$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json) Hash identifier: WaBrlNDd0E4G7Pl/4dBWg9QNBYL1oH6nRCbKXM9eQpM= Subject key identifier: 7B:A4:43:F6:6F:21:C9:55:81:43:E8:79:A2:65:4B:DF:35:56:61:33 Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft Manifest number: 03F9 Signing time: Thu 05 Jun 2025 00:19:58 +0000 Manifest this update: Thu 05 Jun 2025 00:19:57 +0000 Manifest next update: Thu 12 Jun 2025 00:19:57 +0000 Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: 6zfNJ4JLln0Gr/mxn03iQZVJhbI4qxukLnwqjInc9sQ=) 2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: 17t3m0KvoRjfHzLmSGQMixJ4h1po9W3fjkqykP9EfmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Validity Not Before: Jun 5 00:19:57 2025 GMT Not After : Jun 12 00:19:57 2025 GMT Subject: CN=6840e2ad-8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:bc:bf:c8:c3:24:46:00:40:59:d8:ed:31: 22:4f:6a:21:ab:70:f9:9b:2f:90:0c:29:84:2a:b5: 4a:d0:e5:e6:2c:13:41:df:83:84:3d:03:a4:ad:f7: 7e:c4:64:a4:57:d0:6b:b9:20:df:29:92:e5:ac:b1: c4:60:1a:da:9f:d7:cf:eb:96:2f:12:02:f7:f8:e7: 46:db:c6:85:d7:07:58:3a:ec:cc:23:4a:b2:dd:db: f0:9c:53:f3:d7:26:e5:29:98:b9:74:9b:ca:00:5a: 60:f7:4d:fd:92:50:9a:38:b2:24:9b:9e:c0:64:b9: 39:d7:01:a5:e5:9e:35:71:87:52:d6:9b:84:d7:e1: 00:31:d2:22:37:8b:ca:d5:84:5e:70:83:ff:a3:f4: ce:13:aa:b7:f0:4f:07:2a:a9:41:52:2d:f9:73:e2: 22:ff:98:08:9d:b7:a2:8c:6c:36:03:46:30:bc:1f: a6:cc:87:83:1a:73:e2:c0:c7:2d:7b:67:c7:5c:de: 62:f3:05:81:48:a8:24:db:38:0e:0e:0c:ea:f0:26: 05:2a:3d:58:78:35:fe:d4:d2:05:73:01:7b:d1:37: 71:5d:f6:03:1f:16:b4:b2:46:71:e3:f2:e1:2a:44: 11:79:9b:a9:98:e7:db:13:aa:5a:f2:37:c1:e8:bd: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A4:43:F6:6F:21:C9:55:81:43:E8:79:A2:65:4B:DF:35:56:61:33 X509v3 Authority Key Identifier: keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:98:08:58:c7:73:f0:70:3a:d1:75:26:e2:5d:d9:30:eb:d8: dd:ed:69:ee:39:5e:b7:cc:63:77:df:59:cd:91:7e:73:d0:7b: 88:05:f2:f2:10:8b:47:c3:13:e5:5a:53:39:55:69:ed:02:f9: de:d0:25:d8:fd:59:aa:07:7a:fa:3e:e9:6c:81:8c:be:83:22: c3:1d:d4:3d:38:73:9d:c5:56:1f:84:c0:c8:b8:96:7e:b6:74: fe:4c:88:6b:dd:0b:dc:de:f2:9a:53:ae:ca:21:48:46:f0:f3: 41:89:43:f0:1b:7b:c1:d5:3c:12:b7:13:17:a5:79:cd:10:d4: f7:0e:58:c9:95:de:72:ee:ed:a9:83:af:68:c4:1a:62:fc:26: f5:16:f8:c0:e4:17:75:00:ea:29:40:b7:3e:cb:85:73:88:d9: 9e:a0:0e:1d:cd:e4:66:67:33:32:97:24:eb:b3:8d:e9:3d:e4: 98:28:9e:96:96:1d:d9:1a:fe:17:ac:fc:31:07:bc:83:f2:fd: d4:16:35:47:3e:86:ea:20:f9:ed:79:58:61:af:b7:ef:ed:14: 5f:69:ac:e1:ff:8e:4e:66:ad:b4:de:bc:81:70:2c:a6:78:bc: 0f:8f:e4:32:a4:76:dd:7e:d1:08:d6:da:b8:d6:09:cf:00:87: 18:36:d8:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMkQxMTAvBgNVBAUTKDNBNjhBMjIyQzJDMENGNDE0MzBDMDk2OEQyMzA5QUE4 OTNDNzRBM0IwHhcNMjUwNjA1MDAxOTU3WhcNMjUwNjEyMDAxOTU3WjAYMRYwFAYD VQQDEw02ODQwZTJhZC04ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmV68v8jDJEYAQFnY7TEiT2ohq3D5my+QDCmEKrVK0OXmLBNB34OEPQOkrfd+ xGSkV9BruSDfKZLlrLHEYBran9fP65YvEgL3+OdG28aF1wdYOuzMI0qy3dvwnFPz 1yblKZi5dJvKAFpg9039klCaOLIkm57AZLk51wGl5Z41cYdS1puE1+EAMdIiN4vK 1YRecIP/o/TOE6q38E8HKqlBUi35c+Ii/5gInbeijGw2A0YwvB+mzIeDGnPiwMct e2fHXN5i8wWBSKgk2zgODgzq8CYFKj1YeDX+1NIFcwF70TdxXfYDHxa0skZx4/Lh KkQReZupmOfbE6pa8jfB6L1nyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHukQ/Zv IclVgUPoeaJlS981VmEzMB8GA1UdIwQYMBaAFDpooiLCwM9BQwwJaNIwmqiTx0o7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMyRC84NkZEMTM4ODc5 MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXowRkREQWxvMGpDYXFKUEhT anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09taWlJc0xBejBGRERBbG8wakNhcUpQSFNqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMyRC84NkZEMTM4ODc5MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXow RkREQWxvMGpDYXFKUEhTanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJmAhYx3PwcDrRdSbiXdkw69jd7WnuOV63zGN331nNkX5z0HuIBfLy EItHwxPlWlM5VWntAvne0CXY/VmqB3r6PulsgYy+gyLDHdQ9OHOdxVYfhMDIuJZ+ tnT+TIhr3Qvc3vKaU67KIUhG8PNBiUPwG3vB1TwStxMXpXnNENT3DljJld5y7u2p g69oxBpi/Cb1FvjA5Bd1AOopQLc+y4VziNmeoA4dzeRmZzMylyTrs43pPeSYKJ6W lh3ZGv4XrPwxB7yD8v3UFjVHPobqIPnteVhhr7fv7RRfaazh/45OZq203ryBcCym eLwPj+QypHbdftEI1tq41gnPAIcYNtgP -----END CERTIFICATE-----Generated at Fri Jun 6 17:20:40 2025 by rpki-client