$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: SW4b8B8VfhIxFwV6EgNMGENaV1GdNWRpGXKJRso/ms0= Subject key identifier: 09:23:CC:21:D3:41:BC:68:58:13:46:F7:31:A5:B1:8E:4E:DC:D1:36 Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: 2A Signing time: Sat 19 Jul 2025 07:59:48 +0000 Manifest this update: Sat 19 Jul 2025 07:59:47 +0000 Manifest next update: Sat 26 Jul 2025 07:59:47 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: BMeSHUo09trpCVnHKwg8Hrw+jK13TGo2U51wwonN+d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Jul 19 07:59:47 2025 GMT Not After : Jul 26 07:59:47 2025 GMT Subject: CN=687b5074-4952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:16:87:26:34:ec:9a:55:e4:98:05:88:5d: 06:d7:e1:26:4d:90:50:c5:10:e9:d6:ed:d0:f7:ec: 94:b6:4d:b3:e2:3e:eb:f4:48:cb:da:64:77:66:4e: 10:74:79:bd:c9:d8:a7:ec:b6:0b:76:44:9a:8f:d6: e6:6a:ee:94:a5:11:78:ec:ff:38:af:89:31:77:c0: de:ba:4e:ea:2f:03:81:55:15:98:c6:93:b0:11:f0: 44:b1:65:da:3d:08:17:33:7d:0d:50:1c:68:73:18: 45:26:c8:37:a3:8d:1e:48:ca:10:a7:9f:4e:ab:bb: cd:ab:f4:c0:76:38:95:3e:e9:be:cc:4b:87:ab:ef: 41:d1:2c:27:16:6b:a5:63:e8:af:ea:47:25:8a:0b: b7:1a:23:c5:6b:7f:c5:4b:a5:0c:c8:6f:d5:0a:61: 1a:a6:f9:2d:da:d4:eb:cd:ee:91:a4:af:93:2a:9c: 1e:9c:89:a5:a1:35:ad:8c:88:1c:8b:60:dc:6d:2b: e0:29:d3:a0:1a:fb:94:16:09:88:6b:d4:6c:ba:08: 6d:7d:af:3b:7c:67:89:40:49:38:ca:33:11:39:71: 7f:24:9a:2a:59:df:22:cf:61:a7:6c:61:18:10:40: 23:68:6b:1c:25:c3:41:d7:04:aa:89:5a:1a:ed:b8: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:CC:21:D3:41:BC:68:58:13:46:F7:31:A5:B1:8E:4E:DC:D1:36 X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:bd:af:48:03:33:41:57:89:73:3e:13:05:2e:e8:4c:87:06: d5:d2:d1:25:17:2e:7a:b4:c0:52:86:7c:b7:61:cd:30:8a:a2: 9e:02:99:ad:82:f7:54:58:f7:cb:7c:47:06:d6:a1:93:36:31: 18:f9:01:16:5d:c9:17:99:59:6b:1b:15:b6:98:82:98:31:a6: 03:37:f3:cc:8a:4b:d0:98:66:b1:22:22:b3:89:db:b1:17:bc: 44:80:ae:21:41:7c:84:b8:a2:f0:48:6e:ed:6b:3a:8d:7d:f1: fd:10:6b:d5:26:f3:d0:34:7e:e8:49:07:e3:e1:a0:da:60:c2: 1f:72:7c:75:35:1a:77:df:8b:6e:62:2e:df:d2:4e:02:8f:7c: 00:33:c6:3f:44:74:3a:9a:a9:d6:90:25:22:a9:0b:00:1e:a8: ba:19:53:8f:55:65:4e:9f:0c:a7:ff:92:fb:62:a4:05:dc:ab: bc:b4:08:21:29:67:af:47:e0:68:0c:70:1a:ec:1e:b6:a9:38: 0b:25:25:f9:6a:87:28:97:74:c8:7f:ab:9e:c9:c4:b1:4a:09: f3:cd:1e:18:94:9d:56:7e:70:39:59:0a:68:5c:1a:29:6a:b4: cf:f3:60:6f:3b:d8:b3:fd:f5:ec:f0:d9:6c:a5:1e:ae:a9:79: c3:f9:07:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoOTY3M0I1Q0NGMEE4RUE1Q0U0MUEyRTQ3NjMxMUYzNzVD RDgzQzBEMjAeFw0yNTA3MTkwNzU5NDdaFw0yNTA3MjYwNzU5NDdaMBgxFjAUBgNV BAMTDTY4N2I1MDc0LTQ5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc3haHJjTsmlXkmAWIXQbX4SZNkFDFEOnW7dD37JS2TbPiPuv0SMvaZHdmThB0 eb3J2Kfstgt2RJqP1uZq7pSlEXjs/ziviTF3wN66TuovA4FVFZjGk7AR8ESxZdo9 CBczfQ1QHGhzGEUmyDejjR5IyhCnn06ru82r9MB2OJU+6b7MS4er70HRLCcWa6Vj 6K/qRyWKC7caI8Vrf8VLpQzIb9UKYRqm+S3a1OvN7pGkr5MqnB6ciaWhNa2MiByL YNxtK+Ap06Aa+5QWCYhr1Gy6CG19rzt8Z4lASTjKMxE5cX8kmipZ3yLPYadsYRgQ QCNoaxwlw0HXBKqJWhrtuMOfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCSPMIdNB vGhYE0b3MaWxjk7c0TYwHwYDVR0jBBgwFoAUlnO1zPCo6lzkGi5HYxHzdc2DwNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0MxOTM5Q0U2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG5PMXpQQ282bHprR2k1SFl4SHpkYzJEd05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0MxOTM5Q0U2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6 a0dpNUhZeEh6ZGMyRHdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEa9r0gDM0FXiXM+EwUu6EyHBtXS0SUXLnq0wFKGfLdhzTCKop4Cma2C 91RY98t8RwbWoZM2MRj5ARZdyReZWWsbFbaYgpgxpgM388yKS9CYZrEiIrOJ27EX vESAriFBfIS4ovBIbu1rOo198f0Qa9Um89A0fuhJB+PhoNpgwh9yfHU1Gnffi25i Lt/STgKPfAAzxj9EdDqaqdaQJSKpCwAeqLoZU49VZU6fDKf/kvtipAXcq7y0CCEp Z69H4GgMcBrsHrapOAslJflqhyiXdMh/q57JxLFKCfPNHhiUnVZ+cDlZCmhcGilq tM/zYG872LP99ezw2WylHq6pecP5B3w= -----END CERTIFICATE-----Generated at Sun Jul 20 06:43:25 2025 by rpki-client