$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: +JjvWj9p7J4X+xl1bkUsVdprOvmdX40BDpEPhj1peBg= Subject key identifier: 37:B8:80:CD:3C:0E:70:E2:A9:52:FC:37:02:A1:C6:9B:37:AD:3A:A0 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 0272 Signing time: Sun 19 Oct 2025 03:55:35 +0000 Manifest this update: Sun 19 Oct 2025 03:55:34 +0000 Manifest next update: Sun 26 Oct 2025 03:55:34 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: 1agxV+3Aaeh/nPDy74aEerJTA41K9Gbs6k5+YD3VoiQ=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: 5xlmT2kfel1cvCWV/wEirk2FPvjV62JTYKUe5pZJSHw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: n0IQiq3O+ncd9Kcastq7g2l5ig8brTY34NCrsK665Dg=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: iFRRbtQ83DAhQeOuv0x/8D2BoQrQtE9Qr5lou3dWXyY=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: bTu32emo4oNYJVA1lCeQHupAf6pJqBWu/TVi/rnIfJU=) 6: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IctexMIkkmuKRY28It4wmvJrqOn2UvVnqHfHqiMz3qg=) 7: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: RaDP91UEhN5m0mKcwjFniZyRM8v4oThc8IlQpZodOMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Oct 19 03:55:34 2025 GMT Not After : Oct 26 03:55:34 2025 GMT Subject: CN=68f46136-03f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:2f:ba:9f:d7:35:46:11:5e:1e:be:27:1b: 3f:2c:48:ad:70:8e:77:5b:46:d6:7e:29:b2:bb:8e: cb:38:03:85:2c:b0:31:7b:3d:52:ef:a9:62:0f:7f: b4:a0:96:51:c0:0a:cd:13:c5:2b:c2:bd:76:fa:2e: 95:bd:fd:5c:9a:4a:3d:18:87:d8:c6:df:b7:22:3f: 78:24:e5:b0:88:b6:16:81:2f:88:eb:3d:6e:f6:a0: f6:4e:3b:4f:ba:e0:51:6b:27:e9:2c:1b:c0:05:00: 86:55:d4:3c:92:60:62:39:16:34:b8:71:fb:9a:c3: d0:f9:88:a5:d4:a1:54:9b:3b:c4:7d:13:85:0a:f0: 9b:d6:7d:72:81:29:7a:7b:d4:46:c5:87:72:17:8f: db:e1:88:0e:89:c5:15:25:bd:c5:05:18:6b:09:c7: 1f:ba:73:85:11:17:bb:24:a6:77:57:2a:3b:33:fe: bc:63:e5:38:69:ae:87:9e:27:73:0d:c9:09:63:ec: c9:d4:8b:02:39:4a:d9:ec:d7:a6:5e:d7:6a:dd:53: 74:15:df:a8:3d:5c:35:c4:a6:0e:b8:b5:20:20:92: 6f:df:ca:81:3a:1c:4b:08:af:88:c4:c6:94:68:dc: 02:58:36:52:f0:b3:c6:a3:d6:34:5a:37:66:a6:0d: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:80:CD:3C:0E:70:E2:A9:52:FC:37:02:A1:C6:9B:37:AD:3A:A0 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:79:99:a2:76:c8:3d:5a:03:e9:d0:27:38:4c:0c:12:8c:e0: 2f:f6:15:d6:4a:3a:9d:89:6d:4a:de:bb:ae:81:8d:e1:7e:da: c9:92:17:27:9d:29:77:18:eb:9e:99:06:ed:cd:0d:68:13:ac: 6c:14:57:ef:d2:63:2a:2e:1f:1f:bd:4a:ab:80:50:e8:14:e9: 35:0c:64:0b:a2:03:04:81:b0:f9:b1:8e:73:6e:52:fb:b6:fa: 93:81:6e:9d:ca:1f:84:ba:db:7e:ad:ef:9a:56:29:a5:2a:db: 59:72:bb:dc:6f:29:d3:84:6d:9b:3e:1f:16:f0:0b:82:c9:6d: d9:cd:22:ab:6c:d0:39:c4:0b:86:b6:9e:20:6c:f4:e3:fb:7e: a2:5c:c2:8a:22:8f:3a:f4:ff:d3:15:26:6e:79:41:49:85:d8: 8f:03:ef:87:a1:4a:1f:b7:b4:5a:bf:fc:a4:79:7f:92:27:25: 69:db:ac:7b:84:3f:c2:43:db:49:d6:e9:89:ad:52:36:ee:4d: ae:96:34:f4:28:a2:38:8f:3c:ea:e4:0b:f7:66:4f:0a:83:b7: 0f:39:fa:b1:37:2d:51:79:59:a2:2d:ac:91:db:94:c9:4f:43: d3:0d:79:87:07:4b:ad:57:e5:ec:d1:c5:af:0d:13:35:4f:5e: b5:1c:bb:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUxMDE5MDM1NTM0WhcNMjUxMDI2MDM1NTM0WjAYMRYwFAYD VQQDEw02OGY0NjEzNi0wM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhIvup/XNUYRXh6+Jxs/LEitcI53W0bWfimyu47LOAOFLLAxez1S76liD3+0 oJZRwArNE8Urwr12+i6Vvf1cmko9GIfYxt+3Ij94JOWwiLYWgS+I6z1u9qD2TjtP uuBRayfpLBvABQCGVdQ8kmBiORY0uHH7msPQ+Yil1KFUmzvEfROFCvCb1n1ygSl6 e9RGxYdyF4/b4YgOicUVJb3FBRhrCccfunOFERe7JKZ3Vyo7M/68Y+U4aa6Hnidz DckJY+zJ1IsCOUrZ7NemXtdq3VN0Fd+oPVw1xKYOuLUgIJJv38qBOhxLCK+IxMaU aNwCWDZS8LPGo9Y0Wjdmpg2+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe4gM08 DnDiqVL8NwKhxps3rTqgMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDeZmidsg9WgPp0Cc4TAwSjOAv9hXWSjqdiW1K3ruugY3hftrJkhcn nSl3GOuemQbtzQ1oE6xsFFfv0mMqLh8fvUqrgFDoFOk1DGQLogMEgbD5sY5zblL7 tvqTgW6dyh+Eutt+re+aVimlKttZcrvcbynThG2bPh8W8AuCyW3ZzSKrbNA5xAuG tp4gbPTj+36iXMKKIo869P/TFSZueUFJhdiPA++HoUoft7Rav/ykeX+SJyVp26x7 hD/CQ9tJ1umJrVI27k2uljT0KKI4jzzq5Av3Zk8Kg7cPOfqxNy1ReVmiLayR25TJ T0PTDXmHB0utV+Xs0cWvDRM1T161HLt8 -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:38 2025 by rpki-client