$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json) Hash identifier: g7/BCp0NO4LnZZVDxTBVZUCIaDHLZJ9+81tSpQFL/uk= Subject key identifier: 5E:89:6A:95:27:69:1D:AD:33:4D:17:CE:D0:18:E9:35:BF:EE:A1:69 Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft Manifest number: 42 Signing time: Fri 05 Sep 2025 05:12:12 +0000 Manifest this update: Fri 05 Sep 2025 05:12:11 +0000 Manifest next update: Fri 12 Sep 2025 05:12:11 +0000 Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: JGXlet92LHo/yBBAReIeWnDpAruRAkFnc9MCtP0mj28=) 2: 75BE1B766DDF11F0BDC0DA4AC4F9AE02.roa (hash: xGZZlrDNDkFaLniK4xDu2fVUb+QoGgFz7ExHydYZgMQ=) 3: A1BECC526DDF11F0868E7C4BC4F9AE02.roa (hash: YXuf5BTEPj7fnB9oxoKkcmwqAfw/328NMNkT0ipByB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Validity Not Before: Sep 5 05:12:11 2025 GMT Not After : Sep 12 05:12:11 2025 GMT Subject: CN=68ba712c-a4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:88:62:44:e5:13:cb:00:6e:e8:26:f0:6b: 75:11:08:a3:6a:59:f6:1f:58:2b:ba:5f:2b:f4:a4: ee:9a:9e:41:60:81:8f:c4:c8:01:91:b6:c1:93:61: ba:70:79:3c:61:2d:9f:74:ce:f5:ca:5d:7a:9d:d1: a5:a5:72:c9:cb:f1:89:6e:a5:75:99:70:a2:32:0c: 57:66:43:67:b6:f7:d8:98:4f:77:b3:58:0d:ef:e4: 5e:b0:08:6a:a4:54:97:ff:06:3f:b2:d3:e8:0f:ee: e8:c9:f1:06:a5:6d:7b:d5:d7:51:67:89:95:97:d3: 9c:12:86:64:5f:68:03:43:29:56:1d:a9:30:05:47: 43:84:ac:6e:39:3c:08:c4:90:e1:56:6b:46:e6:38: dc:2f:72:0d:34:65:a3:99:a3:6b:09:2b:77:d4:08: 99:02:9b:26:ab:98:04:1c:fe:a8:d9:ce:46:cd:05: 7c:cc:43:ea:7d:80:cb:30:e7:fc:fc:c7:58:3f:1f: e3:82:92:fa:41:d1:69:73:f5:75:33:27:32:d9:5d: 76:99:1e:52:cf:68:55:37:23:21:20:1d:7a:f3:c2: f9:ae:9b:1b:f0:c9:fa:3a:f0:78:1a:e5:de:12:bb: 54:84:20:ad:c7:22:aa:46:d7:6b:b3:cf:ef:bb:8b: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:6A:95:27:69:1D:AD:33:4D:17:CE:D0:18:E9:35:BF:EE:A1:69 X509v3 Authority Key Identifier: keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:84:c5:e9:9b:08:b5:08:66:ac:68:42:04:2e:33:3f:f6:42: 9c:c8:f6:37:f1:a5:59:4a:a0:13:8e:60:e4:d4:b9:b9:2e:d2: fa:32:f4:8f:27:8b:79:94:d0:3d:93:d0:26:01:4b:82:9b:2e: 5d:1a:ad:b4:ee:8a:8c:19:fb:41:08:1a:2d:b6:c1:e8:d6:09: 37:60:de:58:e4:7d:7c:8b:21:13:af:3d:fe:3c:75:02:c5:ae: 44:38:7b:03:31:35:7d:61:5c:77:d7:45:0a:dd:ab:c0:0b:2b: d4:b4:1f:0d:9c:1d:7d:94:32:19:e5:c9:99:57:0b:1f:05:35: 45:5c:49:0f:24:9f:4a:54:5e:b9:d7:85:99:39:4b:c4:17:f2: 54:ed:28:20:c6:33:42:0f:bf:de:f8:0a:80:c2:77:ea:a1:08: 06:04:25:c2:27:1a:fe:c7:1b:5f:b7:d0:5e:42:fb:fc:f8:da: e0:55:a8:68:cf:7c:87:36:44:b3:a1:b8:d7:f4:4f:3a:cc:ad: 4f:ac:38:01:4c:74:25:e9:3c:0b:22:7f:ed:2d:0a:62:04:14: 2c:87:61:4b:8f:84:89:ff:32:be:bf:74:68:ed:9f:97:f3:2d: 2f:40:0a:10:e5:c0:61:14:ae:8b:ca:a6:c4:18:02:03:1f:87: 4f:7d:6f:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0E3MjExMC8GA1UEBRMoMkVGNDY5NTQ0M0E0QzBDN0IzNEVBOTFCNjJBM0Q4RjhF NDE0NTE3RTAeFw0yNTA5MDUwNTEyMTFaFw0yNTA5MTIwNTEyMTFaMBgxFjAUBgNV BAMTDTY4YmE3MTJjLWE0YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAiIhiROUTywBu6Cbwa3URCKNqWfYfWCu6Xyv0pO6ankFggY/EyAGRtsGTYbpw eTxhLZ90zvXKXXqd0aWlcsnL8YlupXWZcKIyDFdmQ2e299iYT3ezWA3v5F6wCGqk VJf/Bj+y0+gP7ujJ8QalbXvV11FniZWX05wShmRfaANDKVYdqTAFR0OErG45PAjE kOFWa0bmONwvcg00ZaOZo2sJK3fUCJkCmyarmAQc/qjZzkbNBXzMQ+p9gMsw5/z8 x1g/H+OCkvpB0Wlz9XUzJzLZXXaZHlLPaFU3IyEgHXrzwvmumxvwyfo68Hga5d4S u1SEIK3HIqpG12uzz++7iwovAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXolqlSdp Ha0zTRfO0BjpNb/uoWkwHwYDVR0jBBgwFoAULvRpVEOkwMezTqkbYqPY+OQUUX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3QTcyLzQ0REU2OUNFMkIx NDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01lelRxa2JZcVBZLU9RVVVY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHZScFZFT2t3TWV6VHFrYllxUFktT1FVVVg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 QTcyLzQ0REU2OUNFMkIxNDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01l elRxa2JZcVBZLU9RVVVYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABeExembCLUIZqxoQgQuMz/2QpzI9jfxpVlKoBOOYOTUubku0voy9I8n i3mU0D2T0CYBS4KbLl0arbTuiowZ+0EIGi22wejWCTdg3ljkfXyLIROvPf48dQLF rkQ4ewMxNX1hXHfXRQrdq8ALK9S0Hw2cHX2UMhnlyZlXCx8FNUVcSQ8kn0pUXrnX hZk5S8QX8lTtKCDGM0IPv974CoDCd+qhCAYEJcInGv7HG1+30F5C+/z42uBVqGjP fIc2RLOhuNf0TzrMrU+sOAFMdCXpPAsif+0tCmIEFCyHYUuPhIn/Mr6/dGjtn5fz LS9AChDlwGEUrovKpsQYAgMfh099b9o= -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:09 2025 by rpki-client