$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: UMPI3LECpVe9KuhD8iV0UzZoZMSzYke1WtHNsJOfe04= Subject key identifier: AF:2B:9B:EC:91:0B:41:03:66:44:F5:19:27:44:48:FE:38:DC:94:53 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0725 Signing time: Mon 14 Apr 2025 21:32:26 +0000 Manifest this update: Mon 14 Apr 2025 21:32:25 +0000 Manifest next update: Mon 21 Apr 2025 21:32:25 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: wqKwx8ORlW1suDII3dsc1qCfiO36nBmq+wNTxNa+Xak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 21:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Apr 14 21:32:25 2025 GMT Not After : Apr 21 21:32:25 2025 GMT Subject: CN=67fd7ee9-9cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:40:67:b4:fd:39:b1:8f:1f:8c:ae:fb:a3: 82:6f:0d:90:11:17:eb:06:a9:66:3c:5f:60:5f:96: f6:c2:d3:07:e5:51:e3:af:9f:85:80:cb:c1:99:11: e5:38:85:e6:a3:73:72:14:31:e4:01:af:67:a8:eb: 4a:e9:a1:4f:56:66:9c:60:47:69:81:3a:18:4b:a9: f8:c6:51:7a:ad:d6:f9:c2:a4:e4:2e:13:46:bb:03: cb:21:2b:ff:51:04:9f:74:f0:3b:ff:30:e9:55:36: aa:5d:a6:6c:50:1e:5a:4c:9b:12:b3:58:4d:5f:27: 30:f4:bf:c1:0c:48:a5:8c:dd:9f:86:4d:67:ce:a4: df:49:83:d3:68:47:8a:c6:28:64:cf:f4:4e:c7:e9: dc:fe:ad:45:02:b8:08:1c:f9:0a:d1:b1:1e:b3:52: 82:7f:52:54:e5:42:cc:2a:fa:60:1e:c4:34:e3:d9: 6f:1b:0f:69:5c:50:cd:40:32:34:cc:90:74:7c:09: 19:dd:98:77:76:e7:9c:99:38:87:28:c4:e6:78:3f: a6:92:fd:9f:e8:97:d6:b6:5d:52:86:91:ba:f6:63: 2b:61:e4:2b:a5:63:79:81:c9:9b:64:e6:90:5c:42: aa:f2:56:1a:4e:c1:e7:57:8c:9d:30:9c:48:71:e1: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:9B:EC:91:0B:41:03:66:44:F5:19:27:44:48:FE:38:DC:94:53 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:73:6f:d6:26:f7:11:cc:54:23:f7:28:88:ba:dd:9a:c2:f7: cb:68:79:c0:ad:5e:73:ce:98:17:0d:ee:e3:5a:eb:fa:f4:72: ae:65:d9:aa:ba:72:03:40:35:33:90:d2:e3:fe:cf:16:6b:a2: c9:3a:9f:b2:91:5b:a7:41:62:c3:a5:95:92:9f:93:cb:da:75: 18:e1:70:80:cd:98:25:5d:a1:3a:90:08:4d:0a:ae:1b:d0:1d: d4:fe:13:48:37:ee:49:dd:d0:7d:f9:90:09:35:4e:dc:ec:e7: 21:a0:96:68:f4:07:3d:c4:23:b8:c0:1c:11:84:7c:fb:6f:ef: 04:09:6c:2f:d5:e3:26:9e:d1:7d:95:c8:74:73:89:6a:9f:fc: 4a:ba:0c:6c:7b:c9:d5:cd:ba:04:70:91:23:50:08:73:e0:48: e3:bc:c0:8a:15:f8:c7:9e:eb:2b:4a:ba:4b:3e:4c:e4:dc:ae: 10:90:9c:17:23:8a:03:71:ef:76:06:d1:e7:3f:30:d0:a4:cd: b6:90:12:29:ab:ec:ed:4b:cf:2c:20:09:80:93:c0:59:0a:57: 1b:b3:d2:47:96:85:fa:ff:59:e3:9c:ce:58:d2:e2:be:68:7e: b3:97:e1:8e:05:07:c9:51:65:34:21:cf:b6:5f:38:7d:27:d5: 3d:b8:af:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUwNDE0MjEzMjI1WhcNMjUwNDIxMjEzMjI1WjAYMRYwFAYD VQQDEw02N2ZkN2VlOS05Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy19AZ7T9ObGPH4yu+6OCbw2QERfrBqlmPF9gX5b2wtMH5VHjr5+FgMvBmRHl OIXmo3NyFDHkAa9nqOtK6aFPVmacYEdpgToYS6n4xlF6rdb5wqTkLhNGuwPLISv/ UQSfdPA7/zDpVTaqXaZsUB5aTJsSs1hNXycw9L/BDEiljN2fhk1nzqTfSYPTaEeK xihkz/ROx+nc/q1FArgIHPkK0bEes1KCf1JU5ULMKvpgHsQ049lvGw9pXFDNQDI0 zJB0fAkZ3Zh3duecmTiHKMTmeD+mkv2f6JfWtl1ShpG69mMrYeQrpWN5gcmbZOaQ XEKq8lYaTsHnV4ydMJxIceGcMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8rm+yR C0EDZkT1GSdESP443JRTMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6c2/WJvcRzFQj9yiIut2awvfLaHnArV5zzpgXDe7jWuv69HKuZdmq unIDQDUzkNLj/s8Wa6LJOp+ykVunQWLDpZWSn5PL2nUY4XCAzZglXaE6kAhNCq4b 0B3U/hNIN+5J3dB9+ZAJNU7c7OchoJZo9Ac9xCO4wBwRhHz7b+8ECWwv1eMmntF9 lch0c4lqn/xKugxse8nVzboEcJEjUAhz4EjjvMCKFfjHnusrSrpLPkzk3K4QkJwX I4oDce92BtHnPzDQpM22kBIpq+ztS88sIAmAk8BZClcbs9JHloX6/1njnM5Y0uK+ aH6zl+GOBQfJUWU0Ic+2Xzh9J9U9uK9j -----END CERTIFICATE-----Generated at Wed Apr 16 22:19:18 2025 by rpki-client