$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: RDdTdoXCBxQMAH48Rxh8t86mgJgIFb2JJuXXT3KWvtY= Subject key identifier: 6E:57:B0:1B:42:79:07:49:D2:49:00:A9:43:2E:87:2E:57:40:10:47 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 0248 Signing time: Sun 03 Aug 2025 02:27:43 +0000 Manifest this update: Sun 03 Aug 2025 02:27:42 +0000 Manifest next update: Sun 10 Aug 2025 02:27:42 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: ELWkXpe99eOz3ahCDQgCYG4oQps+QjZjDRGiMHxKS+k=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Aug 3 02:27:42 2025 GMT Not After : Aug 10 02:27:42 2025 GMT Subject: CN=688ec91f-a3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:2a:58:d0:62:0b:e7:87:fd:a7:ad:3c:37: 88:dc:2c:38:fd:27:9b:0e:4a:ed:3f:8a:83:a5:db: 44:53:6d:05:53:ff:d4:b8:7f:4b:07:2b:2a:7c:11: e4:d3:a5:91:55:ea:95:2b:0e:25:db:6c:5a:b7:b6: 3a:2b:8c:fc:f4:01:a2:af:ba:f7:08:41:aa:54:33: ef:fa:c7:6f:fb:85:0f:03:e1:5a:05:4d:c5:df:84: d7:43:c6:db:07:b3:2f:03:0a:60:66:e5:5e:85:bd: c4:a3:9b:8a:ef:62:e1:21:bd:a4:21:89:1f:d4:ec: 8c:0b:b7:d2:4f:56:bc:37:58:99:f2:6e:d4:f4:7e: bb:ab:15:76:a7:9c:0c:e5:21:cf:9d:0d:1c:a6:04: 48:a2:e8:44:2e:f6:24:f3:6e:b9:af:77:e8:4c:60: 7a:48:f0:89:b1:3a:f5:fd:5e:3f:ef:66:eb:fc:b4: 19:aa:bd:29:65:e2:db:31:b2:74:82:75:88:e2:20: 0a:c9:d7:57:6c:18:e4:58:59:4f:c9:c4:f4:3e:9b: 36:8d:26:2c:b1:ee:58:c1:3f:7a:0f:85:d2:ae:ad: 2b:b9:9f:9a:b6:97:a8:3f:34:64:00:4c:ad:8c:da: 47:8c:92:e1:92:c6:38:ca:80:37:ae:09:a4:3b:bf: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:57:B0:1B:42:79:07:49:D2:49:00:A9:43:2E:87:2E:57:40:10:47 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6c:b6:7c:b4:30:d6:2d:2a:4d:21:52:c4:8e:14:37:5a:88: 5b:93:ef:f0:a4:03:2b:3f:c0:01:14:38:07:20:9c:00:ff:a2: 7b:ac:9c:ca:ee:58:12:15:aa:6c:f9:44:54:9d:27:28:e7:cc: fa:15:52:0d:2f:83:6e:21:bf:eb:75:28:e9:ec:16:cc:8d:db: d2:17:51:1f:05:bd:7f:a4:19:67:7a:5a:64:02:88:21:ad:54: 79:33:cd:cb:c9:5e:73:54:96:45:4c:13:91:51:8e:04:72:20: 4e:8c:9c:1a:dd:2a:47:bf:16:82:85:78:a7:03:d6:16:a7:82: 9b:1c:9f:a2:9c:7c:f1:f6:b7:aa:40:11:a8:c9:99:2d:47:46: d5:e4:e7:96:5d:a1:8e:4f:4a:6e:df:29:5a:59:d3:60:06:34: 96:2b:d6:aa:4c:ca:9e:51:30:b6:6a:b3:f6:87:9d:08:7c:9f: 9d:a7:55:52:59:e9:e4:97:9b:34:c5:64:5f:ce:e0:83:08:b2: c7:af:d8:fb:00:ab:21:0c:49:82:a3:a9:db:a4:3d:87:f9:6d: f8:58:48:c0:cf:e9:41:d9:2d:80:b6:36:2a:1e:4d:8e:7f:d0: 0b:8a:f9:43:3c:a2:bd:0d:5c:5a:0e:c6:be:d1:55:04:3d:9c: e5:21:58:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUwODAzMDIyNzQyWhcNMjUwODEwMDIyNzQyWjAYMRYwFAYD VQQDEw02ODhlYzkxZi1hM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYMqWNBiC+eH/aetPDeI3Cw4/SebDkrtP4qDpdtEU20FU//UuH9LBysqfBHk 06WRVeqVKw4l22xat7Y6K4z89AGir7r3CEGqVDPv+sdv+4UPA+FaBU3F34TXQ8bb B7MvAwpgZuVehb3Eo5uK72LhIb2kIYkf1OyMC7fST1a8N1iZ8m7U9H67qxV2p5wM 5SHPnQ0cpgRIouhELvYk8265r3foTGB6SPCJsTr1/V4/72br/LQZqr0pZeLbMbJ0 gnWI4iAKyddXbBjkWFlPycT0Pps2jSYsse5YwT96D4XSrq0ruZ+atpeoPzRkAEyt jNpHjJLhksY4yoA3rgmkO792QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5XsBtC eQdJ0kkAqUMuhy5XQBBHMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5bLZ8tDDWLSpNIVLEjhQ3Wohbk+/wpAMrP8ABFDgHIJwA/6J7rJzK 7lgSFaps+URUnSco58z6FVINL4NuIb/rdSjp7BbMjdvSF1EfBb1/pBlnelpkAogh rVR5M83LyV5zVJZFTBORUY4EciBOjJwa3SpHvxaChXinA9YWp4KbHJ+inHzx9req QBGoyZktR0bV5OeWXaGOT0pu3ylaWdNgBjSWK9aqTMqeUTC2arP2h50IfJ+dp1VS Wenkl5s0xWRfzuCDCLLHr9j7AKshDEmCo6nbpD2H+W34WEjAz+lB2S2AtjYqHk2O f9ALivlDPKK9DVxaDsa+0VUEPZzlIVh6 -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:09 2025 by rpki-client