$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: nbwx9bp/dELuN+ZMTS74rMrWWO6an6RQZWgvN8J2PRE= Subject key identifier: 86:86:A1:47:9E:2D:81:4D:48:D1:2D:6B:4F:2B:D6:2C:3B:C7:3A:87 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0767 Signing time: Fri 22 Aug 2025 21:43:58 +0000 Manifest this update: Fri 22 Aug 2025 21:43:58 +0000 Manifest next update: Fri 29 Aug 2025 21:43:57 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: dA3DPrm+p3F3WV/sUt8MngVgW5FveVrGlpEfAuzam64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Aug 22 21:43:58 2025 GMT Not After : Aug 29 21:43:57 2025 GMT Subject: CN=68a8e49e-721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:55:b4:4a:4b:83:38:61:19:0e:f0:90:eb: 35:6f:d5:b7:6d:2d:23:6f:df:04:a2:56:de:7e:32: 5e:d3:c1:20:33:6c:24:e0:96:0b:d6:01:7a:1e:97: 43:ad:21:a2:e1:44:d2:a6:42:7e:e9:8e:e1:2c:2a: 35:16:ad:a3:36:51:0e:17:32:5f:3d:29:73:1d:d5: c5:71:48:fc:f9:0e:c2:9b:6b:6d:db:87:4d:5d:e9: 5b:c4:2c:24:16:f4:38:31:ae:80:26:d6:38:5e:ea: 66:c7:69:66:09:1c:29:8a:57:0d:7a:ff:5e:d4:4f: dd:4e:10:fa:68:87:43:e2:75:82:06:88:fb:89:40: 59:41:f7:ec:26:9a:37:cd:80:99:a9:f4:34:a8:64: bb:c4:9c:8b:5d:9a:3d:ca:31:76:bc:54:6e:b6:2c: a6:68:c0:f6:ec:dc:d8:7d:31:3d:48:af:09:0f:b2: 39:eb:22:67:1c:3c:82:0f:96:f5:f1:09:b8:e5:7c: ca:ec:77:6c:a7:1e:2a:4f:c7:88:b6:3c:15:58:c4: 65:a1:ff:63:dd:a2:2b:d2:22:af:ff:8e:52:75:e9: 10:08:0f:23:09:27:ac:34:70:9c:5d:f4:81:36:a4: 84:97:ca:e7:df:74:28:2f:a7:c5:7a:46:0c:32:65: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:A1:47:9E:2D:81:4D:48:D1:2D:6B:4F:2B:D6:2C:3B:C7:3A:87 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:10:c1:89:bf:0c:53:18:7e:00:c2:a4:b7:3d:52:70:d4:77: cd:ef:2f:5a:be:7f:2a:73:6c:9e:fc:57:10:2b:30:d1:de:32: 86:b7:f9:f3:e4:04:28:1a:f1:17:e2:87:01:da:fc:14:94:e8: 87:80:ee:27:bf:13:f7:8f:d5:a8:b5:50:e5:78:d3:c2:d2:53: 43:c0:00:ca:df:73:14:cb:81:ac:34:dd:b2:92:fc:9d:6d:25: 15:26:31:6d:c9:1a:75:08:0c:85:40:2b:43:6e:53:97:22:07: 56:38:c5:19:60:5a:3d:34:1b:fc:ed:a4:db:96:72:14:20:c7: aa:bd:6c:16:2d:b3:2c:3b:d9:c6:01:5c:d2:7a:41:ac:d3:c3: 27:29:7e:f6:25:db:1f:a5:11:20:9b:d8:f2:7e:ee:bb:ec:5a: df:ed:22:96:06:66:bf:cd:29:7a:87:02:80:40:7d:0c:28:58: a2:7a:53:0b:f9:77:0a:7c:10:6b:d5:8e:a8:af:b9:7e:6f:68: f8:4f:97:14:b1:52:d4:20:38:1c:6e:df:1e:3b:c1:f5:75:ea: 70:62:ee:0e:49:9d:f0:46:27:be:db:92:fc:ff:7a:cc:c0:20: 1a:aa:2d:1e:39:72:b5:7d:f6:f3:e3:95:1b:95:a8:31:1b:a9: 48:fb:5c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUwODIyMjE0MzU4WhcNMjUwODI5MjE0MzU3WjAYMRYwFAYD VQQDEw02OGE4ZTQ5ZS03MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW1VtEpLgzhhGQ7wkOs1b9W3bS0jb98EolbefjJe08EgM2wk4JYL1gF6HpdD rSGi4UTSpkJ+6Y7hLCo1Fq2jNlEOFzJfPSlzHdXFcUj8+Q7Cm2tt24dNXelbxCwk FvQ4Ma6AJtY4Xupmx2lmCRwpilcNev9e1E/dThD6aIdD4nWCBoj7iUBZQffsJpo3 zYCZqfQ0qGS7xJyLXZo9yjF2vFRutiymaMD27NzYfTE9SK8JD7I56yJnHDyCD5b1 8Qm45XzK7Hdspx4qT8eItjwVWMRlof9j3aIr0iKv/45SdekQCA8jCSesNHCcXfSB NqSEl8rn33QoL6fFekYMMmXVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaGoUee LYFNSNEta08r1iw7xzqHMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEMGJvwxTGH4AwqS3PVJw1HfN7y9avn8qc2ye/FcQKzDR3jKGt/nz 5AQoGvEX4ocB2vwUlOiHgO4nvxP3j9WotVDleNPC0lNDwADK33MUy4GsNN2ykvyd bSUVJjFtyRp1CAyFQCtDblOXIgdWOMUZYFo9NBv87aTblnIUIMeqvWwWLbMsO9nG AVzSekGs08MnKX72JdsfpREgm9jyfu677Frf7SKWBma/zSl6hwKAQH0MKFiielML +XcKfBBr1Y6or7l+b2j4T5cUsVLUIDgcbt8eO8H1depwYu4OSZ3wRie+25L8/3rM wCAaqi0eOXK1ffbz45UblagxG6lI+1xG -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:10 2025 by rpki-client