$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: sF5jqLUC0MOTWm4PUm6c6LmEiyKhkeaz3MANw6ZCCpY= Subject key identifier: 26:20:06:F1:D0:1D:83:07:CE:3E:7E:93:08:2B:AD:62:6D:32:A9:0A Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 0236 Signing time: Sun 29 Jun 2025 01:26:57 +0000 Manifest this update: Sun 29 Jun 2025 01:26:56 +0000 Manifest next update: Sun 06 Jul 2025 01:26:56 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: Ro+JqJqafv9RLd/2MaGVML+vksFjmYy7L02/w0siPbQ=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Jun 29 01:26:56 2025 GMT Not After : Jul 6 01:26:56 2025 GMT Subject: CN=68609660-c8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:b7:6f:cd:9d:41:a6:a3:e7:1f:3e:43:24: ac:2a:ce:f5:17:f9:1d:c0:2d:b5:7a:7c:86:79:f8: a9:99:4d:c3:1f:18:bd:75:23:4d:3b:69:99:a9:33: ca:a6:d3:81:1c:d9:a8:9d:1b:d2:36:45:3e:78:8b: 80:23:d7:01:85:3a:7b:59:5b:ba:cf:98:4c:9b:c2: 77:68:48:82:d6:52:a4:c9:9a:ba:23:83:30:40:09: 82:6f:d4:38:d5:d2:1b:09:ce:ba:b6:62:66:54:50: 7b:22:7f:a7:3c:98:29:2f:17:1f:24:ec:ef:99:ff: 29:9f:18:e7:fb:c7:69:5d:c9:99:c3:75:d1:47:e8: 7d:d3:0a:46:21:5a:d5:de:f4:88:09:c1:61:f0:8c: 2e:73:c3:63:2c:5a:dc:0e:46:e1:0e:43:de:d9:6e: aa:14:2d:56:05:1c:b3:c1:6f:e3:cf:ec:91:b8:cd: 93:4f:b6:b8:48:de:0e:79:55:d6:19:25:e4:0d:de: 9d:ee:4d:ee:bb:e2:79:34:1e:4a:6f:94:5a:68:e3: 35:d3:d6:db:8d:89:f9:11:c8:26:ef:b4:23:b8:a3: d8:34:bd:77:32:42:b0:d4:d8:08:d3:52:a4:10:49: 0b:6c:04:58:52:c9:89:63:d4:13:3f:89:64:d7:17: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:20:06:F1:D0:1D:83:07:CE:3E:7E:93:08:2B:AD:62:6D:32:A9:0A X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3d:f3:c2:a9:6e:71:51:45:d5:dc:f7:e4:e1:5b:a2:99:bb: f0:83:26:c8:1e:65:c3:a2:60:14:a6:36:6a:b7:85:de:67:01: e8:81:5b:26:ef:83:1f:10:3b:9a:d1:11:90:58:47:f2:52:52: bd:17:48:be:0a:c5:6c:ed:12:ac:c3:5f:7b:1b:18:dc:8d:86: 5e:14:a8:db:40:0f:d9:bc:6c:b1:64:73:a1:fe:0f:ca:d8:c7: c1:0f:df:4c:91:3a:40:35:1e:29:b5:c0:3a:53:99:0c:40:de: e2:f2:bd:95:6e:69:a0:63:cd:5e:a7:52:e2:51:fe:26:13:b7: 60:59:5f:bf:c0:85:86:18:eb:99:63:7a:4b:5e:50:03:8a:be: 09:65:69:e1:4d:08:46:ba:dc:49:59:2f:60:0e:53:f4:fa:a5: a6:4b:00:70:bc:27:7c:83:b4:28:bb:da:30:4c:d4:6f:94:de: 6c:55:7e:06:68:4b:31:cd:76:5a:d2:2a:cd:57:05:b6:4f:cc: 2c:17:e3:fc:26:04:c4:0a:3f:38:81:95:90:c5:03:49:57:34: 3c:f7:76:e8:b4:4c:10:36:a6:d8:04:8d:bc:21:d5:bc:40:2b: d9:5c:66:95:32:b9:a0:75:67:71:c7:39:56:08:a0:94:11:00: 3d:af:1f:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUwNjI5MDEyNjU2WhcNMjUwNzA2MDEyNjU2WjAYMRYwFAYD VQQDEw02ODYwOTY2MC1jOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlu3b82dQaaj5x8+QySsKs71F/kdwC21enyGefipmU3DHxi9dSNNO2mZqTPK ptOBHNmonRvSNkU+eIuAI9cBhTp7WVu6z5hMm8J3aEiC1lKkyZq6I4MwQAmCb9Q4 1dIbCc66tmJmVFB7In+nPJgpLxcfJOzvmf8pnxjn+8dpXcmZw3XRR+h90wpGIVrV 3vSICcFh8Iwuc8NjLFrcDkbhDkPe2W6qFC1WBRyzwW/jz+yRuM2TT7a4SN4OeVXW GSXkDd6d7k3uu+J5NB5Kb5RaaOM109bbjYn5Ecgm77QjuKPYNL13MkKw1NgI01Kk EEkLbARYUsmJY9QTP4lk1xf1QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYgBvHQ HYMHzj5+kwgrrWJtMqkKMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjPfPCqW5xUUXV3Pfk4VuimbvwgybIHmXDomAUpjZqt4XeZwHogVsm 74MfEDua0RGQWEfyUlK9F0i+CsVs7RKsw197GxjcjYZeFKjbQA/ZvGyxZHOh/g/K 2MfBD99MkTpANR4ptcA6U5kMQN7i8r2VbmmgY81ep1LiUf4mE7dgWV+/wIWGGOuZ Y3pLXlADir4JZWnhTQhGutxJWS9gDlP0+qWmSwBwvCd8g7Qou9owTNRvlN5sVX4G aEsxzXZa0irNVwW2T8wsF+P8JgTECj84gZWQxQNJVzQ893botEwQNqbYBI28IdW8 QCvZXGaVMrmgdWdxxzlWCKCUEQA9rx/R -----END CERTIFICATE-----Generated at Sun Jun 29 23:40:45 2025 by rpki-client