$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: 3v+2z9NR0A+VFP2eLtlSXioxuKyvbnda4Kw4U5GaSM8= Subject key identifier: 3A:B5:C0:94:88:40:40:49:BA:A9:16:FF:A1:A6:50:A0:3A:EC:7F:5D Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 0315 Signing time: Wed 05 Nov 2025 01:13:47 +0000 Manifest this update: Wed 05 Nov 2025 01:13:46 +0000 Manifest next update: Wed 12 Nov 2025 01:13:46 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: CiMVOzOJkPrNyS8aHytk54nTCsowH+UttviQ7nXKORM=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Nov 5 01:13:46 2025 GMT Not After : Nov 12 01:13:46 2025 GMT Subject: CN=690aa4ca-4e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:fc:81:08:95:eb:e1:5a:cc:0c:ba:b2:99: 48:34:25:ca:db:e3:e2:af:33:3f:ea:0c:0c:5e:21: 16:93:c8:01:28:7c:56:a8:19:09:4e:78:b4:8e:73: 2d:08:a4:1c:8b:21:d4:a2:a5:e2:1c:c1:77:d1:41: 6d:b1:00:ee:b5:0e:54:75:57:6f:5e:06:ad:d8:93: 03:15:88:4f:98:ae:07:aa:18:ca:02:25:36:8a:64: ea:82:fa:89:0d:fe:d5:b0:ce:ca:35:94:ce:3d:5c: dd:96:cd:8c:bf:30:9f:59:f7:a6:04:0d:e6:5a:5c: 87:c0:2b:0b:11:77:5b:cb:d7:15:0f:89:61:c3:45: 4a:ac:4a:92:26:fa:70:0b:68:df:fc:eb:71:22:37: 3a:2f:f1:d5:b1:51:3f:d0:09:6e:77:3f:2d:d2:07: f2:db:c2:d0:dc:63:fe:b5:6b:53:0a:ad:29:17:34: b4:5a:54:0f:46:1b:cd:a4:eb:e7:03:b5:e0:0d:13: fc:82:8e:62:06:8f:9f:b0:be:20:33:a6:98:7e:84: e1:28:27:01:5c:6e:93:79:c2:4f:af:51:aa:23:6f: 23:95:45:95:55:78:44:d0:0d:24:d5:24:65:a6:f6: 98:ee:93:cf:dd:dd:8d:61:cf:7a:85:ea:ca:71:64: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:C0:94:88:40:40:49:BA:A9:16:FF:A1:A6:50:A0:3A:EC:7F:5D X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b1:f6:bf:67:75:3c:67:25:7c:a0:5b:7d:23:bb:c6:86:79: 9f:fe:c0:25:c0:12:4e:3f:01:f0:d2:37:8b:b5:5f:2d:34:b8: 8c:30:87:f0:33:67:f1:cd:0d:a8:70:24:ee:6d:e8:8d:81:ad: c8:7f:f4:54:cf:9f:16:48:51:41:c6:18:e5:97:ea:ee:ca:02: 2f:d4:7e:6c:4f:40:dd:8d:bb:14:bf:ec:3d:c0:b6:c0:d4:a2: 4a:dd:aa:66:a7:45:a0:5f:9b:9a:f3:94:26:06:96:56:37:63: 59:c9:4a:ea:45:c4:ad:df:88:6c:da:11:08:02:4c:40:91:96: 27:3f:22:b0:c3:fd:6b:db:e3:98:ac:2c:4e:13:03:d9:7c:1d: e4:52:79:7d:80:81:17:81:c5:b6:8f:f4:cf:4d:11:81:99:a2: c3:56:8c:2a:9b:4c:06:8e:d8:b6:28:fa:42:b9:97:65:b3:aa: da:0c:78:23:01:44:82:16:75:70:b6:c4:8a:ec:24:82:6f:07: d6:08:10:66:77:4c:16:57:45:01:60:cc:4b:61:da:4e:82:d7: bb:da:d3:d5:66:2c:6b:2a:70:b6:67:a9:ef:4a:51:35:8f:81: a1:0f:33:c6:8d:af:74:1e:59:31:3a:78:2f:23:c6:cb:fb:0c: 52:79:cd:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUxMTA1MDExMzQ2WhcNMjUxMTEyMDExMzQ2WjAYMRYwFAYD VQQDEw02OTBhYTRjYS00ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoG/8gQiV6+FazAy6splINCXK2+PirzM/6gwMXiEWk8gBKHxWqBkJTni0jnMt CKQciyHUoqXiHMF30UFtsQDutQ5UdVdvXgat2JMDFYhPmK4HqhjKAiU2imTqgvqJ Df7VsM7KNZTOPVzdls2MvzCfWfemBA3mWlyHwCsLEXdby9cVD4lhw0VKrEqSJvpw C2jf/OtxIjc6L/HVsVE/0Aludz8t0gfy28LQ3GP+tWtTCq0pFzS0WlQPRhvNpOvn A7XgDRP8go5iBo+fsL4gM6aYfoThKCcBXG6TecJPr1GqI28jlUWVVXhE0A0k1SRl pvaY7pPP3d2NYc96herKcWTYnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq1wJSI QEBJuqkW/6GmUKA67H9dMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3sfa/Z3U8ZyV8oFt9I7vGhnmf/sAlwBJOPwHw0jeLtV8tNLiMMIfw M2fxzQ2ocCTubeiNga3If/RUz58WSFFBxhjll+ruygIv1H5sT0DdjbsUv+w9wLbA 1KJK3apmp0WgX5ua85QmBpZWN2NZyUrqRcSt34hs2hEIAkxAkZYnPyKww/1r2+OY rCxOEwPZfB3kUnl9gIEXgcW2j/TPTRGBmaLDVowqm0wGjti2KPpCuZdls6raDHgj AUSCFnVwtsSK7CSCbwfWCBBmd0wWV0UBYMxLYdpOgte72tPVZixrKnC2Z6nvSlE1 j4GhDzPGja90HlkxOngvI8bL+wxSec2p -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:22 2025 by rpki-client