$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: 1VQBxNvE4oOBp7i05Ok82z1KodLQJzQ1MEsXkALh4zk= Subject key identifier: 0E:26:88:28:B2:6E:DB:88:1C:09:BD:E7:02:36:AE:8A:06:3C:33:54 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0BC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0BB2 Signing time: Sun 02 Nov 2025 18:56:27 +0000 Manifest this update: Sun 02 Nov 2025 18:56:27 +0000 Manifest next update: Sun 09 Nov 2025 18:56:27 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: B64S0W8Gx4HtMZR2/sIbN/rTi9GShMUWfqSwyixsHuo=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Nov 2 18:56:27 2025 GMT Not After : Nov 9 18:56:27 2025 GMT Subject: CN=6907a95b-ffbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:76:10:81:4a:d5:8a:8f:f9:6d:cc:b0:0e: e3:c2:fe:df:3d:8c:46:b7:d1:21:45:a1:4b:ff:37: 41:b4:1d:9f:6d:e7:03:d9:94:b6:fd:83:46:55:21: 65:2e:01:fe:05:c8:74:cc:5f:ca:1a:72:4f:32:0b: 2a:e1:5b:9a:ad:02:f8:c5:4b:ae:e3:3b:43:25:09: 55:15:2a:85:a5:dc:3e:5e:be:8f:6b:cc:c0:db:0a: 87:96:0d:61:65:fb:84:2f:61:08:2a:80:26:1b:8b: 6d:c6:a2:82:57:f7:4e:a8:93:3c:b9:7c:10:44:e0: 67:8b:0a:cf:a3:b6:15:67:33:75:22:f8:33:96:4b: 71:79:9b:d3:0c:e9:48:26:12:c4:f0:fc:9d:c4:f9: da:74:6b:8e:44:13:e5:47:b8:f8:41:1e:41:71:a8: 76:30:69:e9:1b:ac:c9:af:02:6a:a7:9b:f3:61:82: d0:1d:da:cb:a7:57:ec:c9:16:f7:5f:be:72:43:98: 2d:1d:e0:b4:14:57:56:04:1c:68:4f:29:66:b2:e0: 85:6a:d3:5d:87:81:47:38:5d:1f:54:d8:ad:82:6f: 42:ea:53:62:0a:7e:96:e6:0c:73:b9:78:4d:12:4e: 00:a9:0e:38:f4:0d:bc:06:d1:aa:8a:e2:c3:4a:b1: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:26:88:28:B2:6E:DB:88:1C:09:BD:E7:02:36:AE:8A:06:3C:33:54 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1e:ca:c6:3f:90:15:5e:e0:6b:15:52:30:37:06:73:13:a9: a8:73:f2:3f:cd:19:fd:f0:d3:59:2e:7d:10:d7:b6:b7:b7:b1: 15:2c:c4:08:00:26:34:e7:b6:f2:64:85:e3:72:35:60:6c:b4: 31:eb:26:1e:26:3e:a0:b9:4d:28:15:d9:a8:58:32:74:3e:b3: 79:13:38:0f:e1:01:4c:bd:8b:90:62:15:46:c6:8d:d0:7b:e2: 6b:a7:fc:02:8b:26:9e:80:f8:65:86:5b:7f:14:e6:d2:f2:79: 18:e7:aa:cb:6e:a1:81:29:09:c9:1e:ef:d4:16:8a:04:12:94: ae:9e:7f:80:63:0d:98:cc:3d:67:a9:72:b8:05:c4:7e:63:d0: cc:c5:c3:0b:f4:a1:4a:6c:94:3d:a7:20:fe:af:4e:1d:01:84: a2:52:76:5c:7a:16:3a:64:ba:42:13:02:3a:b8:9f:61:49:de: 11:f4:f1:ca:e0:b2:ee:39:d4:5e:01:c7:6f:e9:23:9e:67:c8: fa:72:0f:01:ca:c9:94:09:1a:c0:6a:78:37:d6:f4:d8:52:00: 53:03:6d:aa:2a:9a:e9:03:ab:18:7e:53:90:a7:0a:7d:4b:8d: 93:51:bd:3e:4f:e8:d1:a3:71:b8:f0:49:9f:38:51:7f:fa:48: 44:7e:0f:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUxMTAyMTg1NjI3WhcNMjUxMTA5MTg1NjI3WjAYMRYwFAYD VQQDEw02OTA3YTk1Yi1mZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSp2EIFK1YqP+W3MsA7jwv7fPYxGt9EhRaFL/zdBtB2fbecD2ZS2/YNGVSFl LgH+Bch0zF/KGnJPMgsq4VuarQL4xUuu4ztDJQlVFSqFpdw+Xr6Pa8zA2wqHlg1h ZfuEL2EIKoAmG4ttxqKCV/dOqJM8uXwQROBniwrPo7YVZzN1IvgzlktxeZvTDOlI JhLE8PydxPnadGuORBPlR7j4QR5Bcah2MGnpG6zJrwJqp5vzYYLQHdrLp1fsyRb3 X75yQ5gtHeC0FFdWBBxoTylmsuCFatNdh4FHOF0fVNitgm9C6lNiCn6W5gxzuXhN Ek4AqQ449A28BtGqiuLDSrFq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4miCiy btuIHAm95wI2rooGPDNUMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPHsrGP5AVXuBrFVIwNwZzE6moc/I/zRn98NNZLn0Q17a3t7EVLMQI ACY057byZIXjcjVgbLQx6yYeJj6guU0oFdmoWDJ0PrN5EzgP4QFMvYuQYhVGxo3Q e+Jrp/wCiyaegPhlhlt/FObS8nkY56rLbqGBKQnJHu/UFooEEpSunn+AYw2YzD1n qXK4BcR+Y9DMxcML9KFKbJQ9pyD+r04dAYSiUnZcehY6ZLpCEwI6uJ9hSd4R9PHK 4LLuOdReAcdv6SOeZ8j6cg8BysmUCRrAang31vTYUgBTA22qKprpA6sYflOQpwp9 S42TUb0+T+jRo3G48EmfOFF/+khEfg+j -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:09 2025 by rpki-client