$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: X2HRcj4P6YrW+MFginqXoD+aIU0+jyVfuWJ61fbaaMI= Subject key identifier: AE:78:0C:71:2A:DE:14:30:01:37:EE:37:78:04:3C:C9:23:52:17:49 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0743 Signing time: Sat 14 Jun 2025 21:26:50 +0000 Manifest this update: Sat 14 Jun 2025 21:26:49 +0000 Manifest next update: Sat 21 Jun 2025 21:26:49 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: 66et0d/yvCdto7WI+OWijvr4zAiELa7JcVD44+I1GYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Jun 14 21:26:49 2025 GMT Not After : Jun 21 21:26:49 2025 GMT Subject: CN=684de91a-b8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:c5:9e:bc:dc:25:15:46:30:e1:1c:dd:6f: 75:6d:a0:23:5a:7b:57:ed:ad:0a:61:0f:72:91:60: ec:2a:d9:9c:4e:11:7b:28:66:54:3f:13:32:64:22: 79:c1:d2:df:18:89:b9:f1:cf:51:e9:0f:bb:5c:69: 37:69:27:6d:04:5d:7c:05:85:f6:f1:22:45:b6:5c: fe:2a:58:f9:ff:b3:64:e4:3c:df:82:92:10:b5:e9: 7e:0b:3c:ce:04:36:85:59:59:ad:ee:b7:d4:b0:d2: 01:90:a3:4b:19:c2:dd:c7:f9:4a:82:09:40:25:0c: 12:ca:ac:81:b5:96:b8:bc:89:9a:52:d0:a4:d1:ab: 46:fc:62:10:2c:f5:90:0d:85:b2:3e:3b:2a:90:f4: e8:35:a0:bc:82:3e:71:6c:1f:9a:78:dc:ad:ac:04: fe:08:7e:52:1c:6d:5e:dc:28:98:96:66:c3:e7:00: a8:f6:4e:09:43:8d:9f:93:73:2e:72:71:c4:9c:41: 53:b0:2a:60:6e:73:58:ea:2e:67:47:5e:cf:c6:3a: 61:07:6d:56:61:3a:9b:7b:98:44:e8:aa:21:d8:5e: 11:25:da:89:0d:87:61:f9:de:83:ed:8a:87:14:28: bf:97:25:3e:9a:b9:8a:42:7e:b4:69:2b:3a:73:22: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:0C:71:2A:DE:14:30:01:37:EE:37:78:04:3C:C9:23:52:17:49 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b5:b0:98:60:49:55:e6:0b:8d:39:96:8b:01:55:e8:98:43: 51:e2:8e:70:fb:68:71:6c:c2:6c:b0:f0:7d:b8:a9:d2:8d:6e: 05:d8:b9:fc:e5:0e:82:77:50:98:c1:33:d1:bb:68:79:0f:9b: d9:ff:3e:fc:27:f7:0f:80:9b:ea:f8:d8:d6:63:a8:6d:36:78: 5b:9f:51:f0:90:eb:4e:5f:4b:4b:ba:d1:b3:75:f2:92:26:2f: ea:38:49:87:89:c2:bb:cd:fd:7b:00:0b:be:10:d7:dd:ae:e9: 62:db:57:4d:19:7c:83:04:50:58:fb:15:59:27:12:0b:fa:d6: 86:8b:dc:ad:23:ee:08:a4:67:2f:18:d2:67:6a:06:f2:71:4a: 14:9d:ae:2a:4d:d3:82:98:53:93:bb:ac:47:ea:c3:0c:14:f2: d2:c8:9a:a0:de:03:94:59:80:3c:14:8d:5a:64:a9:13:88:61: 9b:ed:2b:a8:54:9c:43:8b:30:ce:25:44:f1:ca:7e:95:83:fe: 16:88:0a:e4:69:6d:a9:37:c4:7c:b2:e8:07:12:b8:10:ab:a9: 82:a4:28:04:96:95:11:40:27:9c:fe:15:ac:a1:ed:29:c3:dd: 3a:36:a0:1a:cb:e4:5c:4b:89:18:06:7d:54:3e:49:28:9a:03: fd:e9:6f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUwNjE0MjEyNjQ5WhcNMjUwNjIxMjEyNjQ5WjAYMRYwFAYD VQQDEw02ODRkZTkxYS1iOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw3FnrzcJRVGMOEc3W91baAjWntX7a0KYQ9ykWDsKtmcThF7KGZUPxMyZCJ5 wdLfGIm58c9R6Q+7XGk3aSdtBF18BYX28SJFtlz+Klj5/7Nk5DzfgpIQtel+CzzO BDaFWVmt7rfUsNIBkKNLGcLdx/lKgglAJQwSyqyBtZa4vImaUtCk0atG/GIQLPWQ DYWyPjsqkPToNaC8gj5xbB+aeNytrAT+CH5SHG1e3CiYlmbD5wCo9k4JQ42fk3Mu cnHEnEFTsCpgbnNY6i5nR17PxjphB21WYTqbe5hE6Koh2F4RJdqJDYdh+d6D7YqH FCi/lyU+mrmKQn60aSs6cyJxHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK54DHEq 3hQwATfuN3gEPMkjUhdJMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZtbCYYElV5guNOZaLAVXomENR4o5w+2hxbMJssPB9uKnSjW4F2Ln8 5Q6Cd1CYwTPRu2h5D5vZ/z78J/cPgJvq+NjWY6htNnhbn1HwkOtOX0tLutGzdfKS Ji/qOEmHicK7zf17AAu+ENfdruli21dNGXyDBFBY+xVZJxIL+taGi9ytI+4IpGcv GNJnagbycUoUna4qTdOCmFOTu6xH6sMMFPLSyJqg3gOUWYA8FI1aZKkTiGGb7Suo VJxDizDOJUTxyn6Vg/4WiArkaW2pN8R8sugHErgQq6mCpCgElpURQCec/hWsoe0p w906NqAay+RcS4kYBn1UPkkomgP96W+s -----END CERTIFICATE-----Generated at Sun Jun 15 09:34:48 2025 by rpki-client