$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: MhLNMeQkg45uSyDqIcxqv9AuyUEmgE9qDfH0G4gOaHk= Subject key identifier: 13:DC:FA:6B:4F:39:A8:E8:12:D4:13:45:23:1A:79:7F:EE:E8:32:3F Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 0251 Signing time: Thu 21 Aug 2025 02:01:23 +0000 Manifest this update: Thu 21 Aug 2025 02:01:22 +0000 Manifest next update: Thu 28 Aug 2025 02:01:22 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: d3FnaSKoizoUnBpTspLw79GOirle6CrlmAYiMtWBtBk=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Aug 21 02:01:22 2025 GMT Not After : Aug 28 02:01:22 2025 GMT Subject: CN=68a67df2-dc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:a5:c9:11:3d:d1:e3:4b:74:6d:82:cb:de: 22:cd:a0:d7:54:a6:69:b3:15:56:cc:1e:a9:8f:e2: 9a:9b:45:35:94:61:cf:39:bb:a9:79:a1:5f:e3:86: 39:e6:61:d6:3b:8e:c5:f9:0e:77:71:3e:07:fa:2f: ab:e5:5f:59:94:1c:3a:ae:9c:78:73:99:3b:27:f0: af:ee:dd:fa:ba:21:a0:04:f2:e2:83:a4:bf:ef:c9: 86:8f:da:ff:16:5a:a8:db:47:ce:80:77:00:b8:5d: 6c:f3:c7:59:d5:9e:6e:50:00:ce:58:d8:b9:29:25: e5:77:6b:86:43:2b:39:d3:16:c1:84:44:8e:f4:2b: 64:ed:af:26:2b:94:3c:93:ec:14:9e:bf:32:13:96: 4f:34:e7:1d:88:30:bc:a1:16:72:c7:16:59:f2:78: e4:0b:f9:7e:3b:0e:ca:71:46:3b:b1:46:9c:0a:dd: f8:94:c5:1c:2a:37:36:33:ce:b5:8c:a5:7a:c9:f0: 84:6b:91:79:2d:a5:65:1b:a4:6e:bc:92:2d:24:5b: 17:14:49:da:6c:fb:89:3e:8f:af:ff:bd:c9:11:e0: 65:41:0a:f9:33:59:1a:45:ce:e6:e7:00:e3:45:ce: 1f:63:08:ef:5b:e4:b0:40:12:c8:b5:f2:6c:7f:2c: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DC:FA:6B:4F:39:A8:E8:12:D4:13:45:23:1A:79:7F:EE:E8:32:3F X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d6:63:62:0a:d7:26:ac:cf:4c:d7:48:03:7b:dc:46:f1:3c: d4:f0:ef:71:23:6e:68:3e:51:fc:b5:f1:17:21:a6:91:49:2d: c1:d9:09:96:1c:dc:04:66:22:26:12:00:96:15:1b:48:fd:a0: 34:1f:e5:2b:b3:4c:c8:4b:45:c3:c8:1b:1b:56:07:55:ec:db: e6:af:90:7a:65:f6:4e:f2:6b:63:9d:cd:ce:e9:e9:5c:17:5a: e7:9c:a7:4d:91:05:df:47:ef:9f:e9:06:93:86:a8:e4:f3:e5: 26:07:d1:9d:99:40:c3:41:00:3a:e8:9d:3a:89:1c:b2:93:9f: 01:fd:a2:29:91:63:b6:86:6d:ed:3e:c2:54:c9:e2:b5:0c:99: 7e:eb:c4:8a:ec:a4:9a:7b:c0:c8:6f:52:78:d8:b1:02:c2:03: 5a:5f:ea:cb:2b:4b:b6:88:1b:dd:6f:0f:82:56:f0:28:39:2b: a9:a6:69:0d:ed:66:64:66:1f:7c:e4:99:36:7f:bf:0f:12:c0: 60:bf:91:ea:85:1d:fc:07:a8:ae:31:63:76:d7:8b:76:df:c5: 5d:2a:73:d6:6c:86:77:cd:c7:e3:eb:dc:ed:dd:8c:92:24:51: de:3a:e6:f6:85:0d:af:78:e8:34:0f:44:d7:1f:ab:c0:40:ec: 1e:61:52:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUwODIxMDIwMTIyWhcNMjUwODI4MDIwMTIyWjAYMRYwFAYD VQQDEw02OGE2N2RmMi1kYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1mlyRE90eNLdG2Cy94izaDXVKZpsxVWzB6pj+Kam0U1lGHPObupeaFf44Y5 5mHWO47F+Q53cT4H+i+r5V9ZlBw6rpx4c5k7J/Cv7t36uiGgBPLig6S/78mGj9r/ Flqo20fOgHcAuF1s88dZ1Z5uUADOWNi5KSXld2uGQys50xbBhESO9Ctk7a8mK5Q8 k+wUnr8yE5ZPNOcdiDC8oRZyxxZZ8njkC/l+Ow7KcUY7sUacCt34lMUcKjc2M861 jKV6yfCEa5F5LaVlG6RuvJItJFsXFEnabPuJPo+v/73JEeBlQQr5M1kaRc7m5wDj Rc4fYwjvW+SwQBLItfJsfyyd3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPc+mtP OajoEtQTRSMaeX/u6DI/MB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd1mNiCtcmrM9M10gDe9xG8TzU8O9xI25oPlH8tfEXIaaRSS3B2QmW HNwEZiImEgCWFRtI/aA0H+Urs0zIS0XDyBsbVgdV7Nvmr5B6ZfZO8mtjnc3O6elc F1rnnKdNkQXfR++f6QaThqjk8+UmB9GdmUDDQQA66J06iRyyk58B/aIpkWO2hm3t PsJUyeK1DJl+68SK7KSae8DIb1J42LECwgNaX+rLK0u2iBvdbw+CVvAoOSuppmkN 7WZkZh985Jk2f78PEsBgv5HqhR38B6iuMWN214t238VdKnPWbIZ3zcfj69zt3YyS JFHeOub2hQ2veOg0D0TXH6vAQOweYVLG -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:12 2025 by rpki-client