$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: bCH9RItlh4/WubQ9DMduYT6UMcSncMJgR7Ht+5xp2oQ= Subject key identifier: 5C:60:70:63:BB:73:64:94:FA:24:A8:90:99:2C:1F:3B:49:5A:51:46 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0760 Signing time: Fri 08 Aug 2025 22:00:09 +0000 Manifest this update: Fri 08 Aug 2025 22:00:08 +0000 Manifest next update: Fri 15 Aug 2025 22:00:08 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: P4JBo675InO3c111veDxKMmAKp1uJk+hHQWbQyr4sE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Aug 8 22:00:08 2025 GMT Not After : Aug 15 22:00:08 2025 GMT Subject: CN=68967368-7e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:f4:c6:56:9e:f6:49:72:9e:a9:65:bb:d1: 67:ed:96:d9:16:cc:7f:21:73:66:52:3c:d4:04:cf: 49:a9:a7:5c:71:fe:6f:b9:51:9d:fe:81:3d:d6:bd: 36:74:3b:3b:37:12:40:07:72:31:fd:70:3b:01:2d: 79:c2:ed:ba:08:b7:d2:22:15:8b:29:8d:c2:4a:17: b9:3f:f2:32:5d:8e:35:4e:b9:26:72:4e:b2:44:57: ee:94:9e:e5:6f:90:10:29:95:e4:b5:39:9e:ed:40: 6f:78:40:a0:2a:8c:56:a6:16:62:3b:54:84:4c:d7: 69:3f:30:42:d0:4b:89:d1:fb:3e:b8:38:16:1a:8e: af:8b:4f:04:42:83:96:c9:6c:eb:30:7e:66:c2:02: f8:fd:34:b8:57:4f:d1:1a:2e:ce:55:5f:93:c2:6f: d9:38:a6:5e:ea:6d:ac:d9:b2:18:7e:e3:0e:be:1d: 7e:e7:c9:18:f9:63:ab:d7:c6:6b:07:f5:43:3a:81: 6e:5e:4f:c6:26:47:b9:15:54:8c:1d:e1:5d:88:b9: e8:0c:8a:fc:63:32:14:68:5a:bc:91:4f:13:bb:ee: 53:ac:f8:dc:33:6c:af:43:02:d7:73:b4:c3:af:0f: d6:56:b0:cf:0b:87:6b:e1:b0:6d:15:e4:32:1e:7d: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:60:70:63:BB:73:64:94:FA:24:A8:90:99:2C:1F:3B:49:5A:51:46 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:7c:da:d0:ab:49:47:d8:ad:5d:d5:60:64:a9:45:a5:9e:a4: 95:09:4b:55:86:49:19:5b:24:7a:f7:eb:f1:af:9a:e4:b6:43: 2a:67:81:f2:fe:d8:43:41:14:3c:70:c4:f7:db:3c:c8:ca:e7: b6:74:d2:b5:13:9b:ee:e6:df:4f:7c:2a:f9:6e:4e:65:d7:dc: e3:52:53:28:99:35:f2:df:ad:d5:6c:56:3b:39:4f:c6:e7:72: b5:e2:05:35:42:2b:e5:97:93:7d:a7:00:cd:a4:fb:c7:98:88: 52:8d:a4:c4:36:d0:93:8e:47:0e:84:57:9c:e5:dc:b6:36:e8: a5:a9:81:9b:56:9d:cb:08:a4:1a:a4:c5:0d:e4:64:e4:62:18: e4:71:d1:5f:fd:78:9c:ee:33:8e:f7:f9:25:07:e7:57:6d:45: aa:dd:a7:b2:c5:a5:57:6d:aa:3d:cf:f2:99:3d:70:a3:1f:f8: 6d:54:5c:1f:be:90:91:16:7d:2b:df:98:59:2e:49:2e:0a:4f: 02:39:47:d3:d2:05:da:2d:2d:60:d9:dc:25:96:2c:65:6b:3c: 9e:6d:c9:e8:0c:21:96:c8:6d:48:2d:11:ea:91:52:aa:66:be: 61:69:00:71:7e:25:6a:ca:e5:9c:19:8c:56:14:50:be:ef:f3: 7e:71:d5:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUwODA4MjIwMDA4WhcNMjUwODE1MjIwMDA4WjAYMRYwFAYD VQQDEw02ODk2NzM2OC03ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFj0xlae9klynqllu9Fn7ZbZFsx/IXNmUjzUBM9Jqadccf5vuVGd/oE91r02 dDs7NxJAB3Ix/XA7AS15wu26CLfSIhWLKY3CShe5P/IyXY41Trkmck6yRFfulJ7l b5AQKZXktTme7UBveECgKoxWphZiO1SETNdpPzBC0EuJ0fs+uDgWGo6vi08EQoOW yWzrMH5mwgL4/TS4V0/RGi7OVV+Twm/ZOKZe6m2s2bIYfuMOvh1+58kY+WOr18Zr B/VDOoFuXk/GJke5FVSMHeFdiLnoDIr8YzIUaFq8kU8Tu+5TrPjcM2yvQwLXc7TD rw/WVrDPC4dr4bBtFeQyHn2MZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxgcGO7 c2SU+iSokJksHztJWlFGMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6fNrQq0lH2K1d1WBkqUWlnqSVCUtVhkkZWyR69+vxr5rktkMqZ4Hy /thDQRQ8cMT32zzIyue2dNK1E5vu5t9PfCr5bk5l19zjUlMomTXy363VbFY7OU/G 53K14gU1Qivll5N9pwDNpPvHmIhSjaTENtCTjkcOhFec5dy2NuilqYGbVp3LCKQa pMUN5GTkYhjkcdFf/Xic7jOO9/klB+dXbUWq3aeyxaVXbao9z/KZPXCjH/htVFwf vpCRFn0r35hZLkkuCk8COUfT0gXaLS1g2dwllixlazyebcnoDCGWyG1ILRHqkVKq Zr5haQBxfiVqyuWcGYxWFFC+7/N+cdUm -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:44 2025 by rpki-client