36:36:17:77:db:b6:9f:75:85:c3:5b:b8:da:d2: 00:3c:6d:d1:95:18:2e:9a:ba:14:46:ae:56:08:8d:a8:b1:4f: 0e:9d:ff:ee:8b:be:b8:d3:80:d1:59:53:a6:4a:bb:cd:9e:e0: 95:78:5c:47:88:c0:84:d9:7b:d1:cc:a9:26:d2:29:0c:0f:be: 41:67:16:d9:41:98:09:30:6c:68:11:c6:7d:b0:c3:41:2d:92: a6:78:38:6a:26:57:b4:80:9c:d3:65:cc:63:4c:dd:78:29:b9: bb:f1:fb:a7:c7:39:68:4c:85:c0:88:77:60:0b:fd:2e:75:40: 99:13:94:56:50:4d:bb:22:09:6f:83:ed:f4:fd:e5:c1:30:09: 89:d9:63:91:71:41:4a:c0:85:d9:bb:5b:0f:1a:18:66:d8:b6: 72:c0:fd:a9:43:2f:1b:79:49:df:cc:f8:40:b3:1c:f6:1c:68: a4:15:3e:b2:5c:d6:85:b1:05:83:d8:29:36:1d:55:30:64:02: 9e:08:c6:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4 OTQ1RkNBQjkwHhcNMjUxMDI0MTkyNTQyWhcNMjUxMDMxMTkyNTQyWjAYMRYwFAYD VQQDEw02OGZiZDJiNi1jM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nBxlrmkwhUTU90EdHpKeeq97rFAFFOAJgawgdnyGmTaKV8qPqp+B8clsaej 9bRe4H4B4iYbcjkojwf4SDykaNy1VWfXVZx65oZEYUNZOUwtbFpL6TfjiqQN2rQ3 YBdSoXubVzhUtnpyCBpotgZIFTHQr6uTa/s4Sf3qWInQXJGCv4Utvy3umCx7gBm6 SNEegEGuRndFNjOW3s5OYpm7MCyTtEH6SCjr5pU7u6ccq5PvsJAwSa8q/XNZDvRd nfuGSFe7NipLLdtNFRjsbtQrhHsR7H6DxszU2xNG4IjssvAzLhPY4tXD78qgna3G kL1PnIWT6tLSOnvAi3SMPaJ3MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQl8CbC WeREAsf7jVvnPwJDyj2lMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5 cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS80NzMzOTU2NjIwOEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4 eHd4a1lsR2Z4dldKUmZ5cmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAybXzMMMTUL3xhF5zS1xOBS8ZM/WLDQsltVFTkGskRKGBfSrsXPFuN X/sAA8Ll99Qe9HETn5iOaEPhNjYXd9u2n3WFw1u42tIAPG3RlRgumroURq5WCI2o sU8Onf/ui76404DRWVOmSrvNnuCVeFxHiMCE2XvRzKkm0ikMD75BZxbZQZgJMGxo EcZ9sMNBLZKmeDhqJle0gJzTZcxjTN14Kbm78funxzloTIXAiHdgC/0udUCZE5RW UE27Iglvg+30/eXBMAmJ2WORcUFKwIXZu1sPGhhm2LZywP2pQy8beUnfzPhAsxz2 HGikFT6yXNaFsQWD2Ck2HVUwZAKeCMZZ -----END CERTIFICATE-----Generated at Fri Oct 24 23:12:27 2025 by rpki-client