$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft File: omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json) Hash identifier: VE1Nx3jZ+rS+Vi2tm5LQ1M2MVx8Ycbnbpz7xvp8RiDo= Subject key identifier: 3F:5B:72:CC:17:DB:6B:1B:DE:5C:94:F3:38:9F:99:DC:16:47:FB:BF Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft Manifest number: AB Signing time: Mon 03 Nov 2025 06:12:21 +0000 Manifest this update: Mon 03 Nov 2025 06:12:20 +0000 Manifest next update: Mon 10 Nov 2025 06:12:20 +0000 Files and hashes: 1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: i80yHOueeCOVYUix9nwupyN7TXUI6RwoEoucvcH/TzA=) 2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Nov 3 06:12:20 2025 GMT Not After : Nov 10 06:12:20 2025 GMT Subject: CN=690847c4-7984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:93:ed:4c:44:1c:69:bf:34:9d:14:c2:cd: e0:1f:ed:79:d3:5c:02:17:13:c2:f7:de:99:d2:fd: ad:b1:bb:45:5e:75:ed:cc:25:36:91:d0:ea:7a:ac: 1e:fb:da:9e:bc:70:95:60:cd:87:b5:da:34:2a:c3: aa:34:ef:e8:b6:f0:39:0f:e8:9f:5b:44:7c:73:d8: 99:55:b3:40:f7:c5:b2:6f:22:c7:48:c5:fb:0f:1a: fb:47:dc:84:ce:67:76:e5:a9:0a:59:66:53:7b:2a: 8a:35:b0:17:72:d1:54:a1:ea:8b:74:08:51:42:45: c1:59:97:f5:39:c7:f5:c8:fe:41:ae:ed:17:17:62: a3:ee:e2:83:3d:2e:05:cf:b7:09:12:f9:dd:66:c4: c0:88:28:b6:85:d6:61:d3:07:50:31:c1:4d:de:d9: be:f9:47:d4:bf:df:b8:2c:a9:59:89:9c:8f:12:b0: d2:37:f0:0f:a5:c1:60:fd:30:2b:ad:0b:8c:42:d3: a1:cc:6b:79:c2:3e:41:27:a0:8d:6e:38:2d:c6:1f: a3:c4:ee:b5:81:b0:07:80:f3:58:cd:0e:e6:1b:ec: 9d:5f:54:f5:0f:28:0a:65:7f:9b:ab:76:1f:7a:3d: c3:61:4e:24:a8:53:cc:03:7e:da:22:dd:4e:a2:1f: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5B:72:CC:17:DB:6B:1B:DE:5C:94:F3:38:9F:99:DC:16:47:FB:BF X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:af:27:0f:62:37:36:3f:ec:6d:99:50:65:35:41:df:97:18: 8d:c8:47:23:08:7d:5d:c1:4d:51:ff:89:35:16:1f:e0:07:30: 10:69:15:2b:e2:d9:ec:48:59:f7:7a:3d:ff:c8:9b:cc:04:f9: 66:57:43:61:3b:75:b6:33:94:34:b0:92:4a:3e:9f:3d:91:4c: 9c:4f:a6:82:76:2e:5d:7c:b4:0b:2b:11:4d:e6:47:ca:ea:db: 06:84:9c:7e:34:d0:9f:09:99:4d:9d:52:21:3c:8b:79:66:42: 89:12:39:74:00:fd:0f:ca:84:20:14:6d:ac:b8:01:09:15:fc: 81:56:f1:c3:be:47:f1:2c:7b:54:2e:37:d1:1c:8b:f5:05:59: 9b:b2:02:3c:5b:05:c5:e3:12:4d:81:83:ff:ac:c0:48:21:7e: 91:df:ef:77:d6:8f:1b:9d:0b:8f:4d:18:f3:74:ce:13:de:0d: 3f:e4:88:6a:98:58:c8:2f:72:5c:d4:92:f5:ac:bd:9f:c8:3b: e8:f1:34:f9:40:15:57:b2:98:84:33:be:0f:8e:83:9f:ff:ec: 61:7a:df:92:e3:3d:78:49:3e:c1:29:54:c2:3f:cf:a3:50:a4: e3:94:31:c3:96:f3:26:90:4b:57:6c:22:a0:26:10:da:a0:05: d6:86:f5:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EwQzAxMTAvBgNVBAUTKEEyNjYxNjdBMDRGQUZFRTVBRTFBNTBFMDQ1NzBBRDVG RDQ0RUQ2OTIwHhcNMjUxMTAzMDYxMjIwWhcNMjUxMTEwMDYxMjIwWjAYMRYwFAYD VQQDEw02OTA4NDdjNC03OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V6T7UxEHGm/NJ0Uws3gH+1501wCFxPC996Z0v2tsbtFXnXtzCU2kdDqeqwe +9qevHCVYM2Htdo0KsOqNO/otvA5D+ifW0R8c9iZVbNA98WybyLHSMX7Dxr7R9yE zmd25akKWWZTeyqKNbAXctFUoeqLdAhRQkXBWZf1Ocf1yP5Bru0XF2Kj7uKDPS4F z7cJEvndZsTAiCi2hdZh0wdQMcFN3tm++UfUv9+4LKlZiZyPErDSN/APpcFg/TAr rQuMQtOhzGt5wj5BJ6CNbjgtxh+jxO61gbAHgPNYzQ7mG+ydX1T1DygKZX+bq3Yf ej3DYU4kqFPMA37aIt1Ooh+eJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9bcswX 22sb3lyU8zifmdwWR/u/MB8GA1UdIwQYMBaAFKJmFnoE+v7lrhpQ4EVwrV/UTtaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTBDMC80QTJFREM4MEI1 RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91V3VHbERnUlhDdFg5Uk8x cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91 V3VHbERnUlhDdFg5Uk8xcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+rycPYjc2P+xtmVBlNUHflxiNyEcjCH1dwU1R/4k1Fh/gBzAQaRUr 4tnsSFn3ej3/yJvMBPlmV0NhO3W2M5Q0sJJKPp89kUycT6aCdi5dfLQLKxFN5kfK 6tsGhJx+NNCfCZlNnVIhPIt5ZkKJEjl0AP0PyoQgFG2suAEJFfyBVvHDvkfxLHtU LjfRHIv1BVmbsgI8WwXF4xJNgYP/rMBIIX6R3+931o8bnQuPTRjzdM4T3g0/5Ihq mFjIL3Jc1JL1rL2fyDvo8TT5QBVXspiEM74PjoOf/+xhet+S4z14ST7BKVTCP8+j UKTjlDHDlvMmkEtXbCKgJhDaoAXWhvUf -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:33 2025 by rpki-client