$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: dqHTcTScyK8sj1vRIKaXMSYxZw8eG0p9Fw8/JQptvFg= Subject key identifier: BB:02:68:AF:5E:40:34:FF:80:A9:8E:AA:18:F2:96:38:01:07:88:7B Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: C6 Signing time: Fri 18 Jul 2025 22:07:27 +0000 Manifest this update: Fri 18 Jul 2025 22:07:27 +0000 Manifest next update: Fri 25 Jul 2025 22:07:27 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: gkMMJwRVT9yU201QpTZSxPz6jfpU8oz9I+EjW4wAZKA=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Jul 18 22:07:27 2025 GMT Not After : Jul 25 22:07:27 2025 GMT Subject: CN=687ac59f-bebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:66:f9:18:61:76:68:84:b1:0d:65:e5:ed: 07:de:7b:17:ff:8a:ac:04:a2:73:e9:d1:dc:20:b9: 6b:10:7f:9a:74:b9:28:5e:e9:ec:75:30:16:64:5f: 11:76:30:f7:ff:1a:d4:99:73:d5:a4:95:f1:48:ab: bf:c5:21:07:7e:e2:3d:2f:41:36:f7:94:5c:f4:28: dd:6e:4a:57:bd:24:eb:f0:02:73:80:cd:7c:12:54: 5e:ce:01:d6:00:85:2f:c0:7c:6b:fd:c3:a2:d7:e2: 8c:34:d9:b9:f3:f8:e3:80:6f:23:3c:92:fb:dc:85: 00:30:91:2b:5c:f4:9f:76:91:f8:31:aa:7b:2c:97: c6:af:66:ab:5b:0c:46:d9:f3:b8:c7:c4:93:b3:b8: 74:fe:3d:85:47:3b:f4:a6:b2:53:bb:f7:2f:eb:aa: e5:ee:0c:09:b6:6e:9f:29:bf:98:91:1e:3e:7f:65: 35:cc:a4:f0:73:aa:6b:8b:6a:1f:9b:06:b2:4d:b0: 7b:fd:5d:08:8e:06:e8:3d:d8:8e:86:7a:25:80:f6: 64:93:2a:b7:6c:6c:00:61:dd:ab:ff:48:8f:9a:0d: e9:04:1c:22:64:2d:ca:64:70:da:9b:9c:e8:c5:5c: 1d:a8:fa:f5:1f:1c:5e:34:3a:b6:a5:99:bf:ab:3e: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:02:68:AF:5E:40:34:FF:80:A9:8E:AA:18:F2:96:38:01:07:88:7B X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:47:a9:07:80:84:4d:fe:97:f3:40:88:15:07:16:b9:24:35: 65:dc:44:fd:07:27:f0:4e:bf:f4:b9:30:e8:a6:15:5f:f8:eb: 60:f1:9c:5a:ac:64:3e:18:20:2a:4c:12:34:56:40:1b:d8:ed: cd:10:37:a5:39:91:c0:b5:25:a0:0c:8d:eb:9b:81:7d:03:75: 2e:cd:44:30:f2:9d:2b:45:68:d7:3f:05:31:80:ca:91:f9:04: 43:b8:d8:b2:90:b7:78:6c:c6:62:f5:2f:2f:14:9e:39:50:d8: b1:d8:67:af:1e:55:2e:7e:ca:8d:c6:e0:30:fb:4d:8e:ef:d7: ec:29:17:bb:54:29:b7:cf:74:f6:90:fe:f3:2b:3d:d6:bf:b9: 81:6d:4c:e7:b4:83:3a:9b:f8:22:b6:80:15:bb:39:b6:51:62: 0e:95:67:a7:9b:3e:cf:4d:a9:19:bb:0a:ab:91:7a:a5:50:32: bd:9c:87:8a:70:87:d4:df:8c:26:a2:8a:43:42:74:eb:6a:5c: 3e:a8:c0:1d:a8:7b:89:3b:db:ab:17:a6:88:8c:e0:8f:2c:49: b9:e5:f1:7b:ac:a6:7d:f8:5c:6a:a4:54:0a:2f:e8:f9:54:44: 4f:8b:d9:6b:df:3e:0c:2e:65:22:b8:8d:10:23:a9:81:ca:74: 57:43:f4:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUwNzE4MjIwNzI3WhcNMjUwNzI1MjIwNzI3WjAYMRYwFAYD VQQDEw02ODdhYzU5Zi1iZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuxm+RhhdmiEsQ1l5e0H3nsX/4qsBKJz6dHcILlrEH+adLkoXunsdTAWZF8R djD3/xrUmXPVpJXxSKu/xSEHfuI9L0E295Rc9CjdbkpXvSTr8AJzgM18ElRezgHW AIUvwHxr/cOi1+KMNNm58/jjgG8jPJL73IUAMJErXPSfdpH4Map7LJfGr2arWwxG 2fO4x8STs7h0/j2FRzv0prJTu/cv66rl7gwJtm6fKb+YkR4+f2U1zKTwc6pri2of mwayTbB7/V0IjgboPdiOhnolgPZkkyq3bGwAYd2r/0iPmg3pBBwiZC3KZHDam5zo xVwdqPr1HxxeNDq2pZm/qz5IAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsCaK9e QDT/gKmOqhjyljgBB4h7MB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASR6kHgIRN/pfzQIgVBxa5JDVl3ET9ByfwTr/0uTDophVf+Otg8Zxa rGQ+GCAqTBI0VkAb2O3NEDelOZHAtSWgDI3rm4F9A3UuzUQw8p0rRWjXPwUxgMqR +QRDuNiykLd4bMZi9S8vFJ45UNix2GevHlUufsqNxuAw+02O79fsKRe7VCm3z3T2 kP7zKz3Wv7mBbUzntIM6m/gitoAVuzm2UWIOlWenmz7PTakZuwqrkXqlUDK9nIeK cIfU34wmoopDQnTralw+qMAdqHuJO9urF6aIjOCPLEm55fF7rKZ9+FxqpFQKL+j5 VERPi9lr3z4MLmUiuI0QI6mBynRXQ/S9 -----END CERTIFICATE-----Generated at Sun Jul 20 15:17:04 2025 by rpki-client