$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: Uvjf0FCvvWuI0nIGKpIN94Z3GszDdueoB/j5k6WRqGc= Subject key identifier: DA:46:B1:08:FA:3B:E0:D2:FD:89:40:33:9F:FF:DF:5C:AA:8A:22:6C Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 29 Signing time: Mon 13 Oct 2025 11:28:45 +0000 Manifest this update: Mon 13 Oct 2025 11:28:44 +0000 Manifest next update: Mon 20 Oct 2025 11:28:44 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: /jGLMt2ADiazTW8qUZ/Kug49YoAqT+G3ttuCGTnBrOo=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 11:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Oct 13 11:28:44 2025 GMT Not After : Oct 20 11:28:44 2025 GMT Subject: CN=68ece26c-b787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d6:2e:54:01:e3:7b:4a:82:70:e2:68:a3:f5: a6:35:42:0e:0d:1a:0a:87:6b:70:07:aa:ac:29:e9: 0e:5a:d8:06:97:39:87:c9:6d:bd:ed:b2:c8:f5:25: fe:2b:80:27:6a:fb:76:52:68:ce:72:64:e9:0f:04: f5:49:3f:2f:7f:ad:bb:e4:a0:84:45:2a:94:3f:76: 90:0a:b2:66:47:ad:25:63:70:dc:e0:7b:3f:c1:f5: e2:47:4e:11:6a:a2:6c:ea:83:66:af:45:c4:44:88: 9b:b1:2d:5d:de:db:a8:3e:47:b2:89:bd:f2:0e:ef: 00:5e:d2:dd:29:ad:74:43:e4:8e:12:cd:9b:bd:32: 93:3a:c0:f5:39:7e:fc:4e:6a:90:42:f3:4a:ff:4f: 4e:94:68:ac:ce:29:1f:17:84:c8:4a:5c:41:a0:84: 0a:ff:fa:52:d0:82:09:dc:5b:8f:27:20:77:46:e7: a8:80:66:2a:4f:68:59:af:a4:f9:da:ab:bd:c7:7e: e0:ab:ac:d4:7e:91:0f:c1:17:fc:09:81:12:0d:35: eb:f8:f0:d2:f7:b4:18:c0:2b:1c:6b:bf:14:08:cb: 79:c0:d4:a2:49:84:03:29:f9:8c:bd:ae:77:50:9c: 7e:fe:28:ac:05:3a:d7:ba:dc:14:78:f0:d4:83:09: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:46:B1:08:FA:3B:E0:D2:FD:89:40:33:9F:FF:DF:5C:AA:8A:22:6C X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:fa:22:bc:13:b2:7f:bc:82:4e:c8:e0:21:bb:1a:77:a3:a2: 6b:b7:72:ad:aa:37:01:41:a7:31:44:43:ff:32:28:f3:89:40: 75:d3:02:e2:41:70:04:b6:c9:64:29:e0:0b:46:59:fd:20:62: 1f:b3:77:e4:75:f9:61:33:1e:27:c3:ba:7e:eb:bf:a6:76:68: 15:10:fa:7e:88:6e:c7:ff:c4:3b:9a:3b:85:22:cf:64:59:de: db:86:f3:2a:aa:81:49:86:da:77:34:d8:88:23:2d:72:16:a9: e3:bc:ef:c2:ad:aa:7b:a6:91:bf:b5:f6:9d:ce:e6:4a:ae:b2: fe:35:bb:5a:e8:33:76:fd:66:66:78:fa:66:df:35:dc:51:b2: 58:52:9d:53:18:90:69:2b:fd:b2:d6:e9:06:19:42:4a:32:0e: 68:df:c2:b6:a7:01:6a:4e:40:47:5c:37:85:6f:1e:01:7f:57: 77:bb:95:4a:e2:7e:48:ed:03:63:7e:24:a1:c5:e3:13:55:cb: c4:0f:43:77:e0:ec:c9:e1:b0:d0:55:b6:ad:7f:f8:b5:77:77: 0b:bc:9f:6f:2f:1b:24:ed:0d:8c:f9:2b:d1:e9:5b:2e:c8:6c: 5a:36:03:95:f7:c2:61:78:95:e1:b8:8d:81:d0:5d:6b:d0:47: 0c:06:23:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTEwMTMxMTI4NDRaFw0yNTEwMjAxMTI4NDRaMBgxFjAUBgNV BAMTDTY4ZWNlMjZjLWI3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb1i5UAeN7SoJw4mij9aY1Qg4NGgqHa3AHqqwp6Q5a2AaXOYfJbb3tssj1Jf4r gCdq+3ZSaM5yZOkPBPVJPy9/rbvkoIRFKpQ/dpAKsmZHrSVjcNzgez/B9eJHThFq omzqg2avRcREiJuxLV3e26g+R7KJvfIO7wBe0t0prXRD5I4SzZu9MpM6wPU5fvxO apBC80r/T06UaKzOKR8XhMhKXEGghAr/+lLQggncW48nIHdG56iAZipPaFmvpPna q73HfuCrrNR+kQ/BF/wJgRINNev48NL3tBjAKxxrvxQIy3nA1KJJhAMp+Yy9rndQ nH7+KKwFOte63BR48NSDCT57AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2kaxCPo7 4NL9iUAzn//fXKqKImwwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN76IrwTsn+8gk7I4CG7Gnejomu3cq2qNwFBpzFEQ/8yKPOJQHXTAuJB cAS2yWQp4AtGWf0gYh+zd+R1+WEzHifDun7rv6Z2aBUQ+n6Ibsf/xDuaO4Uiz2RZ 3tuG8yqqgUmG2nc02IgjLXIWqeO878Ktqnumkb+19p3O5kqusv41u1roM3b9ZmZ4 +mbfNdxRslhSnVMYkGkr/bLW6QYZQkoyDmjfwranAWpOQEdcN4VvHgF/V3e7lUri fkjtA2N+JKHF4xNVy8QPQ3fg7MnhsNBVtq1/+LV3dwu8n28vGyTtDYz5K9HpWy7I bFo2A5X3wmF4leG4jYHQXWvQRwwGI3c= -----END CERTIFICATE-----Generated at Tue Oct 14 12:35:11 2025 by rpki-client