$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: uHQjBwamvplBfP2FfOzqErO2ipz9dfpsPJeB6OAz8UU= Subject key identifier: 5A:14:8F:BB:88:BD:B4:74:F6:1F:D8:21:2D:1C:24:C9:DB:E9:89:E5 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 078C Signing time: Tue 04 Nov 2025 21:34:36 +0000 Manifest this update: Tue 04 Nov 2025 21:34:36 +0000 Manifest next update: Tue 11 Nov 2025 21:34:36 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: W6jCwESdEnQBG5J/A0AQ9I2Qhy660JfSiQSd2cMpNOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Nov 4 21:34:36 2025 GMT Not After : Nov 11 21:34:36 2025 GMT Subject: CN=690a716c-056b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:a9:3a:20:1b:c1:c2:bd:ca:e5:ec:ca:87: e1:47:ed:c9:d3:c3:08:2d:85:f8:7b:02:b8:62:22: 23:dc:52:14:67:a2:32:a3:27:cb:1e:3d:3c:94:bc: 8b:63:08:b0:c7:7a:dc:5f:c7:23:17:b7:0e:05:6a: bd:cd:4f:a2:5f:87:18:ea:44:04:4e:45:0c:c7:14: a9:91:27:d6:cf:24:6f:3f:50:90:c2:0e:0e:0b:0d: b9:2a:b0:9a:62:cf:e8:e0:9c:09:27:71:88:4d:a6: 02:bc:87:2c:07:64:32:03:86:cc:f4:8d:c9:e9:76: f4:23:b6:d1:5e:64:7d:75:90:b2:26:fe:98:6b:5e: ab:da:d5:1c:72:4a:7c:1c:61:a9:e0:1b:7b:78:7e: b0:1b:74:e4:04:7c:43:40:56:6d:a8:db:3b:64:02: f2:f0:77:43:85:1b:7a:38:4d:48:ef:d9:0b:45:64: eb:14:af:d9:42:5c:19:bd:2f:99:9a:ea:a9:a7:62: e5:21:8b:bd:bc:e7:3f:7c:7d:d4:1e:f4:49:49:63: ef:5f:63:23:22:e9:34:ce:cb:d3:db:bb:d0:9d:73: 6f:2d:03:9c:a6:83:12:46:ae:55:d0:5b:fc:70:42: 87:14:d0:d9:62:33:a3:0e:e8:c9:85:38:e9:1f:c8: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:8F:BB:88:BD:B4:74:F6:1F:D8:21:2D:1C:24:C9:DB:E9:89:E5 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:06:59:47:8d:6d:79:29:52:d3:c6:e1:18:3c:d1:e1:5e:64: b1:10:bb:40:54:8b:1a:6b:95:37:6c:d7:ae:25:9e:c8:7c:04: 2f:4b:2c:26:29:db:79:28:3d:f0:68:fb:59:79:79:9d:b8:d7: 5a:cd:01:26:8d:23:82:82:d4:af:0d:f1:1d:3d:b0:24:6c:49: d2:55:44:ff:a2:49:70:83:8c:85:0d:a0:51:08:43:0e:4e:82: 86:19:ef:d4:54:6b:55:a7:cb:ec:0c:56:65:65:33:90:dc:24: 6c:00:c9:71:d4:a6:77:3c:ec:44:01:7b:b6:d7:c9:85:b8:99: e6:98:58:03:a4:c3:24:da:e1:96:21:e5:7f:3d:20:5c:f6:cd: b3:0d:d7:0b:03:fb:38:bc:c4:60:d4:c0:f2:1f:df:13:14:bc: c5:4c:97:d3:7a:bb:62:bf:e2:a0:17:95:c6:c2:c9:40:32:5d: 75:99:63:0d:13:00:a4:96:00:ff:60:92:b6:23:d3:d4:89:77: 1d:8d:c0:ee:8c:68:83:e4:0b:7a:69:e6:a7:f6:ec:f0:ac:ea: 9b:89:5e:73:93:84:2f:8b:4c:2e:a2:7c:33:4f:10:15:6c:43: f2:66:a0:ae:71:a5:03:5b:c8:29:49:83:77:26:43:b1:c3:24: ea:b1:54:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUxMTA0MjEzNDM2WhcNMjUxMTExMjEzNDM2WjAYMRYwFAYD VQQDEw02OTBhNzE2Yy0wNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F2pOiAbwcK9yuXsyofhR+3J08MILYX4ewK4YiIj3FIUZ6IyoyfLHj08lLyL Ywiwx3rcX8cjF7cOBWq9zU+iX4cY6kQETkUMxxSpkSfWzyRvP1CQwg4OCw25KrCa Ys/o4JwJJ3GITaYCvIcsB2QyA4bM9I3J6Xb0I7bRXmR9dZCyJv6Ya16r2tUcckp8 HGGp4Bt7eH6wG3TkBHxDQFZtqNs7ZALy8HdDhRt6OE1I79kLRWTrFK/ZQlwZvS+Z muqpp2LlIYu9vOc/fH3UHvRJSWPvX2MjIuk0zsvT27vQnXNvLQOcpoMSRq5V0Fv8 cEKHFNDZYjOjDujJhTjpH8goEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoUj7uI vbR09h/YIS0cJMnb6YnlMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeBllHjW15KVLTxuEYPNHhXmSxELtAVIsaa5U3bNeuJZ7IfAQvSywm Kdt5KD3waPtZeXmduNdazQEmjSOCgtSvDfEdPbAkbEnSVUT/oklwg4yFDaBRCEMO ToKGGe/UVGtVp8vsDFZlZTOQ3CRsAMlx1KZ3POxEAXu218mFuJnmmFgDpMMk2uGW IeV/PSBc9s2zDdcLA/s4vMRg1MDyH98TFLzFTJfTertiv+KgF5XGwslAMl11mWMN EwCklgD/YJK2I9PUiXcdjcDujGiD5At6aean9uzwrOqbiV5zk4Qvi0wuonwzTxAV bEPyZqCucaUDW8gpSYN3JkOxwyTqsVS0 -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:05 2025 by rpki-client