$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: IEusXXXqFasI0ZooFlgEY+p5dF8g/WHSi1v0+Bcz0Uw= Subject key identifier: 56:7E:1C:B9:83:49:58:FB:F9:E0:6F:A3:A1:D7:DD:B1:E3:63:48:F5 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 57 Signing time: Fri 20 Jun 2025 23:12:12 +0000 Manifest this update: Fri 20 Jun 2025 23:12:12 +0000 Manifest next update: Fri 27 Jun 2025 23:12:12 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: c0r0cmtvbcgD6b0CxmQd4a8cWFJ2cYnGRD61h5HLkc8=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 23:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Jun 20 23:12:12 2025 GMT Not After : Jun 27 23:12:12 2025 GMT Subject: CN=6855eacc-74bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:4d:57:37:8f:a6:a6:c5:4c:40:e4:0b:02: 70:28:ea:89:97:73:e8:8c:7c:ff:57:bd:d1:39:9b: 9f:35:f2:46:c4:3d:31:c5:b6:09:f6:e9:82:d5:42: f7:43:19:b9:e5:02:43:54:02:f8:d9:d8:3b:db:19: 2e:12:53:e5:58:28:29:e9:04:ba:11:43:37:e9:58: 41:e3:16:40:84:e4:f2:05:ac:cc:44:90:6c:52:2a: 53:75:0c:28:b8:53:cc:13:5b:36:ea:b2:ec:ef:00: 26:d8:28:03:d8:23:2d:0e:19:3a:0f:f4:6a:c0:e5: 84:89:1f:7e:c1:22:45:f2:8a:47:3a:37:36:5b:86: b2:3c:c1:87:2f:d0:fc:f6:91:87:46:81:b5:c0:e6: a4:b5:0c:c3:b5:8e:9c:58:87:06:2d:10:52:33:1d: 84:ea:d4:96:ff:b4:bf:9e:67:f6:0d:dc:db:bf:eb: 00:0b:e5:9a:b0:52:5f:88:2d:e5:7b:48:ba:60:38: a2:97:b8:89:3c:1e:ab:44:f1:61:3f:af:73:f7:b2: 2f:c8:6b:a1:1b:88:a8:8e:88:e0:fc:5e:30:92:54: aa:f4:dc:2e:b4:e2:27:bc:b2:46:a3:2b:74:1e:97: a2:2d:1b:a2:96:df:6e:1d:43:4d:fa:cb:d2:de:0d: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7E:1C:B9:83:49:58:FB:F9:E0:6F:A3:A1:D7:DD:B1:E3:63:48:F5 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ed:7e:92:15:cf:5f:3a:d3:1d:e6:d7:2b:8c:c3:af:d4:20: 33:91:57:74:39:0d:20:6b:29:f6:44:ff:76:b5:11:94:dc:83: f3:40:5b:a5:b0:3b:5a:4f:07:fe:54:fd:f5:33:37:e3:5b:99: 8c:50:2d:ff:6d:04:e8:a7:42:2d:3a:60:98:1b:aa:fe:55:cb: 48:5b:ea:68:fe:bf:14:11:90:8c:ae:14:8f:29:fc:77:ca:b3: 70:a6:13:1c:d9:c7:24:3c:6b:0e:76:37:6a:b9:79:7a:1c:ab: e5:77:82:1c:f7:e8:ee:20:2c:67:c7:be:38:e6:5e:c7:a1:10: 2e:a8:31:53:40:47:d3:87:cd:eb:13:94:60:21:f3:dd:f4:21: 8d:31:6a:90:aa:6e:6a:ac:38:ea:f3:09:05:6a:92:d8:de:33: 84:4e:8b:80:91:0f:af:02:32:f9:95:7e:5e:f2:45:6c:b5:22: 44:f1:c7:ea:06:48:e5:7b:6c:4b:0c:ea:d8:8c:e9:0e:22:38: e8:85:33:4c:7f:f6:a5:ef:ed:73:c5:4d:d6:5b:4c:04:a9:c8: 09:d5:c9:89:c1:4b:b9:6f:eb:c2:57:98:1a:f0:dd:71:9a:31: 64:b2:6d:87:12:7a:df:00:05:0f:4e:bb:01:9b:96:19:17:3c: a4:e1:7c:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA2MjAyMzEyMTJaFw0yNTA2MjcyMzEyMTJaMBgxFjAUBgNV BAMTDTY4NTVlYWNjLTc0YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZyE1XN4+mpsVMQOQLAnAo6omXc+iMfP9XvdE5m5818kbEPTHFtgn26YLVQvdD GbnlAkNUAvjZ2DvbGS4SU+VYKCnpBLoRQzfpWEHjFkCE5PIFrMxEkGxSKlN1DCi4 U8wTWzbqsuzvACbYKAPYIy0OGToP9GrA5YSJH37BIkXyikc6NzZbhrI8wYcv0Pz2 kYdGgbXA5qS1DMO1jpxYhwYtEFIzHYTq1Jb/tL+eZ/YN3Nu/6wAL5ZqwUl+ILeV7 SLpgOKKXuIk8HqtE8WE/r3P3si/Ia6EbiKiOiOD8XjCSVKr03C604ie8skajK3Qe l6ItG6KW324dQ036y9LeDZZvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVn4cuYNJ WPv54G+jodfdseNjSPUwHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAftfpIVz1860x3m1yuMw6/UIDORV3Q5DSBrKfZE/3a1EZTcg/NAW6Ww O1pPB/5U/fUzN+NbmYxQLf9tBOinQi06YJgbqv5Vy0hb6mj+vxQRkIyuFI8p/HfK s3CmExzZxyQ8aw52N2q5eXocq+V3ghz36O4gLGfHvjjmXsehEC6oMVNAR9OHzesT lGAh8930IY0xapCqbmqsOOrzCQVqktjeM4ROi4CRD68CMvmVfl7yRWy1IkTxx+oG SOV7bEsM6tiM6Q4iOOiFM0x/9qXv7XPFTdZbTASpyAnVyYnBS7lv68JXmBrw3XGa MWSybYcSet8ABQ9OuwGblhkXPKThfIE= -----END CERTIFICATE-----Generated at Sat Jun 21 16:21:43 2025 by rpki-client