$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: rU5LBknyTibnw7xm8nm6u/dlTauUOSnwWWX2JlEcxCg= Subject key identifier: E6:30:34:2D:70:AD:83:32:E2:3A:5C:1D:8E:3B:03:6E:A6:F3:C7:0C Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: 34 Signing time: Thu 07 Aug 2025 08:15:12 +0000 Manifest this update: Thu 07 Aug 2025 08:15:11 +0000 Manifest next update: Thu 14 Aug 2025 08:15:11 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: CvtQWZeZ7qadNkb1U93dWY+iLprKq7TrTHCTGX10Rns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Aug 7 08:15:11 2025 GMT Not After : Aug 14 08:15:11 2025 GMT Subject: CN=6894608f-ee5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:a7:f7:55:8d:93:34:0a:4f:cf:43:b6:89: a4:80:02:72:e5:20:42:46:52:ba:0d:69:29:1d:9e: b4:14:5d:2c:89:80:56:55:0c:b7:3b:05:3e:75:93: 53:d7:30:1e:f8:da:af:7d:da:c6:c9:ad:ed:3a:34: 30:80:04:09:fc:53:06:c9:d5:07:9a:9f:d5:98:db: 93:3c:0c:49:55:9c:a9:f9:1a:7b:50:34:b8:6d:3c: 33:dc:f0:49:2a:5f:98:38:c6:57:ce:1e:a6:82:1c: f8:9c:c0:45:fd:95:be:c6:da:c6:3b:9d:a8:c1:be: 0e:7b:d0:58:60:44:25:11:da:83:55:45:6b:4c:13: 40:cf:da:b8:93:dc:f7:4d:31:00:e8:1a:ff:73:17: 9c:a8:e2:0b:ff:08:83:1e:da:6f:17:d5:12:f1:68: e3:5b:fe:8f:1e:8a:1d:83:b1:15:83:7e:2c:e3:55: ed:1e:b9:73:70:c5:4d:f0:70:fb:72:a8:79:a4:e9: 25:c4:07:cb:74:31:e4:2a:c5:ba:12:b5:cb:a2:66: 98:a2:e2:f4:58:c5:6c:71:a8:53:8a:9b:f2:81:64: de:c9:db:31:c8:0d:30:46:93:ce:38:75:4f:15:7c: 60:9c:cb:38:52:44:ef:ba:e8:69:ad:29:08:ae:e3: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:34:2D:70:AD:83:32:E2:3A:5C:1D:8E:3B:03:6E:A6:F3:C7:0C X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:cd:17:14:d4:9e:ee:a4:04:a2:89:54:56:e7:3a:8c:e8:6a: a1:55:26:a9:18:84:80:2a:24:1a:74:f6:95:38:38:51:23:45: d1:ec:5c:8b:ae:e4:72:cf:78:1c:48:e4:8b:9b:f0:78:9d:7c: 5c:6a:70:9a:f6:68:0e:bc:75:ed:a1:92:17:35:15:70:99:84: 0a:96:e6:f8:80:d3:69:b0:7f:47:8f:94:d0:bc:6a:af:e4:4e: c3:59:ed:55:f1:cb:ef:b0:26:c5:4a:6b:5a:c0:3d:2d:fc:60: b6:94:a4:d3:06:dd:b8:88:34:f7:85:9d:dc:ff:8e:d6:87:2d: 14:0c:ed:1a:13:17:ac:e3:0b:6d:f3:a1:92:36:28:d7:22:3f: 09:6f:7a:27:87:86:29:3b:24:1d:26:f8:bd:a8:ba:dd:cf:16: 87:a1:27:2b:c0:80:0b:62:28:66:98:5f:49:8b:5c:88:ce:30: 4a:ee:95:a4:0e:83:c2:71:00:e1:01:88:36:1c:07:af:48:6a: 57:08:2b:4f:3d:46:9d:d3:d1:77:09:21:69:09:c7:94:e3:f5: 41:b0:0a:2b:d1:37:cf:82:d1:e4:05:be:18:48:b1:8a:7f:1a: 46:54:91:e0:e7:18:e5:b7:50:5e:4a:56:a0:80:db:40:7c:56: 2f:77:83:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoOTY3M0I1Q0NGMEE4RUE1Q0U0MUEyRTQ3NjMxMUYzNzVD RDgzQzBEMjAeFw0yNTA4MDcwODE1MTFaFw0yNTA4MTQwODE1MTFaMBgxFjAUBgNV BAMTDTY4OTQ2MDhmLWVlNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+jKf3VY2TNApPz0O2iaSAAnLlIEJGUroNaSkdnrQUXSyJgFZVDLc7BT51k1PX MB742q992sbJre06NDCABAn8UwbJ1Qean9WY25M8DElVnKn5GntQNLhtPDPc8Ekq X5g4xlfOHqaCHPicwEX9lb7G2sY7najBvg570FhgRCUR2oNVRWtME0DP2riT3PdN MQDoGv9zF5yo4gv/CIMe2m8X1RLxaONb/o8eih2DsRWDfizjVe0euXNwxU3wcPty qHmk6SXEB8t0MeQqxboStcuiZpii4vRYxWxxqFOKm/KBZN7J2zHIDTBGk844dU8V fGCcyzhSRO+66GmtKQiu41grAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5jA0LXCt gzLiOlwdjjsDbqbzxwwwHwYDVR0jBBgwFoAUlnO1zPCo6lzkGi5HYxHzdc2DwNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0MxOTM5Q0U2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG5PMXpQQ282bHprR2k1SFl4SHpkYzJEd05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0MxOTM5Q0U2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6 a0dpNUhZeEh6ZGMyRHdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTNFxTUnu6kBKKJVFbnOozoaqFVJqkYhIAqJBp09pU4OFEjRdHsXIuu 5HLPeBxI5Iub8HidfFxqcJr2aA68de2hkhc1FXCZhAqW5viA02mwf0ePlNC8aq/k TsNZ7VXxy++wJsVKa1rAPS38YLaUpNMG3biINPeFndz/jtaHLRQM7RoTF6zjC23z oZI2KNciPwlveieHhik7JB0m+L2out3PFoehJyvAgAtiKGaYX0mLXIjOMErulaQO g8JxAOEBiDYcB69IalcIK089Rp3T0XcJIWkJx5Tj9UGwCivRN8+C0eQFvhhIsYp/ GkZUkeDnGOW3UF5KVqCA20B8Vi93g00= -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:31 2025 by rpki-client