$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: BZeJl8DeQkwr7FhwYWLxk8HqnzyAvKjQjP+iqAI/OWY= Subject key identifier: C0:5E:46:E1:13:7C:78:5A:B9:5B:9F:F3:3F:B6:97:6F:DA:3D:71:5E Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 77 Signing time: Fri 22 Aug 2025 23:32:11 +0000 Manifest this update: Fri 22 Aug 2025 23:32:10 +0000 Manifest next update: Fri 29 Aug 2025 23:32:10 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: DGcR5uNK5UZNUBJhxZESg8fsr3K+EGlrMdvs7p2lkqY=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Aug 22 23:32:10 2025 GMT Not After : Aug 29 23:32:10 2025 GMT Subject: CN=68a8fdfa-b247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:9e:09:d6:27:c6:97:96:82:c6:22:ae:67: 25:41:2a:d7:02:45:56:4f:9f:32:cf:0b:b7:68:2c: 46:ba:c8:de:ab:07:c7:cc:d9:a3:3b:62:48:80:a4: c2:29:ea:cc:53:8b:c3:9f:ab:a9:51:a9:cc:d9:b4: 63:0b:a9:04:ca:16:10:00:ad:3b:32:a5:e3:5d:15: e6:97:48:fe:cc:54:06:16:f6:58:db:68:a8:7b:b3: 5e:7a:33:a3:c9:71:a2:65:b3:8c:fd:5b:e4:a9:e3: 9f:da:a7:70:97:b0:b2:c2:8b:07:57:4d:0a:4f:e6: de:04:b1:c0:44:4f:1f:37:39:e7:fd:28:a3:2d:32: 53:62:eb:7b:c1:06:cd:85:ae:dc:35:80:a7:b6:bf: c8:2c:f6:74:68:8c:d6:51:bf:9d:ab:b7:fe:34:90: 32:d2:2f:23:f0:7c:50:e7:f2:4c:a6:98:cd:18:74: 00:b9:ba:26:75:29:ed:34:65:fd:e8:43:69:8f:70: 24:a3:5a:6a:91:14:52:0b:1b:24:4d:c0:37:bd:9a: 31:d5:14:ec:1a:40:4d:30:3b:75:f7:9c:8f:59:10: a7:92:86:42:e7:1d:5e:15:40:dc:8c:bf:dd:42:48: 9d:ed:2a:53:41:7f:00:cc:7f:dd:bc:87:8a:8f:60: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:46:E1:13:7C:78:5A:B9:5B:9F:F3:3F:B6:97:6F:DA:3D:71:5E X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:53:fe:40:1d:9d:35:43:4f:fa:fd:6d:f4:bd:29:55:be:99: fd:9b:5c:0c:08:a7:00:3f:78:b3:9a:c0:9b:33:c7:a1:ed:b4: 0b:d0:da:57:f3:1c:e0:58:a8:65:34:86:f1:4e:6d:52:25:5e: 9e:35:0d:85:04:51:d1:c2:11:cc:4d:93:fe:6b:69:0b:bb:41: fa:22:fd:8b:b2:6b:d6:a4:52:68:f7:47:75:e1:4e:e2:fd:45: 1f:20:ad:04:d2:bd:94:20:73:e8:0f:3d:57:fe:86:e5:36:f8: 88:76:f8:9e:83:78:c1:9f:ec:06:d7:b6:69:2a:4c:e5:00:7a: 37:22:ca:2b:e2:c9:a9:22:da:a8:27:04:33:7a:9a:3a:3a:7f: bc:5e:f5:db:f1:1e:50:d7:34:5f:cb:b8:fa:1f:06:d3:af:c8: d2:1d:8c:f1:ec:c3:00:7e:06:5d:d8:4a:d7:32:69:f4:43:c5: 8a:b1:ec:d3:47:99:b4:d6:bd:dc:d2:63:a6:e6:35:ab:54:72: 6d:f0:d4:49:ce:54:5a:fb:40:73:9f:88:80:7f:ea:81:05:a8: 72:5c:9a:82:3a:16:0b:87:40:ff:83:e7:51:74:6b:62:82:6b: 59:ea:00:87:18:07:c6:c1:e9:65:ce:d2:3c:51:61:0d:d1:84: 9e:ed:83:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA4MjIyMzMyMTBaFw0yNTA4MjkyMzMyMTBaMBgxFjAUBgNV BAMTDTY4YThmZGZhLWIyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1aZ4J1ifGl5aCxiKuZyVBKtcCRVZPnzLPC7doLEa6yN6rB8fM2aM7YkiApMIp 6sxTi8Ofq6lRqczZtGMLqQTKFhAArTsypeNdFeaXSP7MVAYW9ljbaKh7s156M6PJ caJls4z9W+Sp45/ap3CXsLLCiwdXTQpP5t4EscBETx83Oef9KKMtMlNi63vBBs2F rtw1gKe2v8gs9nRojNZRv52rt/40kDLSLyPwfFDn8kymmM0YdAC5uiZ1Ke00Zf3o Q2mPcCSjWmqRFFILGyRNwDe9mjHVFOwaQE0wO3X3nI9ZEKeShkLnHV4VQNyMv91C SJ3tKlNBfwDMf928h4qPYGCxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwF5G4RN8 eFq5W5/zP7aXb9o9cV4wHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1T/kAdnTVDT/r9bfS9KVW+mf2bXAwIpwA/eLOawJszx6HttAvQ2lfz HOBYqGU0hvFObVIlXp41DYUEUdHCEcxNk/5raQu7Qfoi/Yuya9akUmj3R3XhTuL9 RR8grQTSvZQgc+gPPVf+huU2+Ih2+J6DeMGf7AbXtmkqTOUAejciyiviyaki2qgn BDN6mjo6f7xe9dvxHlDXNF/LuPofBtOvyNIdjPHswwB+Bl3YStcyafRDxYqx7NNH mbTWvdzSY6bmNatUcm3w1EnOVFr7QHOfiIB/6oEFqHJcmoI6FguHQP+D51F0a2KC a1nqAIcYB8bB6WXO0jxRYQ3RhJ7tg1E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:59:37 2025 by rpki-client