$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: wOm8094GGpt62MZaE/CFFQKeRY6azEcyB5n2iQi2XvM= Subject key identifier: 43:53:53:CE:01:27:4A:E9:DA:BD:F4:F2:BF:0C:FE:EF:AE:87:83:0E Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 72 Signing time: Tue 12 Aug 2025 23:48:33 +0000 Manifest this update: Tue 12 Aug 2025 23:48:33 +0000 Manifest next update: Tue 19 Aug 2025 23:48:33 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: 1i9bap/tZ20CMHDEgGNC4yZI4Sw0Adp9RkzdwIy/6wY=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Aug 12 23:48:33 2025 GMT Not After : Aug 19 23:48:33 2025 GMT Subject: CN=689bd2d1-fd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:1b:46:c0:4e:ad:ca:86:31:38:4f:e2:ab: fc:4c:e7:85:52:6b:66:bd:90:9d:82:5b:bd:b8:90: e1:f7:2a:95:a3:63:27:2c:a5:b5:9d:ea:29:9d:72: f8:74:b6:7e:ff:4e:4b:da:8d:ad:be:a0:b1:bd:53: 94:a3:82:07:80:9f:72:1b:96:36:7d:3e:e5:16:3e: 1e:78:05:a4:f0:71:a7:f1:0d:58:a0:69:1e:e3:fb: b3:8e:8b:e0:44:c9:6b:aa:7d:cd:74:d8:41:e2:33: 57:dc:b8:5b:f8:ea:cf:c4:d2:61:55:64:e9:15:fe: 1a:93:d2:7b:68:1d:5f:12:a0:6f:fa:ae:5f:7c:82: 9a:d0:4b:60:f7:f6:60:f8:f2:3a:b1:1e:5f:ba:2e: 53:82:e8:28:d7:ad:b8:6c:1d:73:06:8a:03:98:72: a6:14:72:81:2c:a9:8c:48:fd:95:98:d3:06:47:06: e9:1f:c5:4d:81:71:05:d4:55:f0:9b:9c:5f:e9:35: e1:81:8f:e3:89:43:4d:d2:c3:9b:08:4d:2e:ec:58: 29:23:0b:c7:d8:07:5e:57:f2:49:a9:6c:ec:33:fb: ff:e1:8e:7c:09:ff:9e:91:f3:a2:1b:c1:fe:d7:86: d8:d6:5c:b4:af:24:09:27:75:bc:d5:de:20:03:d3: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:53:CE:01:27:4A:E9:DA:BD:F4:F2:BF:0C:FE:EF:AE:87:83:0E X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:dc:7b:e9:81:d9:53:16:77:98:18:43:d4:b5:29:2b:f9:3a: ad:3e:8b:cf:e4:78:08:96:10:8f:8e:a2:09:9e:f5:7b:9e:9d: 57:30:26:1d:8e:c3:91:92:97:13:b7:45:47:e1:0f:8a:64:8b: 55:01:2f:ba:21:e6:39:47:9f:a4:a3:f9:e1:c4:85:b0:43:42: bf:19:0e:94:c9:aa:7b:2a:8e:56:23:84:c2:92:a9:8e:46:c8: 17:d3:87:92:34:30:49:cc:53:32:5f:1f:b7:64:4c:89:b8:aa: 9d:8c:9f:39:cc:d2:5e:99:07:c7:fa:d2:25:d1:db:0e:82:7c: af:0b:fb:57:88:e8:49:d3:5a:62:90:b4:6d:cb:a9:8d:5c:77: 2d:80:60:50:92:ff:82:1a:af:75:93:35:f4:a1:7a:90:76:d7: fd:8f:7c:65:52:41:af:f1:da:44:ce:1d:70:d1:ff:21:7a:c7: 7f:0d:08:41:45:15:f8:e7:40:2c:68:ce:50:cd:68:2d:72:40: 83:64:e2:c6:fa:05:71:05:5d:31:27:bf:8b:ad:3b:99:f1:12: 68:2f:a3:31:ff:6b:f4:87:a1:d4:3a:60:6c:82:d5:20:ec:f6: d5:22:c8:57:86:55:3a:0d:1a:ba:65:aa:8d:a7:f0:7c:d1:95: 9d:01:19:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA4MTIyMzQ4MzNaFw0yNTA4MTkyMzQ4MzNaMBgxFjAUBgNV BAMTDTY4OWJkMmQxLWZkMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC55htGwE6tyoYxOE/iq/xM54VSa2a9kJ2CW724kOH3KpWjYycspbWd6imdcvh0 tn7/Tkvaja2+oLG9U5SjggeAn3IbljZ9PuUWPh54BaTwcafxDVigaR7j+7OOi+BE yWuqfc102EHiM1fcuFv46s/E0mFVZOkV/hqT0ntoHV8SoG/6rl98gprQS2D39mD4 8jqxHl+6LlOC6CjXrbhsHXMGigOYcqYUcoEsqYxI/ZWY0wZHBukfxU2BcQXUVfCb nF/pNeGBj+OJQ03Sw5sITS7sWCkjC8fYB15X8kmpbOwz+//hjnwJ/56R86Ibwf7X htjWXLSvJAkndbzV3iAD0zAnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ1NTzgEn SunavfTyvwz+766Hgw4wHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJfce+mB2VMWd5gYQ9S1KSv5Oq0+i8/keAiWEI+Oogme9XuenVcwJh2O w5GSlxO3RUfhD4pki1UBL7oh5jlHn6Sj+eHEhbBDQr8ZDpTJqnsqjlYjhMKSqY5G yBfTh5I0MEnMUzJfH7dkTIm4qp2MnznM0l6ZB8f60iXR2w6CfK8L+1eI6EnTWmKQ tG3LqY1cdy2AYFCS/4Iar3WTNfShepB21/2PfGVSQa/x2kTOHXDR/yF6x38NCEFF FfjnQCxozlDNaC1yQINk4sb6BXEFXTEnv4utO5nxEmgvozH/a/SHodQ6YGyC1SDs 9tUiyFeGVToNGrplqo2n8HzRlZ0BGYk= -----END CERTIFICATE-----Generated at Wed Aug 13 02:59:51 2025 by rpki-client