$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: sC6BwYjct2DCj03/hRMfNS7ETw5XqBDl/gQo2jGY7Q0= Subject key identifier: C7:AB:57:C4:68:EF:E1:9C:E0:9A:9F:6F:39:8F:28:16:53:18:13:CC Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0740 Signing time: Sun 08 Jun 2025 21:21:36 +0000 Manifest this update: Sun 08 Jun 2025 21:21:36 +0000 Manifest next update: Sun 15 Jun 2025 21:21:36 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: UlT6vZgJ2fX6QDuFgTpT2j7S0MbJ/hLfEK+tDqp0Beo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 21:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Jun 8 21:21:36 2025 GMT Not After : Jun 15 21:21:36 2025 GMT Subject: CN=6845fee0-b366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:dc:eb:3a:b9:9f:ea:a2:3c:5d:5f:33:63: a6:e5:ac:2a:01:0f:42:06:6d:0a:6d:51:ba:54:0f: c3:5b:e6:7b:4d:5d:b3:06:9f:e1:9c:f1:b1:18:0b: dc:87:84:5d:4c:78:ba:30:9f:cf:09:c2:e5:61:85: 42:e3:e1:f5:15:36:ce:b7:55:51:dc:46:e2:29:83: f5:70:8e:4f:64:0c:26:b1:cf:37:b3:99:e0:50:54: ac:a7:ce:29:1d:f7:8e:0c:85:5f:45:1d:e0:25:f6: 95:6a:19:71:63:aa:f1:df:60:95:70:9a:45:be:82: 89:a5:a6:12:5a:81:34:b2:ef:4d:21:46:bf:62:03: 94:64:36:b6:b7:87:61:3d:94:82:84:4f:1e:3b:1b: a3:89:68:9d:cd:2f:eb:43:f2:ea:71:10:ec:44:5c: 05:a2:21:6b:75:12:87:9c:fd:cd:e2:c8:29:cc:50: 79:56:35:84:26:51:1d:28:9e:c8:67:0c:1e:46:2f: 31:c8:ba:a6:92:9e:33:be:a5:a8:6d:36:d6:c6:4d: d5:e2:20:6c:24:43:72:f6:a0:ab:42:d3:67:5b:ea: e1:be:6f:de:1e:a0:cf:d2:e0:2e:a2:90:29:29:f4: 9c:6b:ca:53:4b:71:3f:74:39:f7:56:ab:8c:3a:c6: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:57:C4:68:EF:E1:9C:E0:9A:9F:6F:39:8F:28:16:53:18:13:CC X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7d:cc:77:cb:42:c7:00:32:3d:52:fb:a1:4e:73:db:8b:5f: 3d:4b:29:96:48:87:30:26:6c:26:fd:46:26:c4:33:55:ee:cd: 78:43:c9:d9:3e:20:af:51:75:8a:5c:a4:db:74:e8:0c:e6:e4: f2:5e:4f:de:97:d2:69:93:e2:f5:ee:8b:9f:b9:5e:de:42:ea: c3:1e:66:18:95:7b:ad:ac:66:96:1a:67:6b:7f:7a:36:cb:e7: 29:ea:61:bf:2f:1d:9b:d1:0f:db:b7:e3:1a:fd:55:14:98:be: f9:df:da:c7:c5:83:d9:96:55:b3:fc:82:8f:50:f3:48:b6:03: da:87:91:bc:b8:2f:72:1e:c4:c1:2c:e3:6f:62:7b:58:2e:60: 00:46:4d:6c:5c:f4:55:f7:78:03:0c:37:06:31:08:eb:0b:18: 78:74:45:96:a3:cd:5a:47:6f:3e:bf:aa:5f:60:77:52:a6:40: b7:4a:6c:28:97:3e:43:3e:22:cb:25:31:e5:9e:fa:91:53:c9: 50:2e:7f:a1:e4:10:48:26:b4:9d:c6:67:63:b5:3f:b7:08:77: 0f:08:ea:a2:8b:15:c8:c7:b8:62:be:04:c0:96:93:9a:8c:90: d0:a7:60:82:0f:ef:92:79:10:bd:f0:f4:1e:26:60:39:59:4e: a7:ac:a5:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUwNjA4MjEyMTM2WhcNMjUwNjE1MjEyMTM2WjAYMRYwFAYD VQQDEw02ODQ1ZmVlMC1iMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD7c6zq5n+qiPF1fM2Om5awqAQ9CBm0KbVG6VA/DW+Z7TV2zBp/hnPGxGAvc h4RdTHi6MJ/PCcLlYYVC4+H1FTbOt1VR3EbiKYP1cI5PZAwmsc83s5ngUFSsp84p HfeODIVfRR3gJfaVahlxY6rx32CVcJpFvoKJpaYSWoE0su9NIUa/YgOUZDa2t4dh PZSChE8eOxujiWidzS/rQ/LqcRDsRFwFoiFrdRKHnP3N4sgpzFB5VjWEJlEdKJ7I ZwweRi8xyLqmkp4zvqWobTbWxk3V4iBsJENy9qCrQtNnW+rhvm/eHqDP0uAuopAp KfSca8pTS3E/dDn3VquMOsaecQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMerV8Ro 7+Gc4JqfbzmPKBZTGBPMMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUfcx3y0LHADI9UvuhTnPbi189SymWSIcwJmwm/UYmxDNV7s14Q8nZ PiCvUXWKXKTbdOgM5uTyXk/el9Jpk+L17oufuV7eQurDHmYYlXutrGaWGmdrf3o2 y+cp6mG/Lx2b0Q/bt+Ma/VUUmL7539rHxYPZllWz/IKPUPNItgPah5G8uC9yHsTB LONvYntYLmAARk1sXPRV93gDDDcGMQjrCxh4dEWWo81aR28+v6pfYHdSpkC3Smwo lz5DPiLLJTHlnvqRU8lQLn+h5BBIJrSdxmdjtT+3CHcPCOqiixXIx7hivgTAlpOa jJDQp2CCD++SeRC98PQeJmA5WU6nrKVI -----END CERTIFICATE-----Generated at Mon Jun 9 09:48:36 2025 by rpki-client