$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: JcSEz+YqU4GBhgxy9ZxEnPuBKdrn2/Fr4fqt6iOsovM= Subject key identifier: 57:AF:5F:24:51:40:D7:FB:E2:FE:45:DD:C9:A1:26:9F:7B:82:1A:B1 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 94 Signing time: Sun 19 Oct 2025 00:56:59 +0000 Manifest this update: Sun 19 Oct 2025 00:56:59 +0000 Manifest next update: Sun 26 Oct 2025 00:56:59 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: h5tWZEBPPW/hs5PC2YmFH1hheqxiT3bHXu6Gu9LGGsU=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Oct 19 00:56:59 2025 GMT Not After : Oct 26 00:56:59 2025 GMT Subject: CN=68f4375b-787f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:fa:70:4e:68:d1:1f:3f:f0:e7:db:8c:12: 11:5c:cd:df:bd:fa:24:1d:29:8d:99:8e:35:f4:c2: a2:76:36:5b:ae:72:5e:9f:b4:5b:ca:f2:56:e5:9a: cf:38:42:1d:76:d1:eb:c4:49:f6:fd:3d:42:e1:2e: 04:d7:37:4c:d6:09:49:5b:a2:ff:be:e0:45:ff:1f: 65:9d:5b:13:81:a1:dc:35:ff:4a:24:db:ce:7b:ea: ed:4f:9c:67:7b:55:0d:1c:ab:3b:c4:46:5e:de:b4: 8d:4b:a8:70:cc:28:73:61:35:64:be:1e:7e:91:1d: f3:b0:7a:9b:db:b5:d2:de:54:6f:bf:26:b1:e6:f7: 44:47:66:ca:aa:72:1e:e1:82:9c:48:b4:f8:b5:32: c3:c4:40:f8:e0:0a:38:09:72:cb:bb:fc:90:fa:3c: 35:3b:fb:25:8f:e3:c8:4a:53:b4:e2:38:e9:6f:81: 86:86:56:bc:e5:3a:8b:2b:00:3d:a5:33:f8:42:47: 1f:35:f9:22:01:21:32:00:85:1a:6a:18:c7:1e:d3: 1c:57:1a:4f:ef:0e:9f:04:6e:bb:63:64:f0:34:49: 3f:ea:18:b9:6e:53:7f:ed:50:63:58:b0:06:7c:2a: 52:c1:7f:ca:c2:f6:74:02:a7:3b:5a:5f:9d:1a:bb: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AF:5F:24:51:40:D7:FB:E2:FE:45:DD:C9:A1:26:9F:7B:82:1A:B1 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a2:3d:7d:be:99:15:e9:83:db:00:c5:92:7e:2c:e3:94:63: 26:73:8e:8c:3b:78:3a:aa:89:c1:98:83:c1:fc:16:03:71:aa: a6:50:6c:b8:44:d5:93:5c:e9:ac:0a:a3:cd:58:c2:c3:68:8f: 07:23:b3:5b:47:3c:41:9b:ed:18:67:aa:31:a0:04:52:c7:f8: 56:73:3f:30:b8:5f:6a:4d:8a:61:9f:69:67:a2:00:71:0b:44: a8:a0:c8:a4:07:1e:16:03:1a:de:54:a3:22:2f:a3:af:98:03: b0:6f:62:fd:73:12:58:a0:9f:fc:0d:d6:43:8b:85:a9:d5:6e: 86:48:47:bf:dc:90:5e:07:39:a8:1e:54:99:81:96:3d:ca:c6: eb:88:e5:fc:98:3c:d0:83:a9:67:0f:b4:bc:62:4e:6d:ff:b3: 09:23:3a:e0:5b:fd:04:02:91:f4:24:29:f3:8c:e7:52:2f:b1: 19:5f:4b:d6:c3:87:3a:59:3b:34:d0:16:e3:a0:9b:7f:68:84: 61:57:25:b8:3a:27:71:63:de:91:5c:0a:6d:d7:7d:79:7c:a2: fd:5c:11:c8:92:62:b5:fd:87:c0:a7:f1:e5:76:d7:e5:36:a7: 1f:34:4f:76:77:bf:f9:e3:b1:03:75:15:dd:70:d4:c8:96:e6: ef:c8:93:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4 RDdERUI2OTQwHhcNMjUxMDE5MDA1NjU5WhcNMjUxMDI2MDA1NjU5WjAYMRYwFAYD VQQDEw02OGY0Mzc1Yi03ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xj6cE5o0R8/8OfbjBIRXM3fvfokHSmNmY419MKidjZbrnJen7RbyvJW5ZrP OEIddtHrxEn2/T1C4S4E1zdM1glJW6L/vuBF/x9lnVsTgaHcNf9KJNvOe+rtT5xn e1UNHKs7xEZe3rSNS6hwzChzYTVkvh5+kR3zsHqb27XS3lRvvyax5vdER2bKqnIe 4YKcSLT4tTLDxED44Ao4CXLLu/yQ+jw1O/slj+PISlO04jjpb4GGhla85TqLKwA9 pTP4QkcfNfkiASEyAIUaahjHHtMcVxpP7w6fBG67Y2TwNEk/6hi5blN/7VBjWLAG fCpSwX/KwvZ0Aqc7Wl+dGruN6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFevXyRR QNf74v5F3cmhJp97ghqxMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj NEpNOENTZWQtWG1OZmV0cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARoj19vpkV6YPbAMWSfizjlGMmc46MO3g6qonBmIPB/BYDcaqmUGy4 RNWTXOmsCqPNWMLDaI8HI7NbRzxBm+0YZ6oxoARSx/hWcz8wuF9qTYphn2lnogBx C0SooMikBx4WAxreVKMiL6OvmAOwb2L9cxJYoJ/8DdZDi4Wp1W6GSEe/3JBeBzmo HlSZgZY9ysbriOX8mDzQg6lnD7S8Yk5t/7MJIzrgW/0EApH0JCnzjOdSL7EZX0vW w4c6WTs00BbjoJt/aIRhVyW4OidxY96RXApt1315fKL9XBHIkmK1/YfAp/Hldtfl NqcfNE92d7/547EDdRXdcNTIlubvyJMo -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:11 2025 by rpki-client