$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft File: Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json) Hash identifier: pNh5irpQk3b2cAjEU5ilFei/KLsS+aF9PDsW7rEkjZE= Subject key identifier: D5:28:21:FA:97:3C:60:23:0E:18:45:74:3A:9E:AD:03:9B:AD:B3:81 Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A Certificate issuer: /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft Manifest number: 01B2 Signing time: Fri 19 Sep 2025 03:35:16 +0000 Manifest this update: Fri 19 Sep 2025 03:35:16 +0000 Manifest next update: Fri 26 Sep 2025 03:35:16 +0000 Files and hashes: 1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: OxFXdaTnqPlsNMnEN1FMNsdl6I95SA1xV/m60UMacuA=) 2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: QHRHGfrfRtZTCug8O+YvL4h2f3rUlXsvRTX9IxlC4gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A Validity Not Before: Sep 19 03:35:16 2025 GMT Not After : Sep 26 03:35:16 2025 GMT Subject: CN=68cccf74-ba58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:28:1a:dd:82:00:27:bb:75:93:b1:2a:49: 0f:be:79:1d:fb:20:bc:aa:35:fb:20:e2:9c:49:d5: 91:a8:1f:60:80:42:f7:9f:90:18:85:dd:a9:19:ba: 6c:eb:0a:85:24:7e:02:be:16:38:69:a5:3d:56:06: f7:ab:a4:48:fa:17:6e:c9:b5:8b:09:ba:0a:72:e9: 1b:ec:e2:8f:a2:6d:26:d0:a0:a4:17:50:6d:bd:11: 94:8f:a6:15:f9:c2:84:36:ae:55:dc:c0:c3:ee:61: 8d:cf:9f:2c:92:1f:1f:9c:27:8e:54:bd:86:f3:6c: e4:35:22:4f:29:62:20:7f:09:d1:3d:2d:bd:12:18: 69:22:e9:ea:1a:b2:1d:40:85:71:be:49:9b:99:d7: e9:2b:c0:64:06:af:32:90:ce:bc:ac:a0:d5:7c:fb: c5:09:86:44:f3:33:13:3c:57:58:e2:02:a1:1a:c4: a0:39:68:a6:e6:22:4c:c0:c2:d1:95:4f:35:cf:78: 55:69:44:d0:90:1f:4c:80:25:cd:3b:b8:c0:d9:3d: fb:ca:fa:05:2e:38:97:0f:2b:d8:2d:79:3f:59:21: dc:c4:54:78:4c:eb:61:1a:b7:ea:76:a9:a7:1a:70: f1:a2:bc:07:ee:a1:fc:40:52:a1:4f:b6:72:65:ae: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:21:FA:97:3C:60:23:0E:18:45:74:3A:9E:AD:03:9B:AD:B3:81 X509v3 Authority Key Identifier: keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5e:8a:94:1e:23:a5:59:d2:90:75:7f:47:d2:cb:b8:28:35: 6f:20:68:c6:a0:ee:de:88:4a:40:cd:de:c4:de:7e:4f:7d:66: bb:68:2d:e0:fd:8e:4b:c2:bf:7f:6d:1d:05:34:77:be:46:65: d3:79:91:48:11:74:e3:75:9d:1b:17:51:f6:80:0f:ef:35:e5: 1a:a3:54:19:2e:d4:aa:74:7a:a0:ec:43:2e:0a:95:14:c1:4a: ec:d7:71:a3:9a:a6:14:69:46:70:e9:32:36:d7:bf:e5:86:93: 2a:84:aa:48:42:36:2c:e5:be:c9:35:d3:10:93:b1:30:78:bd: 9b:c7:73:36:23:9c:93:16:01:02:0d:74:ea:0a:d2:d0:0d:37: 26:ad:09:16:84:fe:d0:93:c3:ac:de:24:db:8d:30:01:d0:0c: f1:11:58:46:6d:25:6f:db:c8:97:bf:6c:46:7f:6d:8d:26:f2: 21:78:44:9b:0f:9e:b0:be:6a:2c:18:e2:d0:42:b6:40:55:f1: 80:fb:d0:db:9e:0d:ae:25:29:c1:c3:60:e4:ab:85:20:eb:4e: 35:8d:3f:1c:cc:f9:98:ff:be:bc:22:d6:5f:df:17:2a:74:f4: e1:dc:ac:af:67:3d:45:66:d8:28:b3:c2:39:9d:f7:59:12:24: a0:e2:b0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE2RDYxMTAvBgNVBAUTKDNBNjg2NkIxREYzQzJFNUI1RkFDQUVFMEMwOTkyQkJD Nzg4QzVEMEEwHhcNMjUwOTE5MDMzNTE2WhcNMjUwOTI2MDMzNTE2WjAYMRYwFAYD VQQDEw02OGNjY2Y3NC1iYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnMoGt2CACe7dZOxKkkPvnkd+yC8qjX7IOKcSdWRqB9ggEL3n5AYhd2pGbps 6wqFJH4CvhY4aaU9Vgb3q6RI+hduybWLCboKcukb7OKPom0m0KCkF1BtvRGUj6YV +cKENq5V3MDD7mGNz58skh8fnCeOVL2G82zkNSJPKWIgfwnRPS29EhhpIunqGrId QIVxvkmbmdfpK8BkBq8ykM68rKDVfPvFCYZE8zMTPFdY4gKhGsSgOWim5iJMwMLR lU81z3hVaUTQkB9MgCXNO7jA2T37yvoFLjiXDyvYLXk/WSHcxFR4TOthGrfqdqmn GnDxorwH7qH8QFKhT7ZyZa4RXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUoIfqX PGAjDhhFdDqerQObrbOBMB8GA1UdIwQYMBaAFDpoZrHfPC5bX6yu4MCZK7x4jF0K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTZENi9ERTM0QzE3OEZD ODAxMUVEQTgzODIwNTJDNEY5QUUwMi9PbWhtc2Q4OExsdGZySzdnd0prcnZIaU1Y UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09taG1zZDg4TGx0ZnJLN2d3SmtydkhpTVhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTZENi9ERTM0QzE3OEZDODAxMUVEQTgzODIwNTJDNEY5QUUwMi9PbWhtc2Q4OExs dGZySzdnd0prcnZIaU1YUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCXoqUHiOlWdKQdX9H0su4KDVvIGjGoO7eiEpAzd7E3n5PfWa7aC3g /Y5Lwr9/bR0FNHe+RmXTeZFIEXTjdZ0bF1H2gA/vNeUao1QZLtSqdHqg7EMuCpUU wUrs13GjmqYUaUZw6TI217/lhpMqhKpIQjYs5b7JNdMQk7EweL2bx3M2I5yTFgEC DXTqCtLQDTcmrQkWhP7Qk8Os3iTbjTAB0AzxEVhGbSVv28iXv2xGf22NJvIheESb D56wvmosGOLQQrZAVfGA+9Dbng2uJSnBw2Dkq4Ug6041jT8czPmY/768ItZf3xcq dPTh3KyvZz1FZtgos8I5nfdZEiSg4rDY -----END CERTIFICATE-----Generated at Fri Sep 19 06:49:35 2025 by rpki-client