$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft File: 0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json) Hash identifier: 6HG+6HQvfUFMnehBJJx+pyWLrI9g6q7A81R5sb8VBqI= Subject key identifier: 64:6B:26:45:11:87:53:50:CE:AF:AC:99:61:A1:06:D1:16:11:A4:84 Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD Certificate issuer: /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft Manifest number: 0A28 Signing time: Mon 08 Sep 2025 19:48:15 +0000 Manifest this update: Mon 08 Sep 2025 19:48:14 +0000 Manifest next update: Mon 15 Sep 2025 19:48:14 +0000 Files and hashes: 1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: TxdcdLhlzQIFo+MKLY5L0LF6Xbvc/CILkIb3IV74HZc=) 2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD Validity Not Before: Sep 8 19:48:14 2025 GMT Not After : Sep 15 19:48:14 2025 GMT Subject: CN=68bf32ff-a0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:48:dc:c1:50:97:3e:79:ce:41:40:10:c5: 37:dd:00:76:f6:55:bb:b5:62:94:c9:30:15:e4:92: 6a:6b:8b:89:fc:85:f3:0b:20:af:a0:2a:92:cb:cd: 81:a0:ae:0d:50:ce:30:5e:ef:b2:d0:33:ab:0d:63: dc:59:08:ee:32:35:d9:08:dc:c6:53:3d:df:8b:fa: e5:7d:7c:76:dc:b0:81:28:1e:f6:ba:d4:9f:c0:48: 4b:70:5c:da:39:03:db:81:1f:6e:03:87:d5:94:d2: 25:15:bb:e0:bb:8a:a4:78:e1:75:42:0b:df:a7:1e: f4:5b:cb:60:6b:98:9d:76:c8:1c:87:0e:dd:d3:a6: 01:2f:05:3c:64:56:e5:b3:14:c4:f1:6f:4c:63:f8: ce:1a:43:7a:7f:b9:c8:59:09:63:fb:8e:c9:1c:06: 28:b1:52:7d:7a:28:8e:fe:f9:b8:14:57:87:de:0d: 9b:59:94:8b:9c:5e:04:90:0c:b6:fc:3a:38:65:91: f1:9e:f6:f4:51:e4:9c:1c:bc:f8:b0:f6:ad:50:11: 5f:5f:df:bd:57:b5:18:04:ad:39:85:1b:cb:17:8b: 79:7b:bf:e6:3c:ba:0c:5b:f4:f0:ff:e6:9b:7f:1f: 7a:9a:76:f6:fa:da:ec:f6:ae:a6:81:7c:a5:1a:ee: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6B:26:45:11:87:53:50:CE:AF:AC:99:61:A1:06:D1:16:11:A4:84 X509v3 Authority Key Identifier: keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:59:96:a9:f0:00:a6:0c:03:65:8a:3f:61:65:89:b2:0e:24: 5d:27:ca:e2:fa:ad:39:00:4d:7a:50:1d:6c:e1:db:3e:e3:1f: d0:b8:19:3c:7d:66:0e:2c:14:c9:6e:02:6b:88:19:b4:52:64: f1:e8:18:95:ca:d8:6c:72:5c:d6:6b:86:f2:51:2f:a3:6c:6c: 62:d2:0d:2c:ee:77:c9:b4:da:83:e5:f0:3f:d4:57:90:cd:7a: 31:96:cf:a5:c8:95:7b:52:61:e4:01:0b:43:5f:9f:7f:46:4e: 93:68:4c:29:14:66:3e:89:9b:e0:c3:44:f3:69:3c:80:4f:d7: 39:6d:8b:2c:f5:ee:9c:f3:60:a3:1c:46:cb:18:ca:35:5c:76: b8:f4:bf:4b:0d:84:ca:8c:d7:a7:0f:58:34:e5:55:4a:fa:b6: 31:75:f0:78:b5:34:60:6e:23:8e:22:91:86:9c:80:c5:3c:12: 64:b7:1e:f6:f1:f1:5c:ff:ac:97:a9:13:c7:ea:90:47:7b:93: 84:19:1e:6a:67:24:7b:66:da:ce:74:51:08:8c:1d:00:2b:f2: 21:68:95:06:04:41:30:88:cc:9a:e5:2a:da:f0:db:0e:5b:aa: ed:9b:93:48:dd:ef:12:33:d7:c2:a9:47:79:4d:6f:d3:f0:df: 48:ae:14:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3NTgxMTAvBgNVBAUTKEQwQTNBNjlFMkFDMTBDMkMxMDUzRjcyRjc0OTk0N0VD MjJCOUMzQ0QwHhcNMjUwOTA4MTk0ODE0WhcNMjUwOTE1MTk0ODE0WjAYMRYwFAYD VQQDEw02OGJmMzJmZi1hMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJtI3MFQlz55zkFAEMU33QB29lW7tWKUyTAV5JJqa4uJ/IXzCyCvoCqSy82B oK4NUM4wXu+y0DOrDWPcWQjuMjXZCNzGUz3fi/rlfXx23LCBKB72utSfwEhLcFza OQPbgR9uA4fVlNIlFbvgu4qkeOF1Qgvfpx70W8tga5iddsgchw7d06YBLwU8ZFbl sxTE8W9MY/jOGkN6f7nIWQlj+47JHAYosVJ9eiiO/vm4FFeH3g2bWZSLnF4EkAy2 /Do4ZZHxnvb0UeScHLz4sPatUBFfX9+9V7UYBK05hRvLF4t5e7/mPLoMW/Tw/+ab fx96mnb2+trs9q6mgXylGu66kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRrJkUR h1NQzq+smWGhBtEWEaSEMB8GA1UdIwQYMBaAFNCjpp4qwQwsEFP3L3SZR+wiucPN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDc1OC8zMzM4OTg4NDc5 N0IxMUVBOUIyN0VDMzdDNEY5QUUwMi8wS09tbmlyQkRDd1FVX2N2ZEpsSDdDSzV3 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLT21uaXJCREN3UVVfY3ZkSmxIN0NLNXc4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDc1OC8zMzM4OTg4NDc5N0IxMUVBOUIyN0VDMzdDNEY5QUUwMi8wS09tbmlyQkRD d1FVX2N2ZEpsSDdDSzV3ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVWZap8ACmDANlij9hZYmyDiRdJ8ri+q05AE16UB1s4ds+4x/QuBk8 fWYOLBTJbgJriBm0UmTx6BiVythsclzWa4byUS+jbGxi0g0s7nfJtNqD5fA/1FeQ zXoxls+lyJV7UmHkAQtDX59/Rk6TaEwpFGY+iZvgw0TzaTyAT9c5bYss9e6c82Cj HEbLGMo1XHa49L9LDYTKjNenD1g05VVK+rYxdfB4tTRgbiOOIpGGnIDFPBJktx72 8fFc/6yXqRPH6pBHe5OEGR5qZyR7ZtrOdFEIjB0AK/IhaJUGBEEwiMya5Sra8NsO W6rtm5NI3e8SM9fCqUd5TW/T8N9IrhRL -----END CERTIFICATE-----Generated at Tue Sep 9 14:10:03 2025 by rpki-client