$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: K6AbnmMX0utEECqK+WoVwbhbVZcLJHze5eemsdw0h6o= Subject key identifier: 2C:93:91:03:2D:34:9F:53:E7:69:53:C0:47:CE:39:5C:F5:33:05:54 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 93 Signing time: Fri 17 Oct 2025 01:03:28 +0000 Manifest this update: Fri 17 Oct 2025 01:03:28 +0000 Manifest next update: Fri 24 Oct 2025 01:03:28 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: ZjuD0icaw/z6y9eGYvdxS/luTbzXD5CDhC/gM6iHMJ4=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 01:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Oct 17 01:03:28 2025 GMT Not After : Oct 24 01:03:28 2025 GMT Subject: CN=68f195e0-ffb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:76:d4:7b:70:9d:6b:b8:91:25:c6:4c:3f:2c: 51:b4:59:bb:b2:0f:5b:28:7e:3e:c6:b3:d4:f2:e7: 25:5e:3c:fe:8f:a1:ee:bf:67:f8:f9:a8:91:ea:65: 18:93:7b:47:ba:c2:3c:8d:60:65:5f:ca:4a:81:25: 54:6a:ec:fc:95:6e:f9:70:95:f6:49:a3:d3:a5:38: e8:aa:61:d6:d5:58:07:3e:46:8a:86:9f:ee:bd:d0: 43:c4:fd:0a:3d:0d:61:58:73:2c:f8:d9:0a:7e:e3: 30:b5:78:2a:e8:a0:85:8a:55:62:71:79:18:90:1f: 2f:cc:73:d7:e1:f1:64:b8:6b:b6:e3:42:c0:91:09: 03:dc:50:32:1d:a1:c5:81:32:f4:3a:b9:c1:7c:eb: 86:89:05:49:5a:f5:66:1c:1b:bf:c8:13:c8:9d:11: 55:8b:55:c4:09:1a:18:f7:de:66:15:9b:3e:ce:c5: 83:d5:1f:4f:23:84:18:f2:11:57:e8:d6:76:1a:8d: e9:57:1a:11:ba:36:c3:3c:41:09:33:a3:32:e1:62: 9a:59:a1:7f:46:be:9f:ba:60:c2:a6:1c:18:c5:d8: 40:52:24:57:40:b4:5c:07:b3:e7:51:98:df:dd:83: fe:5b:df:6c:dd:54:d8:2f:59:df:8a:89:5a:11:69: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:93:91:03:2D:34:9F:53:E7:69:53:C0:47:CE:39:5C:F5:33:05:54 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:da:f1:aa:ca:7a:f2:4b:ca:26:c1:68:ea:8d:3a:f5:a7: 0a:aa:20:27:72:b9:99:e3:26:fe:c2:e1:1e:38:4c:5a:6a:e6: 69:99:25:5e:6c:f3:44:1a:00:58:e4:01:94:c3:41:d2:53:f9: 68:fa:8b:6c:f1:59:bc:4d:ae:2d:d5:96:58:65:d1:de:3b:4a: e1:7f:b5:c1:7e:4a:73:c7:5d:5d:18:fc:33:62:9c:18:af:b6: 52:d5:5c:24:73:a7:b0:da:07:78:3e:f8:c4:37:e2:23:09:ca: 00:84:ef:2b:67:72:8a:be:92:ea:93:51:f9:44:11:bd:47:dd: 33:d4:75:3f:7d:9a:7b:51:09:23:9c:f1:b5:ed:d5:e1:63:0a: 4d:f7:2c:18:78:cf:e8:76:4f:d1:6c:eb:e8:b3:a8:4a:a1:69: 0c:5e:b3:f7:8c:91:29:6a:74:16:c1:c0:f3:55:94:f3:fe:f0: 7c:43:10:3d:f0:a1:8f:63:fd:30:ea:76:e2:b8:a3:0f:f7:5b: ba:79:5f:94:13:f7:ce:78:26:e7:50:e3:e9:aa:39:f3:b2:cc: 0c:b0:2d:09:2e:ea:09:e7:c1:60:b5:d6:63:4a:56:9b:1c:e6: cf:f9:ef:08:28:67:ac:b8:81:dd:fe:7f:36:7c:39:fa:2a:67: a6:fb:5f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4 RDdERUI2OTQwHhcNMjUxMDE3MDEwMzI4WhcNMjUxMDI0MDEwMzI4WjAYMRYwFAYD VQQDEw02OGYxOTVlMC1mZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HbUe3Cda7iRJcZMPyxRtFm7sg9bKH4+xrPU8uclXjz+j6Huv2f4+aiR6mUY k3tHusI8jWBlX8pKgSVUauz8lW75cJX2SaPTpTjoqmHW1VgHPkaKhp/uvdBDxP0K PQ1hWHMs+NkKfuMwtXgq6KCFilVicXkYkB8vzHPX4fFkuGu240LAkQkD3FAyHaHF gTL0OrnBfOuGiQVJWvVmHBu/yBPInRFVi1XECRoY995mFZs+zsWD1R9PI4QY8hFX 6NZ2Go3pVxoRujbDPEEJM6My4WKaWaF/Rr6fumDCphwYxdhAUiRXQLRcB7PnUZjf 3YP+W99s3VTYL1nfiolaEWmSOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyTkQMt NJ9T52lTwEfOOVz1MwVUMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj NEpNOENTZWQtWG1OZmV0cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCqdrxqsp68kvKJsFo6o069acKqiAncrmZ4yb+wuEeOExaauZpmSVe bPNEGgBY5AGUw0HSU/lo+ots8Vm8Ta4t1ZZYZdHeO0rhf7XBfkpzx11dGPwzYpwY r7ZS1Vwkc6ew2gd4PvjEN+IjCcoAhO8rZ3KKvpLqk1H5RBG9R90z1HU/fZp7UQkj nPG17dXhYwpN9ywYeM/odk/RbOvos6hKoWkMXrP3jJEpanQWwcDzVZTz/vB8QxA9 8KGPY/0w6nbiuKMP91u6eV+UE/fOeCbnUOPpqjnzsswMsC0JLuoJ58FgtdZjSlab HObP+e8IKGesuIHd/n82fDn6Kmem+1/r -----END CERTIFICATE-----Generated at Sat Oct 18 23:39:01 2025 by rpki-client