$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: v7LQhBrOZff0cJlzQeWIXS7jnNXwJLhNSJ3AbsvREKA= Subject key identifier: 13:D8:28:C3:D0:12:0E:71:8F:48:D0:73:38:88:68:02:3B:FC:DF:2C Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 04AD Signing time: Sat 23 Aug 2025 00:09:15 +0000 Manifest this update: Sat 23 Aug 2025 00:09:14 +0000 Manifest next update: Sat 30 Aug 2025 00:09:14 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: VkyfJKi/CMNEerazt85hXsiV3iZ9UiSYtVXPOp08T9I=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: Aug 23 00:09:14 2025 GMT Not After : Aug 30 00:09:14 2025 GMT Subject: CN=68a906ab-8554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cd:00:43:bd:6e:06:0f:91:cc:0e:70:d5:ae: 83:96:5b:d3:01:e1:da:11:73:f6:25:2f:51:47:84: d7:a7:47:01:3c:4c:12:e4:06:af:65:9d:8e:84:ef: 9e:f9:3a:f3:24:8b:1c:d1:76:a6:49:b4:9a:dd:b9: 58:87:15:57:0f:74:76:d7:25:75:90:93:18:62:c9: 7e:31:43:0a:4d:b4:20:26:03:c4:50:7b:85:bd:43: 20:69:13:c4:64:5f:8e:70:f1:0e:7f:79:73:63:24: b8:95:6d:9b:3c:91:77:36:cc:74:79:37:35:f7:9b: e2:16:69:78:d8:52:af:f2:7b:26:f7:fc:fa:1d:5e: 96:46:1d:b3:3f:8a:04:9f:aa:6b:59:4b:6e:85:07: b2:45:d8:64:c9:70:94:26:d6:21:12:bc:aa:8a:af: d0:d2:46:6f:17:a5:c7:06:2e:6f:8b:0d:dc:f8:48: d7:5a:26:13:5e:01:41:47:c3:78:9a:f6:9c:c4:06: 18:0b:55:9a:91:85:cf:ca:c2:10:94:5e:e3:80:f1: c6:9b:c4:df:f2:3a:ce:ff:d0:ee:2b:66:1c:3a:9a: 7a:2c:10:2b:c9:55:db:97:69:24:f3:a0:a2:3f:c5: 87:1c:9b:21:6f:89:76:9a:12:16:c0:1d:26:05:d5: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D8:28:C3:D0:12:0E:71:8F:48:D0:73:38:88:68:02:3B:FC:DF:2C X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0f:00:d6:b8:34:a4:ae:64:77:4e:8c:53:73:83:58:11:38: e1:0b:80:c4:c0:bb:64:bc:43:bc:82:d8:e5:40:32:ad:44:eb: f1:60:82:b3:aa:8f:ee:3d:d1:f2:4c:42:64:29:7d:2b:f6:9b: e4:e4:af:d2:de:d9:51:f5:b7:d7:d8:7b:b6:66:2e:b2:c9:26: 71:9a:19:57:bf:f7:21:dd:19:cc:65:db:b7:41:dc:ce:ef:d7: 41:41:7c:c3:59:32:5f:5e:50:b4:c0:e7:25:3c:d8:bb:b5:66: 87:b3:81:87:0a:89:69:44:c3:4d:23:68:55:41:37:a3:fa:a7: b4:40:0a:b4:94:ee:fe:50:6f:9f:e9:7b:2a:12:69:aa:f8:e1: 20:cf:3d:64:2b:18:f0:4b:61:c5:8d:c6:24:83:63:2d:b3:a6: cb:fd:a4:be:1b:e9:01:18:1c:7a:4f:e1:47:f3:0a:8e:c4:52: bd:44:b9:cb:1a:5a:74:fd:df:90:fc:f8:75:60:47:ca:81:50: 6d:95:26:99:96:56:55:b2:7a:d8:4c:71:69:aa:d8:d0:a4:77: 0a:12:53:31:12:a2:17:5c:39:b4:d3:46:08:d4:32:47:07:42: d2:fe:bb:02:6d:c9:7f:01:5f:24:bd:15:1d:06:51:0c:09:66: 52:7c:62:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjUwODIzMDAwOTE0WhcNMjUwODMwMDAwOTE0WjAYMRYwFAYD VQQDEw02OGE5MDZhYi04NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA480AQ71uBg+RzA5w1a6DllvTAeHaEXP2JS9RR4TXp0cBPEwS5AavZZ2OhO+e +TrzJIsc0XamSbSa3blYhxVXD3R21yV1kJMYYsl+MUMKTbQgJgPEUHuFvUMgaRPE ZF+OcPEOf3lzYyS4lW2bPJF3Nsx0eTc195viFml42FKv8nsm9/z6HV6WRh2zP4oE n6prWUtuhQeyRdhkyXCUJtYhEryqiq/Q0kZvF6XHBi5viw3c+EjXWiYTXgFBR8N4 mvacxAYYC1WakYXPysIQlF7jgPHGm8Tf8jrO/9DuK2YcOpp6LBAryVXbl2kk86Ci P8WHHJshb4l2mhIWwB0mBdWO9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPYKMPQ Eg5xj0jQcziIaAI7/N8sMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5DwDWuDSkrmR3ToxTc4NYETjhC4DEwLtkvEO8gtjlQDKtROvxYIKz qo/uPdHyTEJkKX0r9pvk5K/S3tlR9bfX2Hu2Zi6yySZxmhlXv/ch3RnMZdu3QdzO 79dBQXzDWTJfXlC0wOclPNi7tWaHs4GHColpRMNNI2hVQTej+qe0QAq0lO7+UG+f 6XsqEmmq+OEgzz1kKxjwS2HFjcYkg2Mts6bL/aS+G+kBGBx6T+FH8wqOxFK9RLnL Glp0/d+Q/Ph1YEfKgVBtlSaZllZVsnrYTHFpqtjQpHcKElMxEqIXXDm000YI1DJH B0LS/rsCbcl/AV8kvRUdBlEMCWZSfGKW -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:30 2025 by rpki-client