$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: 25Bc2uEIY516KCfACh+mlWM9m9tJYi9AHTRUtj2Rb+U= Subject key identifier: 41:79:B3:B4:66:2D:6B:EA:34:0F:87:91:69:97:51:6F:E3:E6:45:A8 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 78 Signing time: Sun 24 Aug 2025 23:30:53 +0000 Manifest this update: Sun 24 Aug 2025 23:30:52 +0000 Manifest next update: Sun 31 Aug 2025 23:30:52 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: 202yqOmm8l0Uvlo/Nd/WPWzHi4TDoGeeRdbUfuuxO5c=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 23:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Aug 24 23:30:52 2025 GMT Not After : Aug 31 23:30:52 2025 GMT Subject: CN=68aba0ad-989b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:5e:04:cc:03:82:a8:10:b0:63:8c:01:29: 5e:11:d4:c1:65:2f:1d:86:a8:38:c8:fb:54:2b:d5: af:e7:5b:18:40:aa:b6:94:4d:ee:15:57:ba:65:60: d8:c4:e5:2e:10:22:58:db:40:07:9e:92:73:13:67: 3d:c1:21:aa:f8:72:96:0c:ee:34:f0:5d:f8:7a:cc: cd:ea:8f:54:be:81:fa:09:91:1c:6b:ff:bf:94:5c: 7f:8e:8f:0a:0c:dc:ca:de:78:21:5e:06:f6:d2:9c: 1e:f2:b5:65:4c:f7:32:d6:07:59:53:80:cd:1b:ae: c7:d7:f8:cb:94:1c:a2:54:23:31:be:df:38:c0:43: c1:4b:19:be:8c:c5:6e:af:a3:13:ea:97:73:54:95: 6a:d4:75:34:76:5d:62:23:2d:5c:4a:3b:f8:73:ce: e3:a0:ee:76:4d:5d:01:14:7b:34:38:4b:9f:d8:55: 8f:89:ba:ad:85:a7:3f:2b:df:d5:9c:52:08:a1:55: 26:33:39:7f:fd:da:52:66:05:18:b8:ad:dd:4e:04: 74:ae:a5:2d:37:f0:6b:4f:2e:ac:5e:9c:db:7e:72: 50:a8:b5:2e:27:35:75:ee:c8:83:52:01:47:aa:5d: d2:f9:0d:bc:86:6e:57:69:b0:73:3a:f5:2f:0b:1a: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:B3:B4:66:2D:6B:EA:34:0F:87:91:69:97:51:6F:E3:E6:45:A8 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:99:39:1e:98:89:d7:be:e2:57:7e:56:54:40:ef:21:15:67: 2e:63:ad:de:61:30:a5:cf:e6:54:00:4f:75:84:ef:4c:29:ce: 3f:16:c6:84:f7:d1:5b:10:83:05:af:f8:8a:d2:3f:03:6e:5f: 78:7d:a6:65:ed:fc:50:a2:9f:7b:ad:37:08:3e:0d:64:8f:01: ca:1c:85:6d:cd:44:8b:27:e7:d6:94:c6:fb:73:1b:c8:c8:52: 8b:f2:30:99:72:b3:2a:b7:e5:15:96:0c:8c:b0:04:9a:ce:22: 98:91:75:b1:81:8a:11:e2:06:09:70:6c:61:5f:ce:e2:08:b1: b7:71:eb:e3:4f:8c:96:0a:c0:54:d9:50:00:4f:c0:c5:4a:2c: 1c:77:93:91:a5:f2:ab:ec:a2:f4:31:c9:30:4b:39:e7:e9:45: 40:de:bc:fd:2b:d8:90:07:6f:ca:09:22:cd:51:c0:7c:12:41: 8f:7e:38:19:4b:8b:0b:63:77:00:d2:04:e9:fe:9d:09:eb:b4: 7f:3d:fc:3d:bd:f3:2e:73:6f:c9:16:27:ca:1a:69:8e:e2:a2: c5:1f:b9:0b:77:8d:1f:85:6f:54:c7:7d:c9:67:07:21:e7:53: 9e:f8:34:ad:54:bd:3e:04:7f:41:60:22:64:f0:bf:97:d5:91: 7f:1d:6a:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA4MjQyMzMwNTJaFw0yNTA4MzEyMzMwNTJaMBgxFjAUBgNV BAMTDTY4YWJhMGFkLTk4OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7BF4EzAOCqBCwY4wBKV4R1MFlLx2GqDjI+1Qr1a/nWxhAqraUTe4VV7plYNjE 5S4QIljbQAeeknMTZz3BIar4cpYM7jTwXfh6zM3qj1S+gfoJkRxr/7+UXH+OjwoM 3MreeCFeBvbSnB7ytWVM9zLWB1lTgM0brsfX+MuUHKJUIzG+3zjAQ8FLGb6MxW6v oxPql3NUlWrUdTR2XWIjLVxKO/hzzuOg7nZNXQEUezQ4S5/YVY+Juq2Fpz8r39Wc UgihVSYzOX/92lJmBRi4rd1OBHSupS038GtPLqxenNt+clCotS4nNXXuyINSAUeq XdL5DbyGbldpsHM69S8LGj1dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQXmztGYt a+o0D4eRaZdRb+PmRagwHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFSZOR6Yide+4ld+VlRA7yEVZy5jrd5hMKXP5lQAT3WE70wpzj8WxoT3 0VsQgwWv+IrSPwNuX3h9pmXt/FCin3utNwg+DWSPAcochW3NRIsn59aUxvtzG8jI UovyMJlysyq35RWWDIywBJrOIpiRdbGBihHiBglwbGFfzuIIsbdx6+NPjJYKwFTZ UABPwMVKLBx3k5Gl8qvsovQxyTBLOefpRUDevP0r2JAHb8oJIs1RwHwSQY9+OBlL iwtjdwDSBOn+nQnrtH89/D298y5zb8kWJ8oaaY7iosUfuQt3jR+Fb1THfclnByHn U574NK1UvT4Ef0FgImTwv5fVkX8daqw= -----END CERTIFICATE-----Generated at Tue Aug 26 00:09:24 2025 by rpki-client