$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft File: LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json) Hash identifier: mgLzZrboVmbTa7+bdFcgHjqO8FDD5+Cj2L6dEebNCzM= Subject key identifier: 8C:CF:91:E0:42:F3:8A:41:CC:0B:C0:D9:C5:5C:44:7C:9C:95:36:B1 Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 Certificate issuer: /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Certificate serial: 0BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft Manifest number: 0BDD Signing time: Wed 20 Aug 2025 18:55:57 +0000 Manifest this update: Wed 20 Aug 2025 18:55:57 +0000 Manifest next update: Wed 27 Aug 2025 18:55:57 +0000 Files and hashes: 1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: P2C34p8T/gUB7BRkMcuWeTw9CRCN88Fx0Vv7z0iqOy0=) 2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: IjPsFFHCvUaMlnUaOFvCNKSeXcsnIqpFaL3Dn7jwLDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Validity Not Before: Aug 20 18:55:57 2025 GMT Not After : Aug 27 18:55:57 2025 GMT Subject: CN=68a61a3d-14c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:35:f3:5a:e2:97:f9:ab:45:e4:d4:56:1f: ed:08:6e:05:e5:72:98:74:53:c0:55:42:33:5d:d8: ef:d5:98:d4:e7:58:0e:48:ee:b4:bf:c5:c4:65:d7: 45:7f:ef:0e:fe:4a:3a:34:4e:b8:17:79:da:dc:4c: 62:18:18:cf:d0:65:b8:cc:8b:1b:b9:34:a2:2e:b4: 60:0d:8d:62:b3:20:e4:c5:d8:48:7e:e0:f2:97:11: 53:45:f7:bc:9e:53:80:28:bb:59:ea:c8:a2:db:d9: b4:fa:fd:cb:20:95:a3:c3:70:26:a2:ff:4f:ec:6d: 7f:29:3a:0b:d3:85:a3:79:f8:e4:cf:79:f5:0d:d0: a1:81:b0:88:bb:6e:45:b7:95:60:c5:ac:88:fe:0c: ae:8c:a6:cf:91:88:36:2f:b4:3b:f6:d8:67:2e:bc: e3:5b:f3:46:28:c1:e3:fd:f0:dc:21:9e:6f:42:d6: e9:0e:68:7c:9f:73:93:95:bb:1f:d9:38:44:0b:27: 72:5f:ef:ca:a2:63:06:c8:8f:47:39:b5:22:4f:13: e4:ac:57:e0:38:f6:de:2e:3b:53:5a:66:b0:51:32: 45:e0:2e:57:f1:b7:e5:ba:56:81:c2:2b:32:c2:15: 8a:0a:d0:a7:e1:fe:4b:18:99:57:96:72:31:a5:c7: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:91:E0:42:F3:8A:41:CC:0B:C0:D9:C5:5C:44:7C:9C:95:36:B1 X509v3 Authority Key Identifier: keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ef:66:ef:7d:99:f1:68:69:ef:82:35:b8:68:5b:5a:79:e8: 7d:e9:54:59:a0:2a:a4:9e:61:10:f5:f5:58:0b:0e:00:07:65: d5:7f:ba:15:d1:8c:9a:48:1a:95:9e:e7:e6:b5:d1:cb:3a:48: 2c:92:79:8a:b0:4b:d5:e7:2a:56:36:17:66:b3:cd:33:c7:f9: e0:26:76:56:04:8d:49:74:54:60:a7:2e:cc:5f:1d:fd:bf:1a: 5e:1e:b5:4f:d8:60:b3:65:64:b3:49:7a:ea:a3:90:71:08:71: 38:67:64:49:20:d5:fd:ca:6b:10:fc:ff:aa:13:c7:f8:b1:ee: f0:93:49:ed:05:5a:a8:7d:08:34:b0:eb:96:c0:fe:9e:c6:a4: 55:ab:0b:35:cf:2d:7a:06:d4:91:1b:f5:1e:9c:78:74:4e:9b: e7:ed:c6:08:06:e3:b3:80:36:e6:9f:04:96:75:ef:c8:2a:f6: 3d:af:43:08:64:8e:6a:e4:4a:95:f2:33:b6:4a:a5:bd:9b:9f: 7e:0b:a3:02:da:eb:de:4a:fe:e0:ab:8a:d0:e8:cd:65:24:15: 5a:90:76:a6:7b:a3:de:c9:7e:bc:40:17:25:91:2b:16:e2:55: 61:53:ff:ef:2e:63:6a:c8:0f:6a:bb:1c:9a:73:63:18:20:b6: d8:6d:3d:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4 OTQ1RkNBQjkwHhcNMjUwODIwMTg1NTU3WhcNMjUwODI3MTg1NTU3WjAYMRYwFAYD VQQDEw02OGE2MWEzZC0xNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk8181ril/mrReTUVh/tCG4F5XKYdFPAVUIzXdjv1ZjU51gOSO60v8XEZddF f+8O/ko6NE64F3na3ExiGBjP0GW4zIsbuTSiLrRgDY1isyDkxdhIfuDylxFTRfe8 nlOAKLtZ6sii29m0+v3LIJWjw3Amov9P7G1/KToL04Wjefjkz3n1DdChgbCIu25F t5VgxayI/gyujKbPkYg2L7Q79thnLrzjW/NGKMHj/fDcIZ5vQtbpDmh8n3OTlbsf 2ThECydyX+/KomMGyI9HObUiTxPkrFfgOPbeLjtTWmawUTJF4C5X8bflulaBwisy whWKCtCn4f5LGJlXlnIxpcepDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzPkeBC 84pBzAvA2cVcRHyclTaxMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5 cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS80NzMzOTU2NjIwOEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4 eHd4a1lsR2Z4dldKUmZ5cmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS72bvfZnxaGnvgjW4aFtaeeh96VRZoCqknmEQ9fVYCw4AB2XVf7oV 0YyaSBqVnufmtdHLOkgsknmKsEvV5ypWNhdms80zx/ngJnZWBI1JdFRgpy7MXx39 vxpeHrVP2GCzZWSzSXrqo5BxCHE4Z2RJINX9ymsQ/P+qE8f4se7wk0ntBVqofQg0 sOuWwP6exqRVqws1zy16BtSRG/UenHh0Tpvn7cYIBuOzgDbmnwSWde/IKvY9r0MI ZI5q5EqV8jO2SqW9m59+C6MC2uveSv7gq4rQ6M1lJBVakHame6PeyX68QBclkSsW 4lVhU//vLmNqyA9quxyac2MYILbYbT2U -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:07 2025 by rpki-client