$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: 6xGu18J8hJMIqYCc33bzcUT1yNxX7fzXdt3RlMWg6qg= Subject key identifier: 28:E9:9A:77:44:02:52:7D:0D:57:43:E0:C0:D9:5B:AE:D3:95:71:E7 Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: 43 Signing time: Fri 05 Sep 2025 07:55:18 +0000 Manifest this update: Fri 05 Sep 2025 07:55:17 +0000 Manifest next update: Fri 12 Sep 2025 07:55:17 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: Jzve1Dye64kuZMC62xKUIdj9Z7ggLI0n/jvAtdp2K3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Sep 5 07:55:17 2025 GMT Not After : Sep 12 07:55:17 2025 GMT Subject: CN=68ba9766-8cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:dd:0e:b2:77:d5:6c:36:4d:f0:66:0e:d7: 41:cb:5e:38:5f:00:1e:27:70:cf:31:f5:ee:6c:4d: 08:75:25:6a:37:a0:10:46:92:67:4b:c0:7b:7e:f4: 52:fb:29:ab:92:77:bc:1c:bb:e8:28:90:75:17:c3: 2c:4f:5b:d8:49:10:39:cf:32:c6:f8:70:27:e6:7b: b9:f1:68:bf:44:7e:a7:48:d7:83:f2:d3:65:5b:5a: df:22:83:70:ff:dc:98:6c:61:52:34:72:46:eb:b9: a6:a0:f5:89:b1:3c:85:46:28:b1:aa:24:de:1d:21: e5:b6:d2:5f:ca:1d:70:9d:2d:d9:4b:0e:35:7c:ef: 2c:ee:a3:2f:bf:3c:8a:bb:57:bb:ee:dd:61:67:76: 6a:c0:96:d0:3a:e5:f7:a7:72:3f:2a:7f:4c:4c:30: ed:48:0e:4f:3e:ef:b6:81:92:cf:b3:56:b8:00:58: 83:3c:b2:50:4a:f8:2a:8d:72:59:1a:c0:f5:69:f0: bf:12:a8:c6:91:fb:cf:a7:18:51:04:0e:c5:df:10: e1:7d:f9:b3:f6:70:87:6f:07:11:12:09:08:8e:11: 03:96:d4:e6:43:dd:7d:2d:4c:97:91:34:2c:a1:aa: 77:57:82:28:b1:f4:25:7b:f9:6e:4e:0e:cf:0a:a7: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:9A:77:44:02:52:7D:0D:57:43:E0:C0:D9:5B:AE:D3:95:71:E7 X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f9:a4:c8:26:72:79:fc:1d:2a:25:49:0e:36:14:48:ef:fb: 62:05:2c:01:0c:8d:75:07:4c:81:7d:85:5d:e7:54:5f:84:f4: ee:34:2e:6d:e9:6b:ff:77:5e:05:2e:4d:47:0d:a3:73:b4:bd: 0a:80:c9:26:3f:bf:3a:03:be:7c:6d:b6:60:cc:44:ee:37:15: 1f:33:d0:68:5a:e9:54:74:c6:2f:ea:09:82:7e:06:39:92:56: d3:ae:5e:f4:c0:cf:42:01:e1:81:c5:90:3d:1f:12:c2:2f:9a: 5a:b4:bd:4e:1a:bf:5b:a5:2d:ad:82:f2:a0:f8:1e:fd:63:78: 9f:e0:3e:28:d0:00:32:96:54:b6:1a:54:09:11:28:69:96:48: eb:4a:3d:8b:f8:4c:1a:bf:11:c4:06:fc:d1:e5:aa:92:70:5b: 7f:91:d1:9c:df:ea:a2:f8:f1:51:09:9c:4f:c2:4c:83:73:64: b3:8d:5a:db:59:47:7c:ee:af:00:e4:47:53:2b:33:2d:41:65: 3d:90:1d:e3:bf:7a:37:1b:7d:d4:bb:85:3c:0f:7a:13:89:89: 85:6c:94:05:75:ab:c2:ce:fe:b3:18:9b:03:0c:e4:df:55:03: bf:5a:67:f9:cf:ae:a3:8d:8c:23:53:1f:af:1f:3f:95:95:bc: 24:5d:14:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoOTY3M0I1Q0NGMEE4RUE1Q0U0MUEyRTQ3NjMxMUYzNzVD RDgzQzBEMjAeFw0yNTA5MDUwNzU1MTdaFw0yNTA5MTIwNzU1MTdaMBgxFjAUBgNV BAMTDTY4YmE5NzY2LThjZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGi90OsnfVbDZN8GYO10HLXjhfAB4ncM8x9e5sTQh1JWo3oBBGkmdLwHt+9FL7 KauSd7wcu+gokHUXwyxPW9hJEDnPMsb4cCfme7nxaL9EfqdI14Py02VbWt8ig3D/ 3JhsYVI0ckbruaag9YmxPIVGKLGqJN4dIeW20l/KHXCdLdlLDjV87yzuoy+/PIq7 V7vu3WFndmrAltA65fencj8qf0xMMO1IDk8+77aBks+zVrgAWIM8slBK+CqNclka wPVp8L8SqMaR+8+nGFEEDsXfEOF9+bP2cIdvBxESCQiOEQOW1OZD3X0tTJeRNCyh qndXgiix9CV7+W5ODs8Kp4qxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKOmad0QC Un0NV0PgwNlbrtOVcecwHwYDVR0jBBgwFoAUlnO1zPCo6lzkGi5HYxHzdc2DwNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0MxOTM5Q0U2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG5PMXpQQ282bHprR2k1SFl4SHpkYzJEd05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0MxOTM5Q0U2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6 a0dpNUhZeEh6ZGMyRHdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALP5pMgmcnn8HSolSQ42FEjv+2IFLAEMjXUHTIF9hV3nVF+E9O40Lm3p a/93XgUuTUcNo3O0vQqAySY/vzoDvnxttmDMRO43FR8z0Gha6VR0xi/qCYJ+BjmS VtOuXvTAz0IB4YHFkD0fEsIvmlq0vU4av1ulLa2C8qD4Hv1jeJ/gPijQADKWVLYa VAkRKGmWSOtKPYv4TBq/EcQG/NHlqpJwW3+R0Zzf6qL48VEJnE/CTINzZLONWttZ R3zurwDkR1MrMy1BZT2QHeO/ejcbfdS7hTwPehOJiYVslAV1q8LO/rMYmwMM5N9V A79aZ/nPrqONjCNTH68fP5WVvCRdFOI= -----END CERTIFICATE-----Generated at Sat Sep 6 21:41:21 2025 by rpki-client