$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: Cbdsw2Mt9T2xuMMCCoLGDfq38ZoW4TirwIEh6FQfQUk= Subject key identifier: 53:EF:05:0D:3E:5C:5A:FE:3C:7A:E8:8E:0B:ED:27:FE:2F:76:C7:D6 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 0E Signing time: Thu 21 Aug 2025 08:19:16 +0000 Manifest this update: Thu 21 Aug 2025 08:19:16 +0000 Manifest next update: Thu 28 Aug 2025 08:19:16 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: T1XRE3dLL9RgZ2Vwx1QONHdQz4vHog2Dcvv1gR/dJrc=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Aug 21 08:19:16 2025 GMT Not After : Aug 28 08:19:16 2025 GMT Subject: CN=68a6d684-4e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:aa:3b:b2:f6:4d:66:70:94:e6:5e:16:cd: 18:42:8c:cc:f6:65:63:85:f2:82:df:f7:d1:18:50: 57:b4:32:6e:db:01:d2:8a:19:70:ed:84:ba:b9:65: ff:90:a9:fc:2a:91:ab:5f:f7:6f:d1:57:60:ab:e3: ca:c9:ca:3b:a4:9a:18:b2:d3:b3:50:1f:83:4d:5d: c8:ef:12:73:1d:41:95:60:4e:9b:fb:be:3e:0b:88: c4:45:76:50:42:06:7b:9f:85:8f:39:72:ef:bf:c2: 0a:42:6f:6c:e9:54:b4:ea:04:df:92:10:5d:05:c1: 55:c0:b0:3d:af:94:63:e2:91:9c:49:16:a2:55:6a: d8:b3:15:45:cd:01:3a:7d:a5:f1:60:0f:61:ea:4f: 51:dc:dd:c0:17:01:59:84:a3:9f:2a:5c:25:37:fa: c6:d6:02:2b:59:32:32:0c:e0:b3:c0:1a:fb:bd:3a: 5b:9d:35:af:60:b0:90:ba:41:9e:0f:19:25:12:fd: 52:b2:be:40:f9:66:8e:15:01:dc:9d:a7:35:7e:1b: a3:2f:52:ef:08:d1:7f:c4:49:d4:a8:03:08:36:85: 73:6a:04:13:6a:47:79:9a:e0:ee:72:58:95:3b:71: 69:c7:a9:56:ae:90:39:63:1d:8e:bf:a5:53:17:0a: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:05:0D:3E:5C:5A:FE:3C:7A:E8:8E:0B:ED:27:FE:2F:76:C7:D6 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d1:4a:55:8f:55:3e:c1:b0:d0:9b:8d:3b:99:ae:4e:d6:89: e3:b2:5c:11:ab:ba:9a:b4:61:cc:69:52:99:e6:e0:55:8d:18: 06:7b:9e:fb:a1:18:bb:b4:8e:27:23:c4:4a:7b:29:72:43:cd: f7:a5:da:90:3f:88:70:e8:5b:68:1d:d3:d6:9d:d2:76:7e:4c: e5:93:a7:de:50:d2:fb:1c:24:92:68:ba:bc:36:aa:37:c2:48: 10:01:01:a1:83:11:fc:68:48:87:90:53:f5:f6:49:a1:9f:51: 2f:f3:7c:6e:3e:50:e4:e5:16:ad:bd:4c:c5:47:05:5a:d6:31: 51:b2:cf:e4:64:27:d0:10:e7:a1:23:29:18:42:f2:e0:6f:a1: d1:d6:43:96:a1:97:3b:b6:de:5a:0e:5d:18:4c:a1:cd:6a:42: 84:2c:b3:2a:70:31:a3:95:20:7c:9f:a2:5b:ae:72:13:f7:20: 6e:96:31:f6:6f:7b:8f:77:4f:ca:27:e3:d0:5c:44:e8:2b:d9: 02:ed:b2:a1:a4:7b:54:01:70:ae:ca:fe:d6:fb:f4:f5:e2:da: a1:92:9e:8a:8c:88:11:c4:df:c0:88:6a:14:a8:3c:2b:7d:2a: 14:ef:98:b2:0c:29:b7:10:24:02:15:cf:8c:f4:b3:9e:47:9c: 88:08:4b:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTA4MjEwODE5MTZaFw0yNTA4MjgwODE5MTZaMBgxFjAUBgNV BAMTDTY4YTZkNjg0LTRlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUW6o7svZNZnCU5l4WzRhCjMz2ZWOF8oLf99EYUFe0Mm7bAdKKGXDthLq5Zf+Q qfwqkatf92/RV2Cr48rJyjukmhiy07NQH4NNXcjvEnMdQZVgTpv7vj4LiMRFdlBC BnufhY85cu+/wgpCb2zpVLTqBN+SEF0FwVXAsD2vlGPikZxJFqJVatizFUXNATp9 pfFgD2HqT1Hc3cAXAVmEo58qXCU3+sbWAitZMjIM4LPAGvu9OludNa9gsJC6QZ4P GSUS/VKyvkD5Zo4VAdydpzV+G6MvUu8I0X/ESdSoAwg2hXNqBBNqR3ma4O5yWJU7 cWnHqVaukDljHY6/pVMXCqkJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU+8FDT5c Wv48euiOC+0n/i92x9YwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHRSlWPVT7BsNCbjTuZrk7WieOyXBGrupq0YcxpUpnm4FWNGAZ7nvuh GLu0jicjxEp7KXJDzfel2pA/iHDoW2gd09ad0nZ+TOWTp95Q0vscJJJourw2qjfC SBABAaGDEfxoSIeQU/X2SaGfUS/zfG4+UOTlFq29TMVHBVrWMVGyz+RkJ9AQ56Ej KRhC8uBvodHWQ5ahlzu23loOXRhMoc1qQoQssypwMaOVIHyfoluuchP3IG6WMfZv e493T8on49BcROgr2QLtsqGke1QBcK7K/tb79PXi2qGSnoqMiBHE38CIahSoPCt9 KhTvmLIMKbcQJAIVz4z0s55HnIgIS8M= -----END CERTIFICATE-----Generated at Thu Aug 21 17:56:03 2025 by rpki-client