$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft File: omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json) Hash identifier: 4KnfAH6h38QfAgV5u4GB3zCex0pB+KkpLy+A3QbQ4yY= Subject key identifier: F7:FD:DF:C1:39:77:C2:16:DB:E1:73:57:30:1F:54:02:39:97:91:55 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft Manifest number: 6C Signing time: Tue 01 Jul 2025 07:44:02 +0000 Manifest this update: Tue 01 Jul 2025 07:44:01 +0000 Manifest next update: Tue 08 Jul 2025 07:44:01 +0000 Files and hashes: 1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: aa+rXQ/wWA5KFhZzTXsGES4pF7XYTR3iLcqUKrHVk3Q=) 2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Jul 1 07:44:01 2025 GMT Not After : Jul 8 07:44:01 2025 GMT Subject: CN=686391c2-9c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:95:83:94:2d:53:af:c7:f6:57:f0:b8:6a: 20:47:2a:24:d8:1e:a3:f4:35:f3:0e:d4:cc:2f:49: 75:e9:a5:9f:b0:5d:6d:bb:82:bb:3b:f0:2f:81:67: 2c:37:dc:91:65:d2:8f:d1:b6:b6:a6:e3:c0:cf:ce: dc:b3:4d:8a:8e:47:13:fd:0c:7f:f8:b8:b9:1a:db: 3b:3d:51:17:dc:e4:91:51:23:af:a1:4f:78:23:00: 27:7b:36:8f:ee:c5:29:d4:94:11:59:b8:ea:db:02: 42:9f:b5:ec:ae:d7:b3:9d:59:f0:2b:f9:60:5c:8e: d3:8e:a5:4b:36:1b:01:8b:ff:81:c8:26:c5:01:a2: 4d:7d:27:17:b2:68:3d:c8:3c:a0:30:aa:3b:b4:af: 4e:e8:35:d4:37:98:59:00:f5:3b:2b:23:4b:9b:50: 9b:29:ea:a3:39:80:6c:75:29:df:28:d5:6b:53:e1: d9:7a:c3:11:e2:8e:94:8a:f3:b7:35:fa:d1:be:fa: 18:e9:27:89:dc:50:bf:a5:2b:90:af:ee:24:19:8d: d4:83:c7:fd:a8:15:8b:74:71:2b:ba:19:26:57:a1: 29:72:32:74:83:7b:98:e3:07:ed:0d:bf:71:0c:4d: 8e:6f:8d:d7:60:d9:24:c2:cf:72:d3:73:cc:99:2e: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:DF:C1:39:77:C2:16:DB:E1:73:57:30:1F:54:02:39:97:91:55 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:df:ae:57:28:15:d2:4d:0e:a3:24:5f:e5:61:09:d3:b7:33: 97:3c:5a:87:f2:66:51:20:08:d6:64:fe:4d:95:84:5b:6b:24: fd:94:8c:98:75:2b:5f:a1:3b:38:18:fd:3e:88:b3:6f:98:fa: 20:54:a5:b9:af:6a:7d:dc:9c:c8:0d:51:c5:0d:48:a2:17:fa: cb:2f:d3:39:8b:b2:2a:25:48:e4:a3:34:d5:ae:6f:e5:ad:30: 36:c5:9d:44:fa:b3:31:24:df:be:00:4c:95:1b:50:73:5a:3a: 2e:52:6e:94:4e:2c:18:04:07:4b:13:91:4b:71:d7:c8:b3:d9: 59:0e:bd:21:68:32:29:19:e7:37:cb:4a:7f:df:4f:ad:45:29: f7:15:01:0f:c1:02:5b:e9:9f:dd:b5:e8:20:da:ed:5c:7c:07: 39:90:85:38:65:9b:f7:37:8a:a5:ce:c7:aa:80:cd:8d:88:51: 5c:a4:94:35:0b:1b:19:e0:b8:af:06:85:a9:2d:80:dd:50:2c: 9d:e7:a7:92:79:e1:a5:c9:a0:1f:b7:5b:37:11:86:13:59:dd: 7d:2a:39:64:de:0d:93:36:65:37:fb:6a:1d:26:6c:fc:44:e6: 58:86:de:c2:c9:1a:d4:3c:40:76:aa:f0:03:7f:5d:f7:7d:ce: 1f:70:8d:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTBDMDExMC8GA1UEBRMoQTI2NjE2N0EwNEZBRkVFNUFFMUE1MEUwNDU3MEFENUZE NDRFRDY5MjAeFw0yNTA3MDEwNzQ0MDFaFw0yNTA3MDgwNzQ0MDFaMBgxFjAUBgNV BAMTDTY4NjM5MWMyLTljMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpcZWDlC1Tr8f2V/C4aiBHKiTYHqP0NfMO1MwvSXXppZ+wXW27grs78C+BZyw3 3JFl0o/Rtram48DPztyzTYqORxP9DH/4uLka2zs9URfc5JFRI6+hT3gjACd7No/u xSnUlBFZuOrbAkKfteyu17OdWfAr+WBcjtOOpUs2GwGL/4HIJsUBok19JxeyaD3I PKAwqju0r07oNdQ3mFkA9TsrI0ubUJsp6qM5gGx1Kd8o1WtT4dl6wxHijpSK87c1 +tG++hjpJ4ncUL+lK5Cv7iQZjdSDx/2oFYt0cSu6GSZXoSlyMnSDe5jjB+0Nv3EM TY5vjddg2STCz3LTc8yZLmprAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9/3fwTl3 whbb4XNXMB9UAjmXkVUwHwYDVR0jBBgwFoAUomYWegT6/uWuGlDgRXCtX9RO1pIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMEMwLzRBMkVEQzgwQjVF QzExRUZCMDJFQzEwQUM0RjlBRTAyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb21ZV2VnVDZfdVd1R2xEZ1JYQ3RYOVJPMXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MEMwLzRBMkVEQzgwQjVFQzExRUZCMDJFQzEwQUM0RjlBRTAyL29tWVdlZ1Q2X3VX dUdsRGdSWEN0WDlSTzFwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbfrlcoFdJNDqMkX+VhCdO3M5c8WofyZlEgCNZk/k2VhFtrJP2UjJh1 K1+hOzgY/T6Is2+Y+iBUpbmvan3cnMgNUcUNSKIX+ssv0zmLsiolSOSjNNWub+Wt MDbFnUT6szEk374ATJUbUHNaOi5SbpROLBgEB0sTkUtx18iz2VkOvSFoMikZ5zfL Sn/fT61FKfcVAQ/BAlvpn9216CDa7Vx8BzmQhThlm/c3iqXOx6qAzY2IUVyklDUL GxnguK8GhaktgN1QLJ3np5J54aXJoB+3WzcRhhNZ3X0qOWTeDZM2ZTf7ah0mbPxE 5liG3sLJGtQ8QHaq8AN/Xfd9zh9wjfI= -----END CERTIFICATE-----Generated at Tue Jul 1 12:02:12 2025 by rpki-client