$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft File: 0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json) Hash identifier: fUAjkaMltzQFgrSoUyrcELBfYhpZPwuXmuIAe64Ijxs= Subject key identifier: 5B:28:0F:DA:2A:82:0D:72:2B:B6:0E:08:05:A2:B3:9D:B5:80:13:74 Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD Certificate issuer: /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft Manifest number: 09E3 Signing time: Thu 24 Apr 2025 19:48:31 +0000 Manifest this update: Thu 24 Apr 2025 19:48:30 +0000 Manifest next update: Thu 01 May 2025 19:48:30 +0000 Files and hashes: 1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: zikOXCt7cg8fezGypwPtyUyxdwk1GCrnxLQiZ3EuygQ=) 2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD Validity Not Before: Apr 24 19:48:30 2025 GMT Not After : May 1 19:48:30 2025 GMT Subject: CN=680a958e-31e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:61:75:03:e4:af:58:23:f6:49:1d:f0:9a: 74:cf:e7:cd:64:d8:28:e6:05:33:51:8a:0f:15:b1: 3b:20:ad:78:87:9d:0e:ab:61:e8:5a:5c:2a:4a:0e: 70:a0:81:29:d0:34:19:00:9e:7e:be:78:da:ca:09: 84:45:d3:fe:a1:90:b8:76:09:3a:76:0f:dd:6f:d9: 57:48:51:0b:14:22:22:25:8c:70:bd:ca:9f:0a:d1: c7:4b:69:c2:6c:9e:30:75:24:2b:fe:99:49:5f:f8: 54:3d:5d:35:5a:c9:02:34:52:4c:7e:5e:83:85:6c: e1:f7:61:83:a3:8d:07:0b:a4:0c:33:75:9e:40:b5: e2:2d:b0:68:9f:06:8f:93:9d:a1:34:6d:15:c5:f4: 60:de:c1:ae:38:be:ed:f4:2f:17:af:b3:29:38:b8: da:76:2a:78:be:26:19:34:ab:7d:23:cc:05:6e:27: 8c:d4:dc:23:9a:14:63:f9:61:95:3f:37:5e:f7:f6: 2f:62:88:3e:55:19:fd:2d:ca:1d:22:61:e9:52:d9: f2:39:65:cc:33:e3:de:5e:73:a6:0e:3d:a4:c8:df: 9a:aa:9d:f8:b5:f2:89:92:f0:cf:55:7b:f3:28:ae: 11:2b:b0:29:f0:75:52:63:e9:00:cc:fe:46:87:29: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:0F:DA:2A:82:0D:72:2B:B6:0E:08:05:A2:B3:9D:B5:80:13:74 X509v3 Authority Key Identifier: keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:af:6a:0f:2d:70:2c:99:eb:72:21:ef:a7:0f:7c:a3:94: 83:9f:12:06:91:98:a7:fe:93:bb:c3:53:55:ce:56:33:54:35: 25:f6:ab:35:18:5a:73:24:98:99:69:91:ad:87:6a:65:13:74: 39:00:f3:e7:c2:31:1f:ae:8d:ee:10:76:3e:5d:f8:09:b0:09: de:a4:3e:5d:93:b0:d5:ed:e4:c0:71:75:8e:85:4a:c9:ce:93: 5d:fc:b6:81:a4:ab:5b:21:12:d9:c9:b2:48:5e:e0:12:68:f0: 3d:7b:5f:69:5d:b3:5e:21:35:ee:6d:7e:fa:2d:52:e3:79:35: cd:e4:17:62:42:57:26:ad:f3:6e:bc:7c:07:32:89:76:a3:85: 85:f0:f2:e0:b4:80:91:12:37:38:fa:78:c9:c0:8d:91:c7:6b: de:87:ea:a7:5c:ca:83:0e:68:d5:a3:a3:76:ca:42:40:2b:0a: 38:19:c9:6e:d6:96:e0:0e:16:cc:c3:31:24:97:b7:c4:70:68: 61:e6:28:7d:91:ef:c6:62:57:53:2d:b0:ea:16:d9:5d:ba:ac: 8c:23:e0:eb:48:6a:9b:2d:71:80:bb:00:c8:58:db:5a:5f:2c: e5:13:9e:6b:1c:97:55:ad:cc:78:2f:92:91:a7:10:6c:89:fa: 67:5e:7d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3NTgxMTAvBgNVBAUTKEQwQTNBNjlFMkFDMTBDMkMxMDUzRjcyRjc0OTk0N0VD MjJCOUMzQ0QwHhcNMjUwNDI0MTk0ODMwWhcNMjUwNTAxMTk0ODMwWjAYMRYwFAYD VQQDEw02ODBhOTU4ZS0zMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLRhdQPkr1gj9kkd8Jp0z+fNZNgo5gUzUYoPFbE7IK14h50Oq2HoWlwqSg5w oIEp0DQZAJ5+vnjaygmERdP+oZC4dgk6dg/db9lXSFELFCIiJYxwvcqfCtHHS2nC bJ4wdSQr/plJX/hUPV01WskCNFJMfl6DhWzh92GDo40HC6QMM3WeQLXiLbBonwaP k52hNG0VxfRg3sGuOL7t9C8Xr7MpOLjadip4viYZNKt9I8wFbieM1NwjmhRj+WGV Pzde9/YvYog+VRn9LcodImHpUtnyOWXMM+PeXnOmDj2kyN+aqp34tfKJkvDPVXvz KK4RK7Ap8HVSY+kAzP5GhylPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsoD9oq gg1yK7YOCAWis521gBN0MB8GA1UdIwQYMBaAFNCjpp4qwQwsEFP3L3SZR+wiucPN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDc1OC8zMzM4OTg4NDc5 N0IxMUVBOUIyN0VDMzdDNEY5QUUwMi8wS09tbmlyQkRDd1FVX2N2ZEpsSDdDSzV3 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLT21uaXJCREN3UVVfY3ZkSmxIN0NLNXc4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDc1OC8zMzM4OTg4NDc5N0IxMUVBOUIyN0VDMzdDNEY5QUUwMi8wS09tbmlyQkRD d1FVX2N2ZEpsSDdDSzV3ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVj69qDy1wLJnrciHvpw98o5SDnxIGkZin/pO7w1NVzlYzVDUl9qs1 GFpzJJiZaZGth2plE3Q5APPnwjEfro3uEHY+XfgJsAnepD5dk7DV7eTAcXWOhUrJ zpNd/LaBpKtbIRLZybJIXuASaPA9e19pXbNeITXubX76LVLjeTXN5BdiQlcmrfNu vHwHMol2o4WF8PLgtICREjc4+njJwI2Rx2veh+qnXMqDDmjVo6N2ykJAKwo4Gclu 1pbgDhbMwzEkl7fEcGhh5ih9ke/GYldTLbDqFtlduqyMI+DrSGqbLXGAuwDIWNta XyzlE55rHJdVrcx4L5KRpxBsifpnXn2n -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:22 2025 by rpki-client