$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: nuiihFtInytqL/uPodNwJxUnFaRXEIQHyaKavQ1KR5M= Subject key identifier: 40:B0:BA:D4:78:4A:AF:FF:01:EC:74:77:B1:67:E9:4B:9E:2B:B6:E9 Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 02F8 Signing time: Sun 07 Sep 2025 01:40:23 +0000 Manifest this update: Sun 07 Sep 2025 01:40:23 +0000 Manifest next update: Sun 14 Sep 2025 01:40:23 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: OzN18rcRsfW9vTbvrcAdNunpjRyzhHOGwGWDWlnhrME=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Sep 7 01:40:23 2025 GMT Not After : Sep 14 01:40:23 2025 GMT Subject: CN=68bce287-269b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:3d:84:cd:46:ac:23:41:fe:9a:0e:fd:1c: 11:13:5a:88:9a:b4:d0:eb:ae:24:5c:06:1c:24:ca: dc:2a:10:eb:28:3b:a4:2e:ea:f0:8c:35:e8:d8:25: de:ff:ae:ff:0e:ea:36:af:3a:30:9f:eb:18:5b:dc: d9:c7:53:95:f3:ab:61:bb:ce:0d:da:2c:1b:96:2c: a0:83:fe:d7:83:72:2f:a1:9e:23:7c:ce:b9:b9:d4: ac:35:c3:06:12:bb:49:b7:f9:18:66:a1:ce:1e:cb: 3c:d2:7c:6b:06:4e:f3:df:c1:e5:a4:f7:10:22:cf: c2:5e:95:5b:f2:76:77:e9:36:3f:bb:42:f0:38:bc: 74:ea:90:c3:3a:55:e7:72:fe:a2:4d:d2:cd:db:9c: ae:4e:41:68:da:40:d3:76:91:9d:83:16:b6:ce:59: 5d:2e:2d:66:d5:cd:30:e3:8e:6f:90:3a:b6:f1:60: be:f9:94:8b:a3:f7:42:56:85:ee:12:5d:05:36:bf: da:10:df:16:f2:bd:80:78:95:8b:9c:69:99:3d:74: 37:45:62:b4:26:6c:5f:0d:e5:49:9a:58:01:e8:4d: 04:22:7f:10:91:f6:84:79:fc:d6:5b:1b:f4:34:bc: 57:03:f3:2c:ef:e6:34:42:b1:97:08:d3:5c:23:7c: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:BA:D4:78:4A:AF:FF:01:EC:74:77:B1:67:E9:4B:9E:2B:B6:E9 X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ae:b2:ab:89:1e:57:5d:92:2f:44:5e:ad:8f:dd:59:14:cb: 2b:64:2f:ea:21:b6:1c:d2:f6:98:91:c2:82:ba:0f:23:03:9e: f6:d5:39:c2:7f:bb:55:03:77:a2:42:7f:ff:cb:6e:6d:51:88: 3d:b6:cf:17:9d:a7:cf:a8:3d:42:90:ec:b5:ca:1c:8a:1e:f8: 9e:f4:9f:7c:f8:28:da:30:73:e4:2d:3e:26:a4:39:58:dc:91: fe:84:a4:8c:c5:a5:48:88:9d:17:f3:12:67:98:e4:9e:b7:99: 89:e7:b1:a8:ea:cf:d9:65:e7:10:38:6d:23:57:3b:62:43:c8: db:ff:37:fd:f5:19:73:3d:0e:c6:10:bf:80:ef:9d:1d:34:2c: 0d:16:2e:77:b0:39:bf:88:0b:04:c0:6e:85:a5:53:26:2b:1f: f8:d2:d1:4d:69:01:6e:65:2e:a7:d7:35:23:8f:a5:95:67:2e: ee:f6:c3:51:51:62:b7:1a:4a:f7:86:db:28:7f:e9:8a:62:dc: 67:64:a0:8f:6e:ae:a9:14:1f:1a:c0:d2:60:cd:e5:ab:b0:e3: 09:b8:16:d2:c0:27:a1:1b:c9:02:be:21:54:9d:7c:3a:46:45: eb:c9:bf:7a:5b:94:25:68:61:e5:d0:6a:ea:1d:ce:5d:5d:15: 11:fa:c3:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUwOTA3MDE0MDIzWhcNMjUwOTE0MDE0MDIzWjAYMRYwFAYD VQQDEw02OGJjZTI4Ny0yNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIM9hM1GrCNB/poO/RwRE1qImrTQ664kXAYcJMrcKhDrKDukLurwjDXo2CXe /67/Duo2rzown+sYW9zZx1OV86thu84N2iwbliygg/7Xg3IvoZ4jfM65udSsNcMG ErtJt/kYZqHOHss80nxrBk7z38HlpPcQIs/CXpVb8nZ36TY/u0LwOLx06pDDOlXn cv6iTdLN25yuTkFo2kDTdpGdgxa2zlldLi1m1c0w445vkDq28WC++ZSLo/dCVoXu El0FNr/aEN8W8r2AeJWLnGmZPXQ3RWK0JmxfDeVJmlgB6E0EIn8QkfaEefzWWxv0 NLxXA/Ms7+Y0QrGXCNNcI3ymWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECwutR4 Sq//Aex0d7Fn6UueK7bpMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtrrKriR5XXZIvRF6tj91ZFMsrZC/qIbYc0vaYkcKCug8jA5721TnC f7tVA3eiQn//y25tUYg9ts8XnafPqD1CkOy1yhyKHvie9J98+CjaMHPkLT4mpDlY 3JH+hKSMxaVIiJ0X8xJnmOSet5mJ57Go6s/ZZecQOG0jVztiQ8jb/zf99RlzPQ7G EL+A750dNCwNFi53sDm/iAsEwG6FpVMmKx/40tFNaQFuZS6n1zUjj6WVZy7u9sNR UWK3Gkr3htsof+mKYtxnZKCPbq6pFB8awNJgzeWrsOMJuBbSwCehG8kCviFUnXw6 RkXryb96W5QlaGHl0GrqHc5dXRUR+sO0 -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:15 2025 by rpki-client