$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: 28pQVNUg3xVVfYldAzo5wSoHpzzxx1RHMPootLk+J2w= Subject key identifier: BB:97:F1:24:C5:DE:1D:0C:E6:35:C8:B5:52:31:1E:E4:80:2F:49:50 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 5C Signing time: Mon 30 Jun 2025 23:50:02 +0000 Manifest this update: Mon 30 Jun 2025 23:50:02 +0000 Manifest next update: Mon 07 Jul 2025 23:50:02 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: u8asVPIpYl2l6PxcR5hZ2hnDnvGoIdJXbWtSmviI0f8=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Jun 30 23:50:02 2025 GMT Not After : Jul 7 23:50:02 2025 GMT Subject: CN=686322aa-ccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:4c:41:eb:39:24:6e:c5:83:66:f7:a5:ca: 90:90:d7:5d:a9:de:b6:1d:84:d0:b9:a0:5d:03:78: f1:f7:ad:c7:0d:fe:e1:a4:b1:a8:1a:71:bf:a2:8d: 23:5b:22:06:a9:ca:71:81:9d:cf:40:34:e9:73:69: 49:e7:eb:72:12:5e:cd:87:8d:24:23:2f:d3:4f:08: 81:9f:12:78:d3:f6:72:93:f8:73:af:3b:40:be:32: 10:1a:7c:f9:e9:f7:c5:62:f1:43:23:55:b5:2a:e2: 2b:51:cc:d0:5f:0d:ab:fe:61:73:a0:30:eb:e2:a7: b7:7c:a3:30:25:ba:57:16:3c:37:d1:7d:57:64:a3: 0f:36:cc:b0:da:31:09:ca:3a:12:46:07:85:11:ea: 93:22:71:3b:2f:46:b4:dd:73:39:de:6e:01:14:ae: a6:85:d0:1c:ed:c2:19:6c:4d:98:1e:18:ce:26:2d: 62:55:d0:d9:be:3a:08:ec:41:38:33:71:fb:51:49: 8a:72:ad:31:fd:35:b1:06:3d:0c:f4:cd:09:52:d9: 7b:73:d7:7e:58:5c:de:ca:9b:e9:80:3e:3b:50:d5: be:af:dd:3c:80:9b:a3:da:1c:e0:d2:21:fe:32:39: 4f:e8:f3:70:4a:cf:c2:93:a2:60:cd:2b:cc:f4:07: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:97:F1:24:C5:DE:1D:0C:E6:35:C8:B5:52:31:1E:E4:80:2F:49:50 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d7:93:8d:2e:c5:4d:02:6c:bd:a2:d7:b5:01:4f:f0:9e:e1: 9c:46:7d:b3:8f:cb:34:40:26:6f:b1:1c:3a:28:5f:87:65:9c: 36:99:1f:c7:7f:81:4b:11:21:61:fd:f7:d5:c1:d9:5f:10:0b: 91:83:79:16:3d:03:7a:79:16:e1:8d:bf:2c:d2:9b:6b:21:e8: 3c:f7:23:06:f8:c2:a2:4c:48:61:b2:96:52:28:c9:1f:9c:83: d6:bd:e8:e6:a9:bf:d3:33:67:05:ac:0f:1a:21:db:da:43:45: bf:a9:46:25:a6:b1:2c:5d:0f:e1:7f:a1:cc:64:57:68:fa:41: 08:38:18:b2:a6:6c:9a:cb:9d:05:70:0f:72:98:3c:91:ff:7d: 38:b5:31:09:f1:47:0b:f2:bf:65:27:b0:4a:d0:34:ef:b3:82: 74:f8:ee:b1:08:3f:79:de:9f:7b:72:f1:59:5c:84:95:fc:b7: e0:3f:13:aa:b4:56:1c:8d:d6:4d:2b:f6:c9:82:3a:57:d7:70: 7f:d6:6c:bf:17:2d:8f:9f:1c:2e:27:c2:35:3f:02:6d:9f:15: 91:0d:5e:40:15:89:c9:d4:6e:92:7b:67:04:65:98:f9:6c:82: 94:16:fc:cb:1a:83:57:aa:e7:db:64:9f:9c:aa:01:4b:63:ec: 0e:40:1c:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA2MzAyMzUwMDJaFw0yNTA3MDcyMzUwMDJaMBgxFjAUBgNV BAMTDTY4NjMyMmFhLWNjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzd0xB6zkkbsWDZvelypCQ112p3rYdhNC5oF0DePH3rccN/uGksagacb+ijSNb IgapynGBnc9ANOlzaUnn63ISXs2HjSQjL9NPCIGfEnjT9nKT+HOvO0C+MhAafPnp 98Vi8UMjVbUq4itRzNBfDav+YXOgMOvip7d8ozAlulcWPDfRfVdkow82zLDaMQnK OhJGB4UR6pMicTsvRrTdcznebgEUrqaF0BztwhlsTZgeGM4mLWJV0Nm+OgjsQTgz cftRSYpyrTH9NbEGPQz0zQlS2Xtz135YXN7Km+mAPjtQ1b6v3TyAm6PaHODSIf4y OU/o83BKz8KTomDNK8z0BzJFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu5fxJMXe HQzmNci1UjEe5IAvSVAwHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjXk40uxU0CbL2i17UBT/Ce4ZxGfbOPyzRAJm+xHDooX4dlnDaZH8d/ gUsRIWH999XB2V8QC5GDeRY9A3p5FuGNvyzSm2sh6Dz3Iwb4wqJMSGGyllIoyR+c g9a96Oapv9MzZwWsDxoh29pDRb+pRiWmsSxdD+F/ocxkV2j6QQg4GLKmbJrLnQVw D3KYPJH/fTi1MQnxRwvyv2UnsErQNO+zgnT47rEIP3nen3ty8VlchJX8t+A/E6q0 VhyN1k0r9smCOlfXcH/WbL8XLY+fHC4nwjU/Am2fFZENXkAVicnUbpJ7ZwRlmPls gpQW/Msag1eq59tkn5yqAUtj7A5AHC4= -----END CERTIFICATE-----Generated at Wed Jul 2 13:24:25 2025 by rpki-client