$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft File: 0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json) Hash identifier: BMOTqjpzFLOz8+9mjLnQ5UFM4mgha0Ac4wdl88Xxd90= Subject key identifier: C4:F1:F0:01:50:DA:65:62:8C:A7:07:6C:B6:10:E1:FA:E9:08:E5:80 Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD Certificate issuer: /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft Manifest number: 0A1F Signing time: Fri 22 Aug 2025 19:55:45 +0000 Manifest this update: Fri 22 Aug 2025 19:55:45 +0000 Manifest next update: Fri 29 Aug 2025 19:55:45 +0000 Files and hashes: 1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: esMfTAURte7wZBUWcdhG3pdw62NGPeZSR0L3S8mPl3U=) 2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD Validity Not Before: Aug 22 19:55:45 2025 GMT Not After : Aug 29 19:55:45 2025 GMT Subject: CN=68a8cb41-edc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:88:a0:56:65:b5:19:9a:b8:81:0b:b6:3a:fd: 8f:8d:f5:54:0b:ef:9c:d2:f7:54:4b:d8:f1:6a:83: 73:7e:6e:97:7b:38:83:95:02:e1:73:92:6d:48:aa: 2f:36:d0:c8:c0:3b:62:dd:9c:73:e9:47:81:57:5e: 13:7b:be:31:bb:25:23:42:a3:f6:5c:f4:e6:0a:b7: 64:b7:59:33:42:b5:33:4e:6f:83:e0:93:14:fe:1c: bb:c4:5b:8e:d5:c9:89:38:53:c8:3b:65:f4:d7:34: 8a:ea:7e:6e:75:95:0c:3c:b0:e3:8e:cd:e0:92:4d: 20:15:25:3f:8c:27:cb:99:91:2b:0a:8c:27:00:da: 13:4d:64:cd:21:20:24:ea:7b:c1:cc:d2:d1:53:04: 8a:34:c2:5a:f7:02:b1:ab:62:56:af:fb:54:06:0a: 9e:f4:26:ba:5a:2d:a1:4d:dc:46:5f:cb:0e:15:1b: eb:84:74:37:f2:85:57:49:dc:d4:53:0c:dd:7d:0b: 13:be:b3:9e:ca:45:34:3f:cc:d2:97:75:7f:5a:03: ea:8f:11:d6:a3:e2:39:4b:b2:3c:45:ea:77:08:7d: d4:4b:9e:8c:75:fe:09:a7:47:0c:e6:2f:cf:7d:fb: 72:e4:35:5b:82:28:e6:07:9b:b4:71:f6:75:74:66: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:F0:01:50:DA:65:62:8C:A7:07:6C:B6:10:E1:FA:E9:08:E5:80 X509v3 Authority Key Identifier: keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:69:d9:9e:6d:4b:f8:a6:df:c1:10:69:3d:27:62:a7:83:9c: cf:b8:f3:6e:71:e1:86:88:27:e9:e9:bc:62:18:3e:2b:1b:a2: 6b:ac:d6:b3:3c:1b:6f:c0:c4:54:26:b8:14:b0:98:59:3b:5c: 20:58:d6:5c:e8:51:28:22:d7:5c:9f:18:af:87:4a:01:5b:f4: 11:77:5a:02:b2:85:f1:75:85:e9:48:00:67:9e:1a:61:fe:d9: a9:65:f9:95:95:5a:63:cb:56:46:7b:5d:9d:39:c6:60:23:55: 0e:80:7c:7f:68:66:e8:2e:65:95:67:88:81:77:7f:07:af:e3: 62:d4:39:5d:2e:e7:e9:82:aa:56:d5:b7:fb:c1:64:83:a1:20: e1:7d:8f:77:b5:b4:c3:2d:a5:e5:9e:c8:4b:fe:9f:35:cc:df: 6b:35:b3:b6:7a:d6:10:52:e4:5a:a6:2a:8a:90:c0:31:cb:0b: 5c:ec:2b:6d:10:ca:8c:42:da:f4:5d:4a:28:3a:8b:d4:ab:9a: 20:cb:0a:55:bd:90:8b:8e:2c:ba:1b:de:97:77:0c:0c:b4:69: d3:1c:f1:ee:0f:5f:32:49:32:2d:3e:d2:f1:1d:59:69:0e:07: 67:2c:c4:15:3a:13:71:e0:c8:28:2f:27:98:82:78:1c:a0:c4: ec:14:74:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3NTgxMTAvBgNVBAUTKEQwQTNBNjlFMkFDMTBDMkMxMDUzRjcyRjc0OTk0N0VD MjJCOUMzQ0QwHhcNMjUwODIyMTk1NTQ1WhcNMjUwODI5MTk1NTQ1WjAYMRYwFAYD VQQDEw02OGE4Y2I0MS1lZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IigVmW1GZq4gQu2Ov2PjfVUC++c0vdUS9jxaoNzfm6XeziDlQLhc5JtSKov NtDIwDti3Zxz6UeBV14Te74xuyUjQqP2XPTmCrdkt1kzQrUzTm+D4JMU/hy7xFuO 1cmJOFPIO2X01zSK6n5udZUMPLDjjs3gkk0gFSU/jCfLmZErCownANoTTWTNISAk 6nvBzNLRUwSKNMJa9wKxq2JWr/tUBgqe9Ca6Wi2hTdxGX8sOFRvrhHQ38oVXSdzU UwzdfQsTvrOeykU0P8zSl3V/WgPqjxHWo+I5S7I8Rep3CH3US56Mdf4Jp0cM5i/P ffty5DVbgijmB5u0cfZ1dGbjrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTx8AFQ 2mVijKcHbLYQ4frpCOWAMB8GA1UdIwQYMBaAFNCjpp4qwQwsEFP3L3SZR+wiucPN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDc1OC8zMzM4OTg4NDc5 N0IxMUVBOUIyN0VDMzdDNEY5QUUwMi8wS09tbmlyQkRDd1FVX2N2ZEpsSDdDSzV3 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLT21uaXJCREN3UVVfY3ZkSmxIN0NLNXc4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDc1OC8zMzM4OTg4NDc5N0IxMUVBOUIyN0VDMzdDNEY5QUUwMi8wS09tbmlyQkRD d1FVX2N2ZEpsSDdDSzV3ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTadmebUv4pt/BEGk9J2Kng5zPuPNuceGGiCfp6bxiGD4rG6JrrNaz PBtvwMRUJrgUsJhZO1wgWNZc6FEoItdcnxivh0oBW/QRd1oCsoXxdYXpSABnnhph /tmpZfmVlVpjy1ZGe12dOcZgI1UOgHx/aGboLmWVZ4iBd38Hr+Ni1DldLufpgqpW 1bf7wWSDoSDhfY93tbTDLaXlnshL/p81zN9rNbO2etYQUuRapiqKkMAxywtc7Ctt EMqMQtr0XUooOovUq5ogywpVvZCLjiy6G96XdwwMtGnTHPHuD18ySTItPtLxHVlp DgdnLMQVOhNx4MgoLyeYgngcoMTsFHQX -----END CERTIFICATE-----Generated at Sun Aug 24 09:43:14 2025 by rpki-client