$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: oOvkMgNT1mVjtmd7QUrlDbkn+LQd4WIyFm1iMqob59I= Subject key identifier: 4D:02:89:AC:44:16:B7:E7:8F:5F:C6:13:9A:C1:41:31:31:8D:F4:25 Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: 94 Signing time: Thu 21 Aug 2025 06:36:55 +0000 Manifest this update: Thu 21 Aug 2025 06:36:55 +0000 Manifest next update: Thu 28 Aug 2025 06:36:55 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: kIM3/POoX6VTvciZE5RFepreK4fmztYShFVULel1xF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Aug 21 06:36:55 2025 GMT Not After : Aug 28 06:36:55 2025 GMT Subject: CN=68a6be87-0d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:61:ab:55:15:64:5c:b7:62:fa:a7:52:4f: 32:9f:17:42:4a:c4:9d:15:2f:f5:76:06:2d:59:a6: 69:ec:1e:eb:45:74:e6:e1:39:d4:06:c8:19:48:16: 48:6f:e8:fd:a4:ef:58:1b:e3:7f:56:40:6e:5f:6b: b3:77:d9:e6:c1:f0:2f:00:39:b2:c6:f6:72:9d:11: db:a4:38:58:c2:ae:44:7e:f5:c2:67:38:ff:ed:66: 57:fe:f9:0a:52:73:a2:c9:a0:1c:f0:59:16:10:56: 0b:2f:80:7c:54:f1:39:f4:f7:8e:75:d4:50:18:b8: d4:0d:05:74:98:f1:81:d7:34:ee:bd:bd:bc:89:e0: 74:66:1e:e0:02:06:24:81:c7:f1:4f:92:6f:39:29: 14:16:73:ed:cd:1f:f7:8b:bd:f1:a3:4d:3c:93:b6: c7:c3:b7:1e:dd:34:1d:60:63:7f:9f:3a:8a:bf:c4: 3c:da:a2:75:c8:16:b8:60:d4:1f:2d:b6:e9:f6:8d: 2f:54:10:5d:8c:df:cb:03:f0:95:c8:0b:6b:00:1f: 3c:e4:56:ee:7a:2c:5d:ed:01:84:db:a7:1a:69:40: 17:73:fb:fc:c6:38:f1:57:0a:77:9d:56:9f:75:01: a0:97:32:30:35:1c:7f:68:d8:a9:1e:3e:15:ee:86: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:89:AC:44:16:B7:E7:8F:5F:C6:13:9A:C1:41:31:31:8D:F4:25 X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f5:69:fe:9a:f3:15:51:99:7e:c4:e6:69:c7:8a:4d:29:bd: cb:40:0b:e9:3d:c6:45:a9:e6:19:49:99:a2:48:45:8d:0d:c3: 00:08:ea:b5:88:64:e0:ab:0d:a1:9e:a3:5d:6a:79:7f:b2:ad: f3:a6:0b:a8:a2:0a:35:07:d6:13:5e:b6:94:ad:ce:e4:20:bf: 4a:d4:82:c4:3a:c0:dc:c9:55:34:83:27:05:22:45:6d:3e:0f: 34:25:7a:07:0a:fd:4a:e9:26:16:df:48:0a:57:ce:87:e5:4f: 5d:8c:21:7b:ec:fa:21:78:f3:bb:03:0d:05:78:06:46:c1:5f: 49:95:de:16:aa:a7:e6:bf:c3:dc:86:8b:55:2f:49:f8:6c:3c: 9b:7c:7c:23:5f:9f:9f:63:c8:42:c9:54:7a:f4:26:ab:6b:80: 72:5e:e3:a5:22:1b:8a:d9:68:5c:ea:07:97:71:1e:72:4b:0f: 74:05:62:57:0c:7c:38:0c:5b:21:68:e2:a8:f7:ba:f7:24:dc: e0:39:12:b5:94:0a:bc:69:4d:c8:fd:21:9e:6d:fa:ae:69:89: dc:02:d5:63:6f:85:91:f3:a2:8a:f9:8a:f1:0b:37:ea:7f:c0: 75:1a:54:4f:92:30:a3:d3:00:52:4d:49:c6:7e:b1:de:38:6b: 6c:b9:bc:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5OEQ3MjI3Njcw Q0YzQzk5QTcwHhcNMjUwODIxMDYzNjU1WhcNMjUwODI4MDYzNjU1WjAYMRYwFAYD VQQDEw02OGE2YmU4Ny0wZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqlhq1UVZFy3YvqnUk8ynxdCSsSdFS/1dgYtWaZp7B7rRXTm4TnUBsgZSBZI b+j9pO9YG+N/VkBuX2uzd9nmwfAvADmyxvZynRHbpDhYwq5EfvXCZzj/7WZX/vkK UnOiyaAc8FkWEFYLL4B8VPE59PeOddRQGLjUDQV0mPGB1zTuvb28ieB0Zh7gAgYk gcfxT5JvOSkUFnPtzR/3i73xo008k7bHw7ce3TQdYGN/nzqKv8Q82qJ1yBa4YNQf Lbbp9o0vVBBdjN/LA/CVyAtrAB885Fbueixd7QGE26caaUAXc/v8xjjxVwp3nVaf dQGglzIwNRx/aNipHj4V7oaqvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0CiaxE Frfnj1/GE5rBQTExjfQlMB8GA1UdIwQYMBaAFJdLSlZUhuBI0MF2mNcidnDPPJmn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8zNkQ1RDYyQzlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRFalF3WGFZMXlKMmNNODht YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRF alF3WGFZMXlKMmNNODhtYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW9Wn+mvMVUZl+xOZpx4pNKb3LQAvpPcZFqeYZSZmiSEWNDcMACOq1 iGTgqw2hnqNdanl/sq3zpguoogo1B9YTXraUrc7kIL9K1ILEOsDcyVU0gycFIkVt Pg80JXoHCv1K6SYW30gKV86H5U9djCF77PohePO7Aw0FeAZGwV9Jld4Wqqfmv8Pc hotVL0n4bDybfHwjX5+fY8hCyVR69Cara4ByXuOlIhuK2Whc6geXcR5ySw90BWJX DHw4DFshaOKo97r3JNzgORK1lAq8aU3I/SGebfquaYncAtVjb4WR86KK+YrxCzfq f8B1GlRPkjCj0wBSTUnGfrHeOGtsubwf -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:59 2025 by rpki-client