$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: VNAsyuRNVH85e7EB2pmmYQx7XOJ6edNyaw5oWSHAmec= Subject key identifier: 25:23:96:DC:4C:68:2C:76:C7:43:36:A1:0C:59:0A:70:FB:3E:AB:DB Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 5D Signing time: Wed 02 Jul 2025 23:44:46 +0000 Manifest this update: Wed 02 Jul 2025 23:44:45 +0000 Manifest next update: Wed 09 Jul 2025 23:44:45 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: 4OmOVdBOJzrm4y036eDLIfCOxynUYohBGhT5YYijXfc=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Jul 2 23:44:45 2025 GMT Not After : Jul 9 23:44:45 2025 GMT Subject: CN=6865c46d-88e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:9c:fe:89:61:66:e7:06:e4:ae:58:66:f8: fa:00:84:ac:f4:e8:2c:0d:a4:9b:c3:a9:73:04:cb: be:2a:0c:c4:d1:08:d9:cf:2d:fb:00:49:97:b6:44: f2:78:98:72:52:e5:5a:3d:38:6b:5d:13:24:d0:5c: 83:0a:ad:b1:37:e3:c8:48:05:2e:2a:bd:64:b2:50: af:f9:ae:d1:26:d5:55:74:59:65:bc:39:9d:2c:89: 63:fe:0f:c1:2d:ed:46:f1:6a:8b:25:c6:43:13:fa: fd:a6:e7:8d:30:43:5e:1b:87:fe:0a:1e:30:74:1c: c7:1c:aa:d2:31:40:6c:b8:60:e1:75:34:62:fb:9b: 44:3c:ca:0b:8b:a5:83:20:44:99:5a:30:cd:01:9a: 99:af:5a:bf:f8:40:ad:33:06:b0:3d:c6:cc:ab:a7: 10:67:33:08:d2:b3:cd:de:2e:2f:fa:3d:70:af:e7: cc:47:ca:34:ba:91:50:d1:dc:01:4e:6f:43:7c:72: 1e:c4:a1:22:3d:ef:86:d1:27:d3:95:f3:12:2d:fa: ed:21:ed:78:1f:be:18:2f:32:7e:30:b4:24:be:f4: 0d:f9:a4:82:6d:6e:66:eb:07:20:35:3f:dd:de:ea: 0b:76:01:46:04:83:8e:e5:21:bc:5d:8f:39:9b:17: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:96:DC:4C:68:2C:76:C7:43:36:A1:0C:59:0A:70:FB:3E:AB:DB X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5b:c7:b8:d8:d1:60:ba:35:5d:a2:66:ab:ec:23:9f:a5:81: 75:4b:4d:d1:7d:fa:86:73:13:da:98:df:99:ac:84:22:ad:bb: cc:0d:d0:7e:27:87:a0:2b:9e:c0:3b:a5:98:9f:f7:22:6d:8b: 92:96:41:7e:63:30:1f:e3:48:29:12:62:8e:91:ef:1a:79:5f: 03:3b:8f:b1:09:6e:f1:60:e4:51:b9:c4:d6:96:81:9f:b4:7a: 7e:5e:2f:16:f2:00:4c:62:6b:50:26:e3:17:8d:41:f0:f1:dd: ec:74:98:83:85:9c:f6:80:bb:33:f7:e7:f2:11:55:be:74:b8: 11:45:1a:de:28:f2:40:5d:0e:41:06:57:0d:12:87:3d:68:5e: 98:ee:e3:77:f0:c2:eb:4e:72:64:73:4a:6a:87:4f:06:48:7c: 40:6a:7e:fc:45:a7:41:71:94:9d:fd:0e:b7:aa:d6:23:d4:9c: f3:c3:a1:f0:f7:f1:ac:80:2e:34:27:b7:fd:c4:db:1f:f3:75: 54:0b:be:ad:2e:75:c9:16:4f:b5:dc:a8:13:5b:f3:84:68:a8: 15:9d:f7:3c:07:56:b1:83:21:b9:cd:6f:76:3f:2e:c5:20:17: c5:71:cc:ed:73:54:14:13:d0:fb:2f:09:bd:ed:84:ed:de:d5: a9:8a:bf:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA3MDIyMzQ0NDVaFw0yNTA3MDkyMzQ0NDVaMBgxFjAUBgNV BAMTDTY4NjVjNDZkLTg4ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoo5z+iWFm5wbkrlhm+PoAhKz06CwNpJvDqXMEy74qDMTRCNnPLfsASZe2RPJ4 mHJS5Vo9OGtdEyTQXIMKrbE348hIBS4qvWSyUK/5rtEm1VV0WWW8OZ0siWP+D8Et 7UbxaoslxkMT+v2m540wQ14bh/4KHjB0HMccqtIxQGy4YOF1NGL7m0Q8yguLpYMg RJlaMM0BmpmvWr/4QK0zBrA9xsyrpxBnMwjSs83eLi/6PXCv58xHyjS6kVDR3AFO b0N8ch7EoSI974bRJ9OV8xIt+u0h7XgfvhgvMn4wtCS+9A35pIJtbmbrByA1P93e 6gt2AUYEg47lIbxdjzmbFyBxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJSOW3Exo LHbHQzahDFkKcPs+q9swHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBbx7jY0WC6NV2iZqvsI5+lgXVLTdF9+oZzE9qY35mshCKtu8wN0H4n h6ArnsA7pZif9yJti5KWQX5jMB/jSCkSYo6R7xp5XwM7j7EJbvFg5FG5xNaWgZ+0 en5eLxbyAExia1Am4xeNQfDx3ex0mIOFnPaAuzP35/IRVb50uBFFGt4o8kBdDkEG Vw0Shz1oXpju43fwwutOcmRzSmqHTwZIfEBqfvxFp0FxlJ39Dreq1iPUnPPDofD3 8ayALjQnt/3E2x/zdVQLvq0udckWT7XcqBNb84RoqBWd9zwHVrGDIbnNb3Y/LsUg F8VxzO1zVBQT0PsvCb3thO3e1amKvxo= -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:19 2025 by rpki-client