$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: xTQB8IBOszJzawGbHlwr3e0zmYDYJpH+oytwLflmnRs= Subject key identifier: EF:C9:0D:3A:CE:A6:5B:12:2C:2E:07:20:D0:F5:8E:61:D6:8C:60:21 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 0279 Signing time: Mon 03 Nov 2025 01:37:18 +0000 Manifest this update: Mon 03 Nov 2025 01:37:18 +0000 Manifest next update: Mon 10 Nov 2025 01:37:18 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: jZtsfn4JUydtGnMYo2BF6VH9lnoovNibpeJt8uvhTEM=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: 5xlmT2kfel1cvCWV/wEirk2FPvjV62JTYKUe5pZJSHw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: n0IQiq3O+ncd9Kcastq7g2l5ig8brTY34NCrsK665Dg=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: iFRRbtQ83DAhQeOuv0x/8D2BoQrQtE9Qr5lou3dWXyY=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: bTu32emo4oNYJVA1lCeQHupAf6pJqBWu/TVi/rnIfJU=) 6: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IctexMIkkmuKRY28It4wmvJrqOn2UvVnqHfHqiMz3qg=) 7: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: RaDP91UEhN5m0mKcwjFniZyRM8v4oThc8IlQpZodOMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Nov 3 01:37:18 2025 GMT Not After : Nov 10 01:37:18 2025 GMT Subject: CN=6908074e-442e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:04:b3:2b:03:25:31:cd:4c:54:8f:9e:40: 08:f8:f6:42:3b:91:4f:7f:35:8a:ab:69:f2:4d:85: 91:aa:24:fa:72:f0:69:b5:cf:1e:0d:0d:16:cd:7f: de:1f:08:e2:5f:ec:f7:20:98:3a:35:7b:20:ca:d3: 25:55:8e:90:3b:9d:97:e2:e8:34:da:85:b3:2a:14: 57:44:13:fd:d0:89:87:47:45:6c:c0:53:f8:4f:59: ef:5f:cf:1e:4a:2e:19:b8:06:a9:e1:38:b0:d9:83: 7c:00:f9:2c:49:eb:08:af:31:a6:aa:c7:29:55:59: ac:d9:09:f6:7b:12:0b:3a:73:63:ce:de:c2:d9:7f: ee:8a:2f:13:c0:d1:2c:56:fc:43:72:db:4f:d1:21: db:b3:dd:d2:ef:6c:cd:be:41:e9:95:1d:36:91:cf: c0:5d:8d:1f:40:b9:65:b7:ca:34:a5:a9:e5:09:0a: 24:6b:37:97:94:bc:1c:b5:f8:54:14:cb:04:47:5f: d6:92:55:0d:bc:be:af:69:a5:00:e1:f4:53:90:4a: b3:a2:ae:82:aa:cf:6e:00:02:4b:03:11:ef:f2:06: 8c:f1:aa:44:73:4b:fb:88:0a:67:37:cc:67:2a:02: 77:5c:3e:73:9a:7c:c9:6d:70:33:4d:d2:41:ab:16: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:0D:3A:CE:A6:5B:12:2C:2E:07:20:D0:F5:8E:61:D6:8C:60:21 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:19:1b:d3:4f:f1:c8:4c:2e:96:b2:26:ac:70:3c:8d:c6:e1: 5d:f6:1d:ac:1f:c2:7d:d3:f2:f9:df:96:09:b7:d2:8e:34:8f: 1a:8d:5c:7e:fb:6e:9b:0c:5a:8d:cf:bd:6d:b6:59:63:91:6f: 1d:59:10:44:12:b7:a5:00:00:36:3f:37:34:82:b8:a4:df:d7: ce:fe:d2:68:bf:65:3b:ca:e9:d5:86:94:48:c0:05:9e:2b:85: f2:84:9b:ae:ae:82:79:87:e8:c1:94:ec:4e:d2:41:a5:29:49: 13:bd:99:ab:9f:22:a1:02:8b:88:ed:cd:cc:fb:77:01:cb:45: 0a:9e:e9:fe:8b:e7:1f:f7:04:b7:42:da:26:3e:0c:1b:d3:15: cb:78:64:76:17:8c:9d:c7:d2:5c:1f:04:bb:9f:15:95:65:ad: 6c:53:8f:45:ad:cc:3c:c7:fe:a1:af:f9:b3:de:25:c2:2e:8b: df:ae:b0:4f:87:4a:91:b5:0d:93:15:d7:b7:8a:3f:78:df:84: 00:8d:62:a5:9d:81:fa:ba:3a:22:d7:f2:cc:43:d7:ba:35:f9: 36:0b:b8:c4:26:b9:f7:a0:81:8a:97:10:c8:36:f4:d3:63:7b: 8f:5e:a8:17:3f:7d:37:72:b0:de:9f:38:65:62:1c:f0:7c:12: b0:b1:f9:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUxMTAzMDEzNzE4WhcNMjUxMTEwMDEzNzE4WjAYMRYwFAYD VQQDEw02OTA4MDc0ZS00NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrsEsysDJTHNTFSPnkAI+PZCO5FPfzWKq2nyTYWRqiT6cvBptc8eDQ0WzX/e HwjiX+z3IJg6NXsgytMlVY6QO52X4ug02oWzKhRXRBP90ImHR0VswFP4T1nvX88e Si4ZuAap4Tiw2YN8APksSesIrzGmqscpVVms2Qn2exILOnNjzt7C2X/uii8TwNEs VvxDcttP0SHbs93S72zNvkHplR02kc/AXY0fQLllt8o0panlCQokazeXlLwctfhU FMsER1/WklUNvL6vaaUA4fRTkEqzoq6Cqs9uAAJLAxHv8gaM8apEc0v7iApnN8xn KgJ3XD5zmnzJbXAzTdJBqxbwzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/JDTrO plsSLC4HIND1jmHWjGAhMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuGRvTT/HITC6WsiascDyNxuFd9h2sH8J90/L535YJt9KONI8ajVx+ +26bDFqNz71ttlljkW8dWRBEErelAAA2Pzc0grik39fO/tJov2U7yunVhpRIwAWe K4XyhJuuroJ5h+jBlOxO0kGlKUkTvZmrnyKhAouI7c3M+3cBy0UKnun+i+cf9wS3 QtomPgwb0xXLeGR2F4ydx9JcHwS7nxWVZa1sU49Frcw8x/6hr/mz3iXCLovfrrBP h0qRtQ2TFde3ij9434QAjWKlnYH6ujoi1/LMQ9e6Nfk2C7jEJrn3oIGKlxDINvTT Y3uPXqgXP303crDenzhlYhzwfBKwsfkt -----END CERTIFICATE-----Generated at Wed Nov 5 00:39:28 2025 by rpki-client