$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: QOZZ4SFPk+55TZvRcXrYNAVOvgrpK+icMc2g4czUQUw= Subject key identifier: 84:C2:52:E5:6D:18:F2:74:A5:CB:9A:FD:36:99:E8:D1:AD:AB:62:B1 Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: 1A Signing time: Tue 17 Jun 2025 06:47:17 +0000 Manifest this update: Tue 17 Jun 2025 06:47:16 +0000 Manifest next update: Tue 24 Jun 2025 06:47:16 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: TsW8i9eclIW4y30V1wTf0TwE4N+xWQmTBv1dm+kufqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Jun 17 06:47:16 2025 GMT Not After : Jun 24 06:47:16 2025 GMT Subject: CN=68510f74-f0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:da:5f:b0:ea:64:07:3f:ce:54:87:e3:98: 0e:c5:aa:55:b7:7b:1b:a7:08:5d:46:78:fd:5c:93: 9e:f5:6a:ca:51:8f:3c:d6:7c:9f:bd:13:18:88:b1: 2a:7b:8d:05:c4:c3:4f:33:60:ce:c7:2d:6a:f8:bd: a7:52:c1:29:72:77:60:a4:5b:7d:0e:af:48:df:92: 81:ae:60:c6:b0:61:67:57:eb:e8:31:b0:69:77:7d: 9c:da:2e:a0:af:b1:72:94:30:9b:ee:2b:e5:ea:95: f3:41:81:ed:8a:83:af:c7:29:e6:53:be:2e:08:28: bf:f1:7f:ae:ed:e2:1b:b9:85:c0:4e:fd:ce:5b:d4: dd:ca:b9:39:ee:cb:b3:7f:0a:eb:69:45:c7:14:d4: 20:9a:a5:79:e2:5d:e9:60:7b:5b:6f:b0:b3:54:70: 53:2a:4d:18:d7:89:1d:46:a2:4e:24:02:b9:bd:00: f3:ec:b1:24:c8:61:c7:a8:0f:49:24:8f:e4:43:74: 4e:14:73:ab:b8:b2:42:d5:bc:0b:2e:50:b2:b5:b3: e7:7d:71:bc:4b:68:0b:f7:8d:3d:b7:c8:bb:0f:91: 56:2c:38:1e:4d:c6:65:f8:90:83:78:b6:83:b0:e2: ec:98:53:88:28:f1:af:1f:ce:cb:1d:28:ef:37:6a: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C2:52:E5:6D:18:F2:74:A5:CB:9A:FD:36:99:E8:D1:AD:AB:62:B1 X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:5a:da:bf:36:72:4f:22:e6:a6:d4:15:c4:45:b8:64:ae:91: 32:00:ef:62:8d:fb:c2:09:83:65:22:e6:c1:ff:4a:17:c3:a3: 90:6d:1e:17:5c:90:1a:26:29:1f:91:cb:32:83:4d:25:cc:25: e8:cf:5c:c7:f0:0a:08:c4:e7:ec:16:00:02:f3:a9:a9:17:73: 67:81:3e:95:42:95:d7:63:78:b6:3b:46:17:1f:ae:3f:93:b4: dd:02:40:cb:6b:c7:21:3d:49:fc:58:42:88:ef:9b:24:c3:d0: a7:d2:18:b8:d4:45:03:df:19:79:3a:ae:25:1a:f6:35:0a:ce: dc:e2:77:af:ad:aa:7f:f7:2a:39:ec:c1:9d:c9:0d:7c:21:5a: b0:5c:34:0f:17:4c:de:35:25:45:96:e1:97:8c:28:71:e3:75: 96:38:a8:74:06:80:11:bb:dc:df:26:85:9a:9a:3f:89:91:86: aa:d6:97:26:d5:32:2c:3f:3e:c7:bb:e1:33:b8:f7:d5:7a:64: 09:57:46:99:9b:36:88:dc:4a:12:46:89:25:85:b4:e9:aa:8a: 66:96:5b:69:8c:f5:83:ee:0f:ae:6a:2e:40:ae:e5:41:1d:17: 6a:08:9b:41:93:21:f5:e5:ed:52:85:1d:3b:0b:ed:26:53:70: 28:ae:12:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoOTY3M0I1Q0NGMEE4RUE1Q0U0MUEyRTQ3NjMxMUYzNzVD RDgzQzBEMjAeFw0yNTA2MTcwNjQ3MTZaFw0yNTA2MjQwNjQ3MTZaMBgxFjAUBgNV BAMTDTY4NTEwZjc0LWYwYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW6NpfsOpkBz/OVIfjmA7FqlW3exunCF1GeP1ck571aspRjzzWfJ+9ExiIsSp7 jQXEw08zYM7HLWr4vadSwSlyd2CkW30Or0jfkoGuYMawYWdX6+gxsGl3fZzaLqCv sXKUMJvuK+XqlfNBge2Kg6/HKeZTvi4IKL/xf67t4hu5hcBO/c5b1N3KuTnuy7N/ CutpRccU1CCapXniXelge1tvsLNUcFMqTRjXiR1Gok4kArm9APPssSTIYceoD0kk j+RDdE4Uc6u4skLVvAsuULK1s+d9cbxLaAv3jT23yLsPkVYsOB5NxmX4kIN4toOw 4uyYU4go8a8fzssdKO83ajYPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhMJS5W0Y 8nSly5r9Npno0a2rYrEwHwYDVR0jBBgwFoAUlnO1zPCo6lzkGi5HYxHzdc2DwNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0MxOTM5Q0U2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG5PMXpQQ282bHprR2k1SFl4SHpkYzJEd05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0MxOTM5Q0U2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6 a0dpNUhZeEh6ZGMyRHdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZa2r82ck8i5qbUFcRFuGSukTIA72KN+8IJg2Ui5sH/ShfDo5BtHhdc kBomKR+RyzKDTSXMJejPXMfwCgjE5+wWAALzqakXc2eBPpVClddjeLY7Rhcfrj+T tN0CQMtrxyE9SfxYQojvmyTD0KfSGLjURQPfGXk6riUa9jUKztzid6+tqn/3Kjns wZ3JDXwhWrBcNA8XTN41JUWW4ZeMKHHjdZY4qHQGgBG73N8mhZqaP4mRhqrWlybV Miw/Pse74TO499V6ZAlXRpmbNojcShJGiSWFtOmqimaWW2mM9YPuD65qLkCu5UEd F2oIm0GTIfXl7VKFHTsL7SZTcCiuEpU= -----END CERTIFICATE-----Generated at Wed Jun 18 07:55:40 2025 by rpki-client