$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft File: omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json) Hash identifier: splrJFBM32Hc5p9NNjVPtWSqnYIrYVc+a7FnZm8Ej4Q= Subject key identifier: 38:AF:BD:94:02:74:17:F0:14:55:2C:48:28:7C:F9:23:D0:17:1A:A7 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft Manifest number: 87 Signing time: Sat 23 Aug 2025 06:52:38 +0000 Manifest this update: Sat 23 Aug 2025 06:52:38 +0000 Manifest next update: Sat 30 Aug 2025 06:52:38 +0000 Files and hashes: 1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: PGvV4+VYWDjHcmAq1MMs/XW4jmkBfwHaxXOGbsUMpsQ=) 2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Aug 23 06:52:38 2025 GMT Not After : Aug 30 06:52:38 2025 GMT Subject: CN=68a96536-cf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:36:13:b7:91:ab:07:58:ec:5c:83:75:3e: b9:0d:e5:98:c7:15:5a:e8:84:85:78:af:11:9a:29: 68:c6:76:ba:b5:07:2a:1b:ac:d5:56:c7:13:de:50: 44:4b:ce:f8:71:3f:5a:5d:52:11:c0:20:13:4b:81: 5f:aa:61:0d:a1:be:d0:e0:0e:1c:73:68:b9:da:5e: 27:b2:d7:4d:17:27:82:0d:36:77:08:ed:83:13:14: 96:3a:6e:b1:d8:2e:6b:6b:cc:75:de:39:4e:04:7a: 11:6a:f5:a7:28:e5:08:29:34:49:32:45:ec:61:70: 51:7b:71:2d:83:f3:9d:74:7d:fa:31:f7:4d:33:1d: ee:32:d2:bb:6f:fc:63:fc:3b:91:00:e8:d6:8e:82: f6:f3:4e:3f:f3:d0:21:a9:3e:4a:b0:af:c5:d6:5b: 91:2c:fd:22:cc:d6:3a:52:46:ff:70:b0:0a:54:4f: 8f:02:b3:ee:a6:c3:7f:28:c0:90:18:00:40:08:0f: 1f:38:c4:da:0d:5c:a1:6f:70:aa:92:04:b5:66:49: 9b:a5:3d:de:43:e8:20:02:97:39:af:13:84:e3:91: 15:91:09:48:44:d1:bb:54:54:c4:b8:41:a6:b1:5e: 3f:87:55:9a:50:37:c6:fc:56:5c:cd:c6:a9:97:14: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:BD:94:02:74:17:F0:14:55:2C:48:28:7C:F9:23:D0:17:1A:A7 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:17:e8:da:2a:12:a5:3a:5b:c1:fc:4e:2d:ea:1c:8c:b9:bf: dc:95:6b:8d:6b:c8:ca:9b:4c:3e:84:fb:d3:43:65:a2:29:87: 41:85:59:5a:f3:b1:ce:3c:ea:9d:6d:b1:d5:a4:15:e6:3d:cc: 42:98:5a:85:da:3d:7f:18:50:57:dd:33:87:0b:20:ed:1d:69: 79:09:ba:1c:e7:8d:da:0c:29:aa:ab:3a:db:a5:00:b2:bd:5a: ae:04:54:a6:8f:34:cb:56:75:7f:5b:bb:61:af:da:df:c1:d7: 95:aa:02:05:30:fc:f7:7f:7a:33:0b:70:ab:88:48:ef:12:a5: ff:87:75:19:c4:c9:5f:3e:9d:3e:51:94:d9:d3:c3:ff:11:a3: ef:f3:8e:b5:a3:f1:5d:25:2f:86:4d:e9:7c:84:8c:bf:58:aa: 7c:72:8b:26:25:fb:86:6a:73:a5:ad:9f:28:f2:93:bf:bf:39: 2f:00:c6:18:c2:60:0d:ef:ae:bc:5e:5d:2f:7e:05:b7:d4:61: 6c:c5:7f:19:cd:2d:6c:33:d6:54:0f:f1:a6:97:07:cd:d9:b4: f0:df:b6:b8:aa:16:4c:42:4c:35:0f:78:82:e1:d0:64:a7:6b: a0:30:04:db:c2:83:3f:18:2c:18:4d:4e:f2:59:1c:6d:c5:d2: ea:e8:ad:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EwQzAxMTAvBgNVBAUTKEEyNjYxNjdBMDRGQUZFRTVBRTFBNTBFMDQ1NzBBRDVG RDQ0RUQ2OTIwHhcNMjUwODIzMDY1MjM4WhcNMjUwODMwMDY1MjM4WjAYMRYwFAYD VQQDEw02OGE5NjUzNi1jZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4382E7eRqwdY7FyDdT65DeWYxxVa6ISFeK8Rmiloxna6tQcqG6zVVscT3lBE S874cT9aXVIRwCATS4FfqmENob7Q4A4cc2i52l4nstdNFyeCDTZ3CO2DExSWOm6x 2C5ra8x13jlOBHoRavWnKOUIKTRJMkXsYXBRe3Etg/OddH36MfdNMx3uMtK7b/xj /DuRAOjWjoL2804/89AhqT5KsK/F1luRLP0izNY6Ukb/cLAKVE+PArPupsN/KMCQ GABACA8fOMTaDVyhb3CqkgS1ZkmbpT3eQ+ggApc5rxOE45EVkQlIRNG7VFTEuEGm sV4/h1WaUDfG/FZczcaplxSuyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDivvZQC dBfwFFUsSCh8+SPQFxqnMB8GA1UdIwQYMBaAFKJmFnoE+v7lrhpQ4EVwrV/UTtaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTBDMC80QTJFREM4MEI1 RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91V3VHbERnUlhDdFg5Uk8x cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91 V3VHbERnUlhDdFg5Uk8xcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAF+jaKhKlOlvB/E4t6hyMub/clWuNa8jKm0w+hPvTQ2WiKYdBhVla 87HOPOqdbbHVpBXmPcxCmFqF2j1/GFBX3TOHCyDtHWl5Cboc543aDCmqqzrbpQCy vVquBFSmjzTLVnV/W7thr9rfwdeVqgIFMPz3f3ozC3CriEjvEqX/h3UZxMlfPp0+ UZTZ08P/EaPv8461o/FdJS+GTel8hIy/WKp8cosmJfuGanOlrZ8o8pO/vzkvAMYY wmAN7668Xl0vfgW31GFsxX8ZzS1sM9ZUD/GmlwfN2bTw37a4qhZMQkw1D3iC4dBk p2ugMATbwoM/GCwYTU7yWRxtxdLq6K1s -----END CERTIFICATE-----Generated at Sat Aug 23 16:58:27 2025 by rpki-client