$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: NOfp+opqmkJfy4v5Xr+YmoNJ/MPkNB1V/IxT1awSQ1o= Subject key identifier: 12:33:CA:02:7B:91:C3:44:42:D6:AD:04:2A:11:AC:EF:78:01:B0:65 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 022B Signing time: Sat 07 Jun 2025 01:59:31 +0000 Manifest this update: Sat 07 Jun 2025 01:59:31 +0000 Manifest next update: Sat 14 Jun 2025 01:59:31 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: wKSgOp68w3nKNCa+Dn6nI5DBlTfHvil6k5xFKTDTrhQ=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=) 3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=) 4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Jun 7 01:59:31 2025 GMT Not After : Jun 14 01:59:31 2025 GMT Subject: CN=68439d03-71d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:82:74:0c:52:81:5b:36:43:10:2a:48:19: f9:d0:15:2b:1f:41:22:91:6c:5e:74:99:a9:84:15: 8c:b2:2a:59:04:af:00:a2:ed:09:e1:b0:56:92:ad: 55:1b:69:af:0c:11:01:57:cd:54:9c:e7:5e:6e:d6: df:95:89:8c:87:65:2f:3a:43:4e:8f:69:fa:b5:7b: dd:94:7d:45:25:15:65:06:58:0c:02:8f:91:55:8b: 77:f7:e4:b2:4f:79:7d:ed:1b:93:27:41:9a:c6:56: 4b:93:57:9e:ef:0e:ba:37:08:e6:87:9c:fb:d4:bf: 38:e0:e5:72:21:b6:e4:c6:a8:a6:b0:b7:60:c6:db: 95:c1:18:fa:47:a6:41:22:60:4e:3b:83:d8:21:90: 9e:ea:c0:9c:83:b8:a0:5e:e7:16:65:34:41:75:f8: e1:d2:03:15:35:09:46:37:55:96:75:6d:48:61:b7: 84:6f:37:65:33:dd:ee:cc:1a:52:e8:a8:a8:66:85: 23:9b:a5:de:56:13:0b:f6:79:03:20:a6:f3:43:2d: b5:7c:35:54:49:c4:d3:5f:7d:5a:fa:28:1c:3b:ff: 51:ad:11:77:52:15:d4:1f:fc:19:68:2c:eb:0b:59: 21:51:b6:6a:5f:96:4f:27:47:fd:ea:f8:0c:27:5c: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:33:CA:02:7B:91:C3:44:42:D6:AD:04:2A:11:AC:EF:78:01:B0:65 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cb:23:be:ef:ca:19:ee:19:f2:a0:fa:d4:0e:0e:9a:d8:29: 83:25:f6:76:7a:5f:42:53:93:a3:bb:36:32:65:9a:e1:48:9a: 8b:79:c0:91:9a:d5:cc:ca:91:a7:83:0a:b0:4c:68:86:5a:db: dc:7c:03:5d:b5:c0:b4:55:90:d1:43:16:d7:fd:df:15:61:4a: b4:a1:a0:e9:80:32:60:bf:a6:b9:8a:10:e9:85:17:20:0b:f9: e5:8c:8b:b0:f8:c8:5f:c8:57:12:82:08:b8:a7:db:9d:d0:66: 2b:cb:d9:af:ad:ef:52:13:f4:34:1e:43:5d:76:64:29:18:d7: 62:54:35:28:df:95:ad:f4:d6:47:70:4f:5c:72:b4:e9:41:a9: 28:3a:97:8e:b2:f8:ac:81:a7:8c:71:e5:e9:40:be:a5:d1:d0: 09:22:b2:a6:d1:37:c0:32:7b:15:d0:55:87:60:06:19:c7:c6: 13:bf:e3:93:4f:6e:29:00:ea:af:de:cd:b6:57:64:7b:2c:94: b1:3d:63:2f:89:88:cf:ee:9c:73:0d:e7:1b:b7:ac:79:98:df: 01:b3:43:b6:5e:f8:d1:c1:f8:26:a8:2a:e9:03:73:b2:67:cd: b8:76:d3:77:6f:0e:a9:c0:1a:e2:79:e3:b5:76:fe:ad:ba:f4: 49:69:4a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUwNjA3MDE1OTMxWhcNMjUwNjE0MDE1OTMxWjAYMRYwFAYD VQQDEw02ODQzOWQwMy03MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2qCdAxSgVs2QxAqSBn50BUrH0EikWxedJmphBWMsipZBK8Aou0J4bBWkq1V G2mvDBEBV81UnOdebtbflYmMh2UvOkNOj2n6tXvdlH1FJRVlBlgMAo+RVYt39+Sy T3l97RuTJ0GaxlZLk1ee7w66Nwjmh5z71L844OVyIbbkxqimsLdgxtuVwRj6R6ZB ImBOO4PYIZCe6sCcg7igXucWZTRBdfjh0gMVNQlGN1WWdW1IYbeEbzdlM93uzBpS 6KioZoUjm6XeVhML9nkDIKbzQy21fDVUScTTX31a+igcO/9RrRF3UhXUH/wZaCzr C1khUbZqX5ZPJ0f96vgMJ1z+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIzygJ7 kcNEQtatBCoRrO94AbBlMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4yyO+78oZ7hnyoPrUDg6a2CmDJfZ2el9CU5OjuzYyZZrhSJqLecCR mtXMypGngwqwTGiGWtvcfANdtcC0VZDRQxbX/d8VYUq0oaDpgDJgv6a5ihDphRcg C/nljIuw+MhfyFcSggi4p9ud0GYry9mvre9SE/Q0HkNddmQpGNdiVDUo35Wt9NZH cE9ccrTpQakoOpeOsvisgaeMceXpQL6l0dAJIrKm0TfAMnsV0FWHYAYZx8YTv+OT T24pAOqv3s22V2R7LJSxPWMviYjP7pxzDecbt6x5mN8Bs0O2XvjRwfgmqCrpA3Oy Z824dtN3bw6pwBrieeO1dv6tuvRJaUok -----END CERTIFICATE-----Generated at Sat Jun 7 14:29:58 2025 by rpki-client