$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json) Hash identifier: UMyTC0LER+b/rAXneguzc4pQmVis3kwIcZK8baJx9Bc= Subject key identifier: 26:03:03:78:23:36:25:CB:BD:CB:7C:51:0E:03:B5:33:60:14:88:28 Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft Manifest number: 0446 Signing time: Wed 05 Nov 2025 00:19:33 +0000 Manifest this update: Wed 05 Nov 2025 00:19:32 +0000 Manifest next update: Wed 12 Nov 2025 00:19:32 +0000 Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: rldBn7I987AzRQBcsqS7VDZgCteGx3A18kpVFGbBIKY=) 2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: 17t3m0KvoRjfHzLmSGQMixJ4h1po9W3fjkqykP9EfmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Validity Not Before: Nov 5 00:19:32 2025 GMT Not After : Nov 12 00:19:32 2025 GMT Subject: CN=690a9814-b41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:04:83:38:c1:e1:d9:e0:17:52:e8:87:c7: fb:7d:51:94:34:fb:b8:00:5d:4b:4c:7f:16:ee:68: b0:b8:bc:c1:e7:e3:3a:21:2f:b8:1d:b2:d4:cc:5f: 3f:75:61:75:d5:f1:c9:c3:45:ba:1f:5a:8a:f6:14: 36:b7:11:0b:b6:12:26:b6:d2:5c:66:d9:a1:38:57: fd:b9:a1:53:04:d1:e0:b3:34:9f:6e:0a:23:89:2a: b8:0a:2d:bf:33:89:28:d8:81:c2:fd:cc:54:cb:ca: e1:11:40:4d:c2:9e:6a:68:be:fa:9c:4a:e9:a0:a7: f1:a6:e4:bc:c0:e1:cd:56:84:1e:7d:49:5a:c8:30: ed:8f:36:ce:ae:6f:4e:a7:cb:88:a3:78:98:d9:55: 5d:b2:3e:55:a5:f3:d4:cb:5c:3c:3d:ae:6a:af:c7: 0e:2c:c1:60:1d:71:0c:63:b0:b8:91:19:22:3e:ea: 58:f3:10:f6:64:03:5c:29:d6:39:8d:33:d3:d5:fd: 09:02:79:31:1b:f0:f3:6f:69:a2:f8:d6:73:7a:16: 27:84:fa:61:6a:39:f7:a9:09:b4:20:67:71:f8:79: b8:a0:19:de:b1:fc:01:41:b9:d2:71:07:c9:69:ad: 7a:e0:69:89:48:3f:c8:ea:46:7a:ea:58:2c:6b:05: ff:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:03:78:23:36:25:CB:BD:CB:7C:51:0E:03:B5:33:60:14:88:28 X509v3 Authority Key Identifier: keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:fe:4c:7f:f9:81:2b:29:79:50:94:9b:06:58:4c:c1:b8: e0:99:4f:03:98:95:9d:73:1a:4f:2a:46:10:c2:13:96:ba:76: ea:be:8f:e2:b0:de:d2:1d:fa:20:20:e0:1b:bc:95:7c:ce:62: 84:2c:55:4e:f7:58:b2:63:f3:ea:4f:24:6d:0d:cd:47:67:d6: 5f:fa:eb:c8:d7:33:61:c7:1e:2f:92:50:2e:d9:8f:a1:26:0b: ca:08:2f:1d:11:0a:da:79:cb:80:4d:3d:0a:fc:d2:50:27:fd: b4:28:08:fb:2f:f4:b4:26:34:1b:88:db:fd:ab:74:e5:e3:67: a1:2c:6a:48:0b:41:5a:3a:8e:00:74:f2:df:3c:af:17:ca:47: 2f:6f:ee:58:16:63:04:b3:e0:ef:83:bf:3d:99:4e:64:a8:f3: 5e:14:f4:cf:aa:06:3d:9c:42:ee:84:4d:7f:c3:15:1f:df:4b: b4:1b:4c:68:6b:36:55:ca:b3:6a:76:04:8f:1d:c4:24:de:98: 84:43:df:cf:2e:24:77:6c:c6:e7:87:e0:b9:ea:a6:e0:b7:48: d0:2c:31:3f:75:f4:33:d9:f0:68:2e:1a:ca:87:4d:78:26:11: e6:2e:9b:a8:ee:fc:1d:16:d8:43:81:0f:eb:e0:06:48:7c:64: d9:97:56:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMkQxMTAvBgNVBAUTKDNBNjhBMjIyQzJDMENGNDE0MzBDMDk2OEQyMzA5QUE4 OTNDNzRBM0IwHhcNMjUxMTA1MDAxOTMyWhcNMjUxMTEyMDAxOTMyWjAYMRYwFAYD VQQDEw02OTBhOTgxNC1iNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA404EgzjB4dngF1Loh8f7fVGUNPu4AF1LTH8W7miwuLzB5+M6IS+4HbLUzF8/ dWF11fHJw0W6H1qK9hQ2txELthImttJcZtmhOFf9uaFTBNHgszSfbgojiSq4Ci2/ M4ko2IHC/cxUy8rhEUBNwp5qaL76nErpoKfxpuS8wOHNVoQefUlayDDtjzbOrm9O p8uIo3iY2VVdsj5VpfPUy1w8Pa5qr8cOLMFgHXEMY7C4kRkiPupY8xD2ZANcKdY5 jTPT1f0JAnkxG/Dzb2mi+NZzehYnhPphajn3qQm0IGdx+Hm4oBnesfwBQbnScQfJ aa164GmJSD/I6kZ66lgsawX/ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYDA3gj NiXLvct8UQ4DtTNgFIgoMB8GA1UdIwQYMBaAFDpooiLCwM9BQwwJaNIwmqiTx0o7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMyRC84NkZEMTM4ODc5 MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXowRkREQWxvMGpDYXFKUEhT anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09taWlJc0xBejBGRERBbG8wakNhcUpQSFNqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMyRC84NkZEMTM4ODc5MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXow RkREQWxvMGpDYXFKUEhTanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuP5Mf/mBKyl5UJSbBlhMwbjgmU8DmJWdcxpPKkYQwhOWunbqvo/i sN7SHfogIOAbvJV8zmKELFVO91iyY/PqTyRtDc1HZ9Zf+uvI1zNhxx4vklAu2Y+h JgvKCC8dEQraecuATT0K/NJQJ/20KAj7L/S0JjQbiNv9q3Tl42ehLGpIC0FaOo4A dPLfPK8Xykcvb+5YFmMEs+Dvg789mU5kqPNeFPTPqgY9nELuhE1/wxUf30u0G0xo azZVyrNqdgSPHcQk3piEQ9/PLiR3bMbnh+C56qbgt0jQLDE/dfQz2fBoLhrKh014 JhHmLpuo7vwdFthDgQ/r4AZIfGTZl1ba -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:37 2025 by rpki-client