$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft File: omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json) Hash identifier: lk+rwEhDT4eFIoF1ZmBmLpB4dTWkWTDpKZU8/YdvZSs= Subject key identifier: C0:7D:56:36:7B:43:B3:AC:4C:3F:40:A2:2E:40:79:93:12:0E:89:D2 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft Manifest number: A4 Signing time: Sun 19 Oct 2025 09:30:21 +0000 Manifest this update: Sun 19 Oct 2025 09:30:20 +0000 Manifest next update: Sun 26 Oct 2025 09:30:20 +0000 Files and hashes: 1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: 3N+nOZt02xci4HXBAqUYgTC8d6HiJA7aGgVyZ2VqejE=) 2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Oct 19 09:30:20 2025 GMT Not After : Oct 26 09:30:20 2025 GMT Subject: CN=68f4afad-d9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:09:13:87:31:68:8a:d9:4b:d8:27:2c:bb: 51:52:de:d3:46:3e:d5:d1:c9:ee:54:36:73:6d:af: 44:68:26:3e:20:d3:a6:27:2b:f0:c1:0f:d1:69:d7: 5e:58:af:1b:5d:e6:45:8e:17:f0:0a:fb:ff:d4:64: 3c:e2:bc:88:db:59:32:9c:8a:e9:ef:09:c7:86:86: 09:43:b5:ca:c1:b2:f3:20:a3:08:bf:b7:32:58:c7: af:8d:e6:df:9b:a3:c0:03:de:10:5a:50:0e:a6:7e: 79:4d:44:fa:b6:c2:79:34:e3:9c:25:06:be:18:f5: 1c:ee:df:c2:17:39:ba:fd:a3:d2:59:86:32:20:af: ae:d2:ef:24:d4:0f:ae:ce:60:18:a7:75:71:05:c9: 60:12:6a:40:6f:91:94:7d:97:be:a9:f6:34:3a:40: 32:98:9e:42:61:d7:b0:1c:d9:ce:46:37:88:01:6e: d6:43:85:f1:60:5d:7f:c7:33:20:78:64:1d:cf:f5: 38:1d:3e:5b:ba:a2:45:3d:4e:66:82:dd:e2:87:0b: 3e:62:d9:f2:42:32:37:be:3c:8e:06:76:69:94:81: 39:31:6c:09:d6:6b:f2:88:f9:dd:82:cf:d7:5c:d4: 62:8e:22:fa:09:5d:b6:be:c9:b3:59:94:7f:b8:69: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7D:56:36:7B:43:B3:AC:4C:3F:40:A2:2E:40:79:93:12:0E:89:D2 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:09:04:31:55:0f:d5:59:cb:95:f1:80:67:f3:cb:8a:a1:5a: aa:a3:2c:94:6a:1f:85:5c:65:ed:53:ac:84:24:4c:9d:4e:aa: 9e:67:34:ec:b0:30:aa:b7:84:05:d0:c0:98:28:11:0a:76:8c: 65:a0:aa:f7:73:ae:3d:06:76:f8:94:74:28:47:41:a2:e1:15: d9:52:95:e5:16:10:9f:99:e4:bb:12:d3:8b:33:15:05:a4:b6: 3b:83:c7:87:3e:c4:99:5a:9e:1d:0c:9c:25:a3:b7:01:5f:00: 81:63:02:ee:33:20:d7:dc:52:1a:49:60:74:fc:7a:ce:fc:9c: 5c:cd:15:2f:a7:be:1e:ee:f5:e3:8f:f2:69:cf:0c:20:0a:bb: d8:b7:7b:1d:b9:1f:88:1e:36:39:fe:8e:98:c3:f6:46:e7:95: 14:90:fe:9a:a5:8b:30:28:67:40:64:be:fe:29:14:c2:9f:56: 51:c0:2f:59:5a:c2:6f:c0:a9:96:25:4a:67:0e:70:ab:e7:b9: fe:59:58:48:54:64:83:ab:67:73:f9:e3:61:e9:f6:89:c1:98: e4:d7:56:d4:82:58:b8:52:aa:2d:b3:d4:cf:f3:19:69:4f:0f: fb:3a:45:60:6f:e0:b5:a3:f9:74:b8:31:70:28:ac:43:6e:da: 0d:d9:00:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EwQzAxMTAvBgNVBAUTKEEyNjYxNjdBMDRGQUZFRTVBRTFBNTBFMDQ1NzBBRDVG RDQ0RUQ2OTIwHhcNMjUxMDE5MDkzMDIwWhcNMjUxMDI2MDkzMDIwWjAYMRYwFAYD VQQDEw02OGY0YWZhZC1kOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rcJE4cxaIrZS9gnLLtRUt7TRj7V0cnuVDZzba9EaCY+INOmJyvwwQ/Radde WK8bXeZFjhfwCvv/1GQ84ryI21kynIrp7wnHhoYJQ7XKwbLzIKMIv7cyWMevjebf m6PAA94QWlAOpn55TUT6tsJ5NOOcJQa+GPUc7t/CFzm6/aPSWYYyIK+u0u8k1A+u zmAYp3VxBclgEmpAb5GUfZe+qfY0OkAymJ5CYdewHNnORjeIAW7WQ4XxYF1/xzMg eGQdz/U4HT5buqJFPU5mgt3ihws+YtnyQjI3vjyOBnZplIE5MWwJ1mvyiPndgs/X XNRijiL6CV22vsmzWZR/uGmNEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB9VjZ7 Q7OsTD9Aoi5AeZMSDonSMB8GA1UdIwQYMBaAFKJmFnoE+v7lrhpQ4EVwrV/UTtaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTBDMC80QTJFREM4MEI1 RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91V3VHbERnUlhDdFg5Uk8x cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91 V3VHbERnUlhDdFg5Uk8xcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWCQQxVQ/VWcuV8YBn88uKoVqqoyyUah+FXGXtU6yEJEydTqqeZzTs sDCqt4QF0MCYKBEKdoxloKr3c649Bnb4lHQoR0Gi4RXZUpXlFhCfmeS7EtOLMxUF pLY7g8eHPsSZWp4dDJwlo7cBXwCBYwLuMyDX3FIaSWB0/HrO/JxczRUvp74e7vXj j/JpzwwgCrvYt3sduR+IHjY5/o6Yw/ZG55UUkP6apYswKGdAZL7+KRTCn1ZRwC9Z WsJvwKmWJUpnDnCr57n+WVhIVGSDq2dz+eNh6faJwZjk11bUgli4Uqots9TP8xlp Tw/7OkVgb+C1o/l0uDFwKKxDbtoN2QD6 -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:48 2025 by rpki-client