$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: 5OKqVuCiR7/PLWJnjdLzytLhazBPzEANAXn3ftakDOY= Subject key identifier: 20:7A:47:E9:62:BA:89:92:68:B4:9C:F5:C9:42:47:4E:B3:D0:87:50 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0784 Signing time: Sat 18 Oct 2025 22:50:44 +0000 Manifest this update: Sat 18 Oct 2025 22:50:44 +0000 Manifest next update: Sat 25 Oct 2025 22:50:44 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: 6MOhPEkgyvllj35xqS2sR8hwmvvBGRTw8GZOByO6P3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Oct 18 22:50:44 2025 GMT Not After : Oct 25 22:50:44 2025 GMT Subject: CN=68f419c4-a91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:3b:40:fc:f5:e2:fb:61:66:5a:a0:0b:3b: 97:44:5f:13:47:0a:db:f8:d9:cc:b4:f6:a1:08:1a: 9f:09:30:a2:0f:68:55:20:0f:45:30:5f:71:37:6d: bf:0d:f8:47:2b:4d:d0:a5:48:a7:e3:ac:4a:2c:34: af:fb:21:93:c3:11:f9:34:cf:16:42:5d:88:50:65: a5:03:ca:58:a1:a7:7f:fb:1e:de:5c:51:56:2f:58: c1:90:a2:21:ba:ca:8e:19:0f:ae:1a:b7:ce:43:00: f8:59:92:02:72:c4:a6:a5:02:0e:79:1f:da:85:7e: 4c:35:da:c6:30:8f:44:74:ec:3f:5f:47:e1:e5:5e: d0:82:1e:1d:1d:54:31:e3:38:18:0a:cd:37:e4:83: 74:bf:bb:c6:48:32:ea:25:fc:e6:69:80:64:d1:a6: 63:81:f0:95:63:71:80:b8:09:23:c2:36:08:d8:a1: f5:e8:b3:06:36:d0:da:39:45:3f:09:14:39:cf:b4: b3:9f:32:1a:5c:f0:58:d5:04:a9:b3:f5:fd:f9:2f: b1:e4:7b:55:39:93:90:e3:61:58:f7:d3:7c:91:38: c0:0f:6d:31:19:bc:ae:c6:e2:47:70:b4:f9:dc:ab: 64:82:22:79:f4:f0:f6:59:b8:42:16:79:ff:80:dd: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:47:E9:62:BA:89:92:68:B4:9C:F5:C9:42:47:4E:B3:D0:87:50 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a1:9e:ec:b0:f5:c8:62:55:5f:f2:5f:dd:d7:e5:09:c9:f0: 40:52:a2:3f:49:d8:35:be:b1:23:34:ab:e9:78:02:48:53:0b: 6e:67:72:d0:7a:00:c6:8b:e3:f4:8c:a2:f0:e0:5f:5a:32:20: a0:12:9f:6c:76:00:0d:28:70:c5:70:90:db:9f:a7:77:cf:d7: bb:49:49:ed:1b:97:b8:f9:2a:d6:93:19:bb:ef:8f:69:2d:73: ad:71:62:6a:ab:1f:77:e3:5d:5a:90:98:1d:4a:2c:72:c0:eb: e3:6d:3c:d7:49:99:29:7a:de:42:45:10:f6:5b:9a:7f:87:d8: e2:ce:73:ff:fd:9b:db:d2:eb:ea:ec:73:18:b3:8a:91:89:49: 56:fb:5f:3d:a4:9c:9a:54:3d:12:0c:30:e3:64:ea:4b:b7:82: 3d:71:9c:af:8b:b6:ed:32:e4:9e:66:be:48:22:de:00:e7:ca: f9:2b:f1:42:a1:c8:d9:60:da:1e:83:42:19:c0:9a:a8:95:fa: 96:37:0e:e6:d3:97:aa:1e:43:af:e0:02:2f:db:cb:dd:fe:fe: b3:29:a8:18:05:a4:03:f6:01:5a:47:f0:64:7e:c4:67:04:9c: 24:75:fd:b8:9e:dd:6f:8a:d6:01:f6:71:5e:22:8f:6a:0a:22: 5e:95:ef:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUxMDE4MjI1MDQ0WhcNMjUxMDI1MjI1MDQ0WjAYMRYwFAYD VQQDEw02OGY0MTljNC1hOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIE7QPz14vthZlqgCzuXRF8TRwrb+NnMtPahCBqfCTCiD2hVIA9FMF9xN22/ DfhHK03QpUin46xKLDSv+yGTwxH5NM8WQl2IUGWlA8pYoad/+x7eXFFWL1jBkKIh usqOGQ+uGrfOQwD4WZICcsSmpQIOeR/ahX5MNdrGMI9EdOw/X0fh5V7Qgh4dHVQx 4zgYCs035IN0v7vGSDLqJfzmaYBk0aZjgfCVY3GAuAkjwjYI2KH16LMGNtDaOUU/ CRQ5z7SznzIaXPBY1QSps/X9+S+x5HtVOZOQ42FY99N8kTjAD20xGbyuxuJHcLT5 3KtkgiJ59PD2WbhCFnn/gN0R/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB6R+li uomSaLSc9clCR06z0IdQMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGoZ7ssPXIYlVf8l/d1+UJyfBAUqI/Sdg1vrEjNKvpeAJIUwtuZ3LQ egDGi+P0jKLw4F9aMiCgEp9sdgANKHDFcJDbn6d3z9e7SUntG5e4+SrWkxm7749p LXOtcWJqqx93411akJgdSixywOvjbTzXSZkpet5CRRD2W5p/h9jiznP//Zvb0uvq 7HMYs4qRiUlW+189pJyaVD0SDDDjZOpLt4I9cZyvi7btMuSeZr5IIt4A58r5K/FC ocjZYNoeg0IZwJqolfqWNw7m05eqHkOv4AIv28vd/v6zKagYBaQD9gFaR/BkfsRn BJwkdf24nt1vitYB9nFeIo9qCiJele/u -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:12 2025 by rpki-client